trezzanosulnaviglio.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:5b:fd:c0:65:cd:ea:e8:f0:dd:a1:a0:43:dc:fc:1e:83 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trezzanosulnaviglio.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:5b:fd:c0:65:cd:ea:e8:f0:dd:a1:a0:43:dc:fc:1e:83
Serial Number (int): 316584878537482824407511447452151833173635
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:57:26:74:b6:57:99:c6:8b:fa:12:ae:2e:a3:95:a7:c0:94:da:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:c5:f4:00:6c:6f:0c:25:0d:07:1a:e5:ad:4c:43:4d:57:b7:b9:a8
Fingerprint (sha256): ab:54:37:52:21:b1:fb:a9:02:ef:99:64:49:75:47:8f:3c:0c:a4:7f:f4:41:90:d8:a1:91:94:c1:2a:f0:73:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trezzanosulnaviglio.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trezzanosulnaviglio.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trezzanosulnaviglio.org

Other certificates including the domain name trezzanosulnaviglio.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for trezzanosulnaviglio.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9L9Ps/68X/zpk6kewYjx
AN9CTw5mwXQYAqai+qRuIaVBuhr6weAltFAb0RZx5jbjr2Gd+dPLqSFvp8TbzJHF
FIXh1QqYEpuv3MHDUEfWWqTobuckKi5M4HzWgiqOtRuuXbifAov+pxzskQX4J93n
4ks9MJ/ALWWRMonESrSRCGClWiuIvAd+FwszKAiAoSXDm4KlGNE5kDNUZ8LGxGBc
5/SnxKYAlZZBkxlUO4T0+9Ztn1qXANSb/dRJ/CLM9sk770FGwufP2TmVqt1hW6Wb
q16LJ3EZPXlmsDhjNsgSXIxkOXcr7rY+PFDk9jrFUJORGZHHVOoOq0nF7mWeiJJK
aA1CSyV4xC0Me5GGPknw+DsLqvvc+lczg0q1fZ+8Gy6s4Lzbzlsw8AEp2WV7N6GZ
5v11tNBwPedg91OCCzcJPOzS5VXcx4C9Ah2XRDudBPpNoC++maD713rKdDB+qiKh
MfLfOQ3nTjBKbfkM8qEHEX92UdmViYni4ElLbsasVaYSUUiReZ+G5nMo6ONfxZGV
+dck6kZCQMh/M+Dmez4v20FbEdEH4Kt8XvEVFzlGrPXZEtyT3eSRKUx9f9WkW0f9
iNVoBeVJvGKZEQy3ooe9u1/AFEMP9eLJ11QdpLGAUiHYivYbt92qkSTd9gu4Ncw5
zduELHlBiT1zlxO+4e5jP/ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316584878537482824407511447452151833173635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:36:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:36:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trezzanosulnaviglio.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 998481911090751414502754818134236700894392832672506160750010623118543793220456319326998249992952421216749613954563770715294570579079466708060556489439317299893981279099613775038683658283837016935719118145540797227255179485811621957689159942499375060064980976419918161914226758571555327793002153058087496550827535098253612376749629024894692574294616156232229305261550029989643424487198166700692099891861960971746941061329137247996370526572451642827318196594677537710238665991185352197754343059052232023000747106115465004599154159547287103028945347220389209581213213799610533983673148031857460923049266267059434653917410965766722903472936905810545750381337602643857073631981189102685336239176295228905574487612037689983186277715178142962435745503141886189380553535822610439932955680783580919654163042958638340091058961157008237412443276225592023466727716151088374169955747176681894372457472666912468645925621819576193359118580420260020816682879657441538076373284704904597649083370228710257943659358127473176016646654472972048973698572708559950278478927474192914961381587194397938364928169671177618933702774626044027391456629738423287942338625036732094953962113441916764682868683601738484364236940742017654217724181665523498549451636721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a572674b65799c68bfa12ae2ea395a7c094dad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trezzanosulnaviglio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b280e800000040300473045022100a0eb9ee9212f6ea1b6a6946b5633ea25a6e06b541da615262e55e7516399ec960220625292737cf7db8ed12cb7ed3b466720947369ac5d90621a17020b8c87639053007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b280e6e0000040300483046022100a3c61f4a2302c2dfd58d0c1611c4b300a64c484a6c4eb494555241c040c0ef09022100ca4129a499528067e321e75a7c414d7cbfc8a885b2fab8204cd8b24ab4ca3b70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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