romanodilombardia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:bf:b6:c1:14:94:c5:62:2d:3d:10:84:39:87:21:e2:f5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=romanodilombardia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:bf:b6:c1:14:94:c5:62:2d:3d:10:84:39:87:21:e2:f5
Serial Number (int): 333050986310036648696057506459684553482997
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:ba:bc:d5:b2:0f:33:9b:6c:5d:dc:80:72:76:54:28:d4:01:af:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:5f:94:84:38:0f:3e:08:97:7c:d3:ef:19:56:c6:72:ae:80:1c:d6
Fingerprint (sha256): ab:2d:32:23:51:65:9c:36:3b:45:22:e9:90:10:c9:be:c3:39:4d:b9:5a:3a:cb:df:fb:00:ed:f1:2a:cb:9e:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate romanodilombardia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for romanodilombardia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

romanodilombardia.org

Other certificates including the domain name romanodilombardia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for romanodilombardia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333050986310036648696057506459684553482997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 16:10:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 16:10:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'romanodilombardia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672257727780633489896154013650608382926296051534120980253868813467045918893102249359940534683359237775663915578168089118808778953311873503586596637479047758341364937853176454482620914642012625216564666260534974165628238803398182326380089238111080920681133162893750297696502206154691011599345216127262239172050048983709074304368206093922490980975833321624025377506868973754574678196884966613614877653540101541890572164096982002367554944143720195698867938434433564775174866149812743873638675782067319540031194065473874344124439656456458310403494511816960974214081342715868942419772073779373482603661179924609973937006405510709834259860940279099174968758140517695956907388142391191649861328229182793275806110959483179901396831534768075928787593673544550558981862458695164500520372693053684471675768440977457550034606835995994240463405533237840902955053816847253567244133076183344359067634868918167929432881629157290274509995877173551057794258475195043969052465962657208570162778766136520644721253608086523491992532009569206632678973949354858655552403665056662636785436491720307824643424773811262852116733338145351685416958237067552132774866078695797218521384787585130386579487487959002201910591857774158982089513562144936240818733395349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89babcd5b20f339b6c5ddc8072765428d401af38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanodilombardia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701b7b57c60000040300473045022100bce07c2ef5a12eb3428d3a7c0f47d6ecca824dc4e143843b8739c2362dbd491a0220125ac593cb85a62934a295652dd4e8077d30158d70b6a85f724e6e1fbbccb1ef00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701b7b57eb0000040300483046022100940845b3d5f83a2f2cff97c056c490043bcd14a1d944e1de4ecc7b2577feb3dd022100c96b6726fa51e6e79f28f36739e828014584364e5d680a4190164528c2da03e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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