www.crispano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:38:81:1e:25:09:40:44:ae:57:c2:dd:2c:c2:9e:4a:51 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.crispano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:38:81:1e:25:09:40:44:ae:57:c2:dd:2c:c2:9e:4a:51
Serial Number (int): 281148342262160470285649838183279511882321
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:0e:42:ef:c8:2b:a5:81:08:e4:ab:a3:79:4b:53:59:c4:9b:1f:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:fe:30:51:65:ea:49:5c:0c:46:04:8b:81:f9:f2:78:97:98:c2:80
Fingerprint (sha256): a9:e6:db:94:b5:40:b8:c6:d1:cc:a1:6b:b2:46:44:36:d0:c4:5b:66:90:41:24:30:df:af:78:45:1c:bb:04:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.crispano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crispano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.crispano.org

Other certificates including the domain name crispano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.crispano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281148342262160470285649838183279511882321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 16:30:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 16:30:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crispano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693650073286890585935334914271895752080644782900519853413248168456512472955534499386846910573405350280407751897665438436605977121574124341752320885885897801952560785455373600207526634812984607085607290336765859308988278378970509980993591385150757295305637660227666090139941761642453820838149182934433675773226457521875957540564150707587490478474482119639430165163176774843608538145397452963415717382768878435175074290151483965202206628385182409619768707136588278322359975554976241966712560390284204564194161888385304168238263912576887440350224682450414748693054868069141431375835060360268315930457922789149722412286282022863366503258785037908243433985064396600698363430156769281703148927411824017070435879962175560764835012621943240531625117953332367992136040843622170263269576271715636321517877045302322793170694664147772937916308506962840032946296781522723775752511726114959878369243827199700810874381029186880657951120562298304756169844722496509448549483444708054510412935064252332201055951092969039871862751550378679988623957281676617167325337883090788636273390697566750878073464272504876046765715196915731011194015330970718382142306301551602488088871948489796393858061650522419862333067095600374225804704857648771386260543060381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							360e42efc82ba58108e4aba3794b5359c49b1fd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crispano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c347c49980000040300483046022100c93689b99ad5209f7c37e989fe85e99b0f164a5d3fc19a359c151c0544a3fc9b022100b82d824101ec5408c61307b1fbcfff96b1ecb76202b3efaef38268bbf303e83d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c347c49880000040300473045022100b3d255a2280137009d0f456ed1a4255073e5f7b6f0a2dee004c5546d0fe4022e02205072c84cf37f8f786369d7413d14c4a51ae4548710cad48c0d1cc34392858e45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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