savignanosulrubicone.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ad:ef:11:89:88:a6:4d:6b:99:7e:f6:35:6e:76:3a:e0:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=savignanosulrubicone.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ad:ef:11:89:88:a6:4d:6b:99:7e:f6:35:6e:76:3a:e0:35
Serial Number (int): 407635769753919144660615065671792512917557
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 27:aa:33:4c:b2:a7:53:92:3c:a0:c2:33:71:87:3b:98:1f:54:97:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:8f:d3:af:46:9f:47:22:13:06:b9:4f:55:98:16:05:a7:32:ad:fe
Fingerprint (sha256): ad:3b:54:14:4e:ff:5d:a9:b7:52:60:18:45:95:91:ba:0e:f8:c6:f3:2f:9c:e4:ba:40:69:af:c1:4f:0a:27:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate savignanosulrubicone.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for savignanosulrubicone.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

savignanosulrubicone.org

Other certificates including the domain name savignanosulrubicone.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for savignanosulrubicone.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407635769753919144660615065671792512917557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 08:11:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 08:11:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'savignanosulrubicone.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808551387667636897468276995543084071214890218146445930025594300576325395459294258017381604350148347310355374702001230498717575720810193884504988184451368375058906052932728389275530115220417168109415215910697042582231505840648020873635952128206306553247371332020783629145640367806895923813903628930100029522565623005523349308669707224747487103152446006350819139305336575328318915829030638259309190160515849503365666749915953648234909161269924680920610115496597993370621861913894560296321900024059013810391382609150329900355164167245758153846003592999904847730668324505718357990665096409568414305408749222486922069520739567726210939161332274391501973646431204885172994825177166438862261604932457221682701925906687531573546113901302045744755492725183302709715220166209810545520196673107545946869998198666895127039083936485070968843583491147972221446023210034122142090332406191133854186707788593759389335964341841886610043852412588120957964575664711921680751999699686254550478482922884336531344906193205909345837795090931464082997753191805746499797571314329076673390766366601396206879945715281120726555772021793662411871209883206433803206283681416664197619523202573482639711169821417477042964901793446763035594167638509111302258740294573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27aa334cb2a753923ca0c23371873b981f54977a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savignanosulrubicone.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7c4a3fb9000004030047304502203f79bc9bd3ce7edf922feb1ca8e1e92a2992920919edaee1852ec871a9e434f6022100c0ca8927e324dc7ce4c30092ef13d26baba60d2e48112846902f7de43e7601f900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7c4a3f8f0000040300483046022100984074dcd26ddc2bf6a43ba107e0afdd22a6a4588ce2b39c76d9b10aa0c5d1bd0221009febd395d8e7a92813a58dd1ac9646245a6be2b8f76e9c65e5cb76efe8f52763
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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