torrevecchiapia.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:35:03:18:fa:c3:4e:b3:a2:91:25:5e:e8:4b:da:a2:e3:59 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=torrevecchiapia.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:03:18:fa:c3:4e:b3:a2:91:25:5e:e8:4b:da:a2:e3:59Serial Number (int): 279375940627278687686300117566721253106521
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5d:1a:97:c9:db:45:d4:94:96:a8:08:2b:3b:f7:ea:5e:f9:5d:b9:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9a:37:6e:25:39:a5:a8:d6:b5:82:b7:23:e9:9b:55:ef:1e:4a:b4:a7
Fingerprint (sha256): a7:23:5d:1e:de:d3:ab:e1:15:5c:8f:45:a0:ad:58:f4:14:4d:bd:46:6b:d1:c7:ea:c5:4f:01:0a:87:be:6f:d6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate torrevecchiapia.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for torrevecchiapia.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
torrevecchiapia.com
Other certificates including the domain name torrevecchiapia.com
(limited to 100 certificates)
torrevecchiapia.com
torrevecchiapia.com
www.torrevecchiapia.com
torrevecchiapia.com
torrevecchiapia.com
www.swingle.boston
torrevecchiapia.com
torrevecchiapia.com
andamane.org
swedish.bible
www.torrevecchiapia.com
woodside.bible
www.torrevecchiapia.com
torrevecchiapia.com
www.torrevecchiapia.com
cassanomagnago.org
www.torrevecchiapia.com
torrevecchiapia.com
www.torrevecchiapia.com
torrevecchiapia.com
torrevecchiapia.com
www.swingle.boston
torrevecchiapia.com
torrevecchiapia.com
andamane.org
swedish.bible
www.torrevecchiapia.com
woodside.bible
www.torrevecchiapia.com
torrevecchiapia.com
www.torrevecchiapia.com
cassanomagnago.org
www.torrevecchiapia.com
Certificate
The complete raw certificate details for torrevecchiapia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISAzUDGPrDTrOikSVe6EvaouNZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDcxNjA5MDFaFw0y MDA3MDYxNjA5MDFaMB4xHDAaBgNVBAMTE3RvcnJldmVjY2hpYXBpYS5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDCMwzypLTBaBO4qlWWAN700X7f naNZAi+MyUBaUJQ9zE736jKvNfnhDMXXkjX7kSYvOVCF5voRCG3FmA8lboODLMGy L9A4Iu8q8ygXik5+2WbT9kLaR9qm9sDKq/qjieN+w7jx5sBsszBix2SoAT5iZ9zS hA1yEufSiHx3btyE1DZQwte/Pl6ERsLf2U2aWf4VLkzTPr6EcEdGybrjPgXD4M+c tGh+KgN6lBZg660EJPlSRth1z307snqrRcbwGyuAQ9nJZrTvy0sd4LEAMB39v2ao L43A7eUD6S2tbYJGztXWAWqKsFpGh90naJN+/80CJaZ1bdVnUddGWUmVXAQZAUdg NEhdws9G9UnmGuiHa+VfdofVUNGMXZU4FgoGvptXQPHjY4AMSq/bImIj/xgHnIne CxK9+pPIFyDDcnAMQLUdtXAWmkRoufD6LK0zxzbYx6ON1J2SOAs0//hpuRbEN7tq c7JVzDDu9xhmDLiWeBF0ZTLDOmqxHKm5/PiSaplU2EXiRExDZOX6cWrRfNlwKuQQ S6P9aTOoccR0Rq+3n1/lMFaujNHp6/H6wKtC1xD0+J9946bcKAO39ZDPrIFquJWB g7VOI3KbFBuGD7d39hY9ZUIuraip1BOkAb5QsSDcKUgwnTD01WgQjcqjbvaSQrdM yHvhA86PAOIR/fh1GQIDAQABo4ICaTCCAmUwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRdGpfJ20XUlJaoCCs79+pe+V25CjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3RvcnJldmVjY2hp YXBpYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFU bgAAAXFVndx7AAAEAwBHMEUCICrOt9VLzxilIDwoWjWpvXON+rhQo8WqKworn+Xl 4ldoAiEA3YvPgXW43dlEZgj39ikr4KMYIMUaMDrakZYi/6F04JMAdwCyHgXMi6LN iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXFVndxuAAAEAwBIMEYCIQDm9wjg NWrT6AfbM+8XkmSmC+cVy6I/GF3g+AxqXKjGugIhANCRdSh3uJ0qnv6MOrbPI2jy xtclEhD53L/nv3oScjkpMA0GCSqGSIb3DQEBCwUAA4IBAQBLLwj6aSsZ+v6DhnW+ n6ryF6EgWCtAOU3IxYktsNz+Qj/5RqDWb2IETmPRpCbbkgxN896qcTnX52nmNBPn 5xAt3JJpmd/nhNU+pUGEK+R9fi45vPf5hJ9d4PhaZ45DiP4pTJ4skRDDzs9uXkJC UYA/Wj/wmUAs9cgo6CGNtl9KtMsOM3Ro886gR/3M8hLQVkpTqLexXV7USe4spCkt NRNDPZHCuK2swgKW9smTS+C7jH8WBToQP+NB5MNFMssq0TK0NCyyyvUIvCXPheoT MHs6Y8kO5I4Xo7ZVRz0hwd5P3Qt4Y7d/KkRhH1HPmK+IzlLw/JyIaBsMf+JSn7G7 C19A -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwjMM8qS0wWgTuKpVlgDe 9NF+352jWQIvjMlAWlCUPcxO9+oyrzX54QzF15I1+5EmLzlQheb6EQhtxZgPJW6D gyzBsi/QOCLvKvMoF4pOftlm0/ZC2kfapvbAyqv6o4njfsO48ebAbLMwYsdkqAE+ Ymfc0oQNchLn0oh8d27chNQ2UMLXvz5ehEbC39lNmln+FS5M0z6+hHBHRsm64z4F w+DPnLRofioDepQWYOutBCT5UkbYdc99O7J6q0XG8BsrgEPZyWa078tLHeCxADAd /b9mqC+NwO3lA+ktrW2CRs7V1gFqirBaRofdJ2iTfv/NAiWmdW3VZ1HXRllJlVwE GQFHYDRIXcLPRvVJ5hroh2vlX3aH1VDRjF2VOBYKBr6bV0Dx42OADEqv2yJiI/8Y B5yJ3gsSvfqTyBcgw3JwDEC1HbVwFppEaLnw+iytM8c22MejjdSdkjgLNP/4abkW xDe7anOyVcww7vcYZgy4lngRdGUywzpqsRypufz4kmqZVNhF4kRMQ2Tl+nFq0XzZ cCrkEEuj/WkzqHHEdEavt59f5TBWrozR6evx+sCrQtcQ9PiffeOm3CgDt/WQz6yB ariVgYO1TiNymxQbhg+3d/YWPWVCLq2oqdQTpAG+ULEg3ClIMJ0w9NVoEI3Ko272 kkK3TMh74QPOjwDiEf34dRkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279375940627278687686300117566721253106521 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 16:09:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 16:09:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'torrevecchiapia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792264496795276640980227600859158719985816871809600442967827614193125871263993772859462612549530863574097132277130551694119148949431079517411806960900443944907192647628531238055163126791525510136396919197458994320927913005482506988163594612466153865153295088320163372059356280766593256614959678973705659520357248430080037309896562132971213098549840368820988720138814196234383792214246287512268411086753583093602940320691080396944680204844443528535733286184783898347955472521341626677728779928654618349441507315123976684663995409614446218156930600326795767025506544408176118331151771950660404250885528558095272569683344583929203009131742222074266083979613651104045740384817957257133196831947761456102530141628059109002714942130570525660876615190377964419785126346608676043035149397642374299903401732783117779177799925494709307321499656807239055659944459386912838594438992554853284954844876589297119826108007788651107634265734314893030322125647472928024887049728501707423392731957776500362777364825508932506713024847917239686022900511313044235140413427271397361001346743609469633845670955459261625157366565751147216547605229217842429980084996135178375877547640581742629200082416113530517277067159698541359022142102902159587990327293209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5d1a97c9db45d49496a8082b3bf7ea5ef95db90a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrevecchiapia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171559ddc7b000004030047304502202aceb7d54bcf18a5203c285a35a9bd738dfab850a3c5aa2b0a2b9fe5e5e25768022100dd8bcf8175b8ddd9446608f7f6292be0a31820c51a303ada919622ffa174e093007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171559ddc6e0000040300483046022100e6f708e0356ad3e807db33ef179264a60be715cba23f185de0f80c6a5ca8c6ba022100d091752877b89d2a9efe8c3ab6cf2368f2c6d7251210f9dcbfe7bf7a12723929 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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