castiglionedellago.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:78:10:62:d8:7a:46:55:98:1e:52:d3:7f:be:54:f4:a8:eb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castiglionedellago.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:78:10:62:d8:7a:46:55:98:1e:52:d3:7f:be:54:f4:a8:eb
Serial Number (int): 389304808641266374912416905933640808311019
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f0:b5:3c:e7:37:57:86:b1:c0:77:15:75:08:2e:21:85:9f:6f:36:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:e6:42:62:0d:a4:d9:a6:63:bc:00:97:0a:6b:d0:f3:e4:4d:6e:45
Fingerprint (sha256): b0:1b:e3:be:f6:95:a7:11:ae:71:dc:7c:53:b4:a5:cf:e6:20:74:ea:3c:9a:d7:35:e5:c6:9f:24:a1:d4:cf:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castiglionedellago.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castiglionedellago.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castiglionedellago.org

Other certificates including the domain name castiglionedellago.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for castiglionedellago.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAn0Q+YWgoc4G2ZsS6o7qv
z0USScWyk3js9N39Tdv6X7CwMVT7wMl3/YlKwhafPjcZGv6eSsGiAkJUxZJXM0Kj
NHbHSHJ3eL1ULih5OPKg0JQ3cI6plCA6NE9g6pTrcmnhL8SfA1ek2X1EEcbEf7KP
9s5gHeL/xAOuHRok2KKKAcMZGilvRjb1E+RvVNAWfi7FaHQ8VpnGluBu9818C6S8
qotbIYODa+muelavFd5+AH5CRyqHQetpz1JXthtzPBKyDyvTXJ7xUlkU6S/tL79j
OmRE3QIy9FlLEUV4v9w4yFbmfRraVBTJykZ4rfWOO5oP4+uXcLicnysSaU9d/1Gt
CrG3FWVa7s3ZDii+8LO9miUR2bGDR5XLD+5ScKLOBsmUPMH4dPy0UxPzA3OmCb0e
gOzJ+NE5rxjQoUwpsIsXbaabZE8SrD7t21PdNYdWZptXgyt46qDICTa/gFvBQo5n
z1wYByseIshawos2eZg5nqjc3HEFzr/URg8BmSpZ2HbLMZyqPtmptOxsOUw+qy+c
Zm9Ge8hsqCfKADj0Hk4upn9kWBSKuv6Mn3dJOndXy82bAGdIx6AGmMAAEbx/a4s+
/9QbpEb+jlXlICuDfBVIBF1SHoi4SNRGbTUepq8QXLYDddDtKgK2mEQeEb9/UkdU
dSY31cb2V6vulArWi1oGdMECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389304808641266374912416905933640808311019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 17:35:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 17:35:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castiglionedellago.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649750945483334156582797778085506433459832834496172610261280043204525356583672110106855618963975372644372525045077235858491109297006797418273681790189163996828474777690002966624791575237251726279732219397492943465527906073196541015371320902722402669922809968886829608317947715196441325657267901216337032953095490385267396189127518522921638761418880209725743611837635475766303833480704921560275374426495490632654173476811484648102992051519438216572708840551599332420741806879436270062587181244637342689783029230671692824175174558707638952623469905649511885227627649944027435530146731490277850064004660357997894952214110961057080525201124061268786621078917922002146450672832487659307099778560546665146606213442438682898427178197549278465931326764513911760356190425182389812786941886622242260179416150595305129879986826555750318171623552293230564429516220044799177555947680457800860637862364913632112415810387937222146632310898969513276126279222416500112178031929668662733092789787560368413096117929160956254572998980825592562328578143041791603803352259414076955417367355001767639993689943571480233832643849304046837063797198650369376667101112416465837568482656937704286399839445605078675919469656410192586653907982480812664513785918657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0b53ce7375786b1c0771575082e21859f6f360e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castiglionedellago.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017155ed4bd6000004030048304602210081f7a8d4de9b03796d315def0a15ea600ae0954167c04ebc60e53ec47614d3370221008c5ce7494e2d372b1c9d8604d532e3a59f5ca08de1e9175500695e3e148fcf9f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017155ed4c0100000403004830460221009170236ac2083d1b0cdded6743aa388ee1b623fdde729037eb1ad55e9eb31a43022100aeb490b24351e9cd06034b8a2a0acd5205aa2b6c6ba62e8e21633454bd94ef94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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