www.sangiovannivaldarno.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:64:fa:8c:94:13:a1:27:0f:07:6f:e3:a3:76:4d:9a:20 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sangiovannivaldarno.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:64:fa:8c:94:13:a1:27:0f:07:6f:e3:a3:76:4d:9a:20
Serial Number (int): 336673484609870453259513074798385374796320
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:e6:0a:a8:8c:12:1c:f3:0d:25:3f:0b:f2:04:ea:ee:8c:62:0a:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:2d:c6:6b:92:18:6f:0e:06:f8:46:db:91:03:57:75:44:9b:06:dc
Fingerprint (sha256): ad:ba:84:ee:d1:7f:4b:8a:50:bf:fe:72:1d:eb:39:fd:10:58:7c:b9:b8:98:19:52:b5:75:98:a5:d4:13:04:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sangiovannivaldarno.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sangiovannivaldarno.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sangiovannivaldarno.org

Other certificates including the domain name sangiovannivaldarno.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sangiovannivaldarno.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336673484609870453259513074798385374796320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 15:32:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 15:32:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sangiovannivaldarno.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767527410863159681414098104840052242267665842648159059158470137913398551723682077425809354284681779066954393042384380127008660291394936680227686089819516761242423105812745578505728151129620054093798479006429622611788187311520243218305773216231941504861226247763128417287204747411526456340284796188119471260807321995009797685689302738465124740698808364401528811493197138015516833608507084606448002951952049457520315807377275514600044651450502894275847521115329675326962996727021141571660146909224716048754664615721417754124341802601340618687162148935252909339550383703432060144846448486932603772911350466664087172795546149576492305979095438841775639276433202446007875033948913797219945489955696445458961256170073559555307736968181761011895007531902952948695350390075174160111713836874948692888655791398358402846680640319568069224522221234203016171732861625127904752326212018348683528435086752461709817303941720649827138874437239522253095209082820971789434732766412555507745201812408175060029092545505353836563113663561654524992685854810784280520778624741494641622273480350441233107304875611476360526571317878645441660772835946253569289607654236456414711704477231132479024638569127567481305571264266954677853828330255748479653602146683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3de60aa88c121cf30d253f0bf204eaee8c620af4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sangiovannivaldarno.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aff48fd390000040300463044022044eb0461523910f0fce47706e6a0e472d6d8c43b1d93472304dc7fe88d4226ee02201977330a3bef2f27cc731f9ae44b283626d8081230670149453ca2007b070f24007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aff48fd5e000004030047304502202657b559301a60fa3ec7c4902b3dd397be77a4e082ce3cba03a8d8144db68bc3022100abaf06af8ca180cfbd4115d9e1e0653a46b650390d31935f7af1788caa1c4ea9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013920db491414b945953effdacea055891c7a81a6382eaaf8707be56218268a843eb3eecaa091f74b303ac06710d252aa4d4db8b9af8ffe497c3561b506d8d32f629bf9abb2f1d21f805f504aed030598231f0cfdac5669e66c109a990ab5d5225285f305685dfa753a06b4ec3f43f30c5ab2d697a38b7945987d896b60ff58d0c2edb7d7d0dc7897016dc14ba2c7e1aba3034ad2bd6dd634f197d55282a54c7c3ecb8a11cbe334d4926bc929dff8c45ee0b515bda6b7797c23ed151e3c223988d0ab23f90a3fe9931bba3f279767aaf6fa6ae0d97015295683797492937f4d444b2f96f2e05691044a9a8def32f7bda6176e14adbf294814440ec1d56d932f5