sitoin5passi.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:16:49:2d:ac:65:00:75:cd:04:d2:3d:e9:b6:eb:cc:9e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sitoin5passi.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:16:49:2d:ac:65:00:75:cd:04:d2:3d:e9:b6:eb:cc:9e
Serial Number (int): 275658340185905031256023597936001736756382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:f4:41:8f:b6:4e:ca:ff:11:68:ed:8a:6c:43:2c:41:a8:4c:2d:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:d6:7e:ed:b0:30:5b:e6:d1:66:ac:78:65:4c:d7:5f:56:a6:0d:cf
Fingerprint (sha256): a9:01:f3:a2:c3:15:40:00:d2:a8:86:32:48:08:65:ed:68:42:98:ce:97:67:d6:47:10:64:b3:2f:df:36:0c:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sitoin5passi.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sitoin5passi.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitoin5passi.it
www.sitoin5passi.it

Other certificates including the domain name sitoin5passi.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for sitoin5passi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275658340185905031256023597936001736756382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 22:23:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 22:23:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sitoin5passi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663404348749009311982695501276695026879911393047533356690201393926036029249408622579134552953461964622857567552028687854168231624099224520960730055297244304573644689430800260773334058505400191962282688364473790326064662269669594349723205554460182014241512118668984402289477523184729148273873927437697338403074224085583670742476020717592211980513579632760911675479888274921170812893991289150417124817758966382795711844249354638117328124729007890907663831205738261600289537771566375854875503301233609823097827868945588922972518111846420039478430837028614830582228577324080565357759395487074597891712017593796171571343895772931232229689737908478504076962712823697666487710192967327147935901992810431320672252285817914415824010232350973352812997819807006461828194353430507531454629356404291918415368236593906476698336037172475129571154670237836784068410833844060375452793650398759054804352221462988127761112617888474504777853206565416373170864342905394143038654925737757780852813467533800220030230021638928677620311113242143658052563681255705764102536275567323191208163245050197036079200602985275067110119895139515422982343294714753700948378914966418265894095164351785718847928462233446975504153699658909233319595753687368483196780540809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4f4418fb64ecaff1168ed8a6c432c41a84c2dae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitoin5passi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitoin5passi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169cbc3997b0000040300473045022100db06385a7a445be48fe378e373ef5790a511a116ce3168e8e4e158dd86eda08a022037998ce728d89c6631b8462d9889301fd49f2d85f0eefce3cc8fb675f9035ebe007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169cbc397fc0000040300483046022100fc4d2bf4588256eec9fa78c09a5243c74550f2a36291ef370ecb5237305ac4e5022100f33c0ec831009ab174a68af39e2d1871f4ccd2b7e7d65d28f4fcb54ee62de78c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00658bf5f40814f776a8f0d6bd10d5c0923f345bc049fed4ce54a8c9fbba992964d26bc31d8623f23165fee7f8fd65671dfb3575e6459d597f47a1df38d49da9748dfee005b92db7352c1e01b0d85016c23cc0dce2c3d900d11811904596f54c951fbfb21fc2eec4f85d54c9b3b362c29321588eba84bf10ddb78bd809c8046abb186d4f5351be2cfa0dd03625d3ac069128ecd6790598591ae2a073633489d535a8d186edf7365fc19129267e7f0b35af0719939da590adfc93d027eb9dbee1a2b391e6b3173bf004d20fbf7ad866c8a9209a85b3f3fc5535dabf2822e3ee679d4ad7758bb3b5a61e45d18709c799f6f7ed69e4af5bb8e1a6bae524fb87ede24d