castiglionedellago.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:78:10:62:d8:7a:46:55:98:1e:52:d3:7f:be:54:f4:a8:eb was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=castiglionedellago.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:78:10:62:d8:7a:46:55:98:1e:52:d3:7f:be:54:f4:a8:ebSerial Number (int): 389304808641266374912416905933640808311019
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f0:b5:3c:e7:37:57:86:b1:c0:77:15:75:08:2e:21:85:9f:6f:36:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): db:e6:42:62:0d:a4:d9:a6:63:bc:00:97:0a:6b:d0:f3:e4:4d:6e:45
Fingerprint (sha256): b0:1b:e3:be:f6:95:a7:11:ae:71:dc:7c:53:b4:a5:cf:e6:20:74:ea:3c:9a:d7:35:e5:c6:9f:24:a1:d4:cf:6c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate castiglionedellago.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for castiglionedellago.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
castiglionedellago.org
Other certificates including the domain name castiglionedellago.org
(limited to 100 certificates)
castiglionedellago.org
castiglionedellago.org
foodsupermarket.organic
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
www.castiglionedellago.org
www.castiglionedellago.org
entreprisesduquebec.ca
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
stated.org
www.xiaona.com
castiglionedellago.org
babyfood.organic
castiglionedellago.org
foodsupermarket.organic
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
www.castiglionedellago.org
www.castiglionedellago.org
entreprisesduquebec.ca
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
stated.org
www.xiaona.com
castiglionedellago.org
babyfood.organic
Certificate
The complete raw certificate details for castiglionedellago.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISBHgQYth6RlWYHlLTf75U9KjrMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDcxNzM1NDZaFw0y MDA3MDYxNzM1NDZaMCExHzAdBgNVBAMTFmNhc3RpZ2xpb25lZGVsbGFnby5vcmcw ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCfRD5haChzgbZmxLqjuq/P RRJJxbKTeOz03f1N2/pfsLAxVPvAyXf9iUrCFp8+Nxka/p5KwaICQlTFklczQqM0 dsdIcnd4vVQuKHk48qDQlDdwjqmUIDo0T2DqlOtyaeEvxJ8DV6TZfUQRxsR/so/2 zmAd4v/EA64dGiTYoooBwxkaKW9GNvUT5G9U0BZ+LsVodDxWmcaW4G73zXwLpLyq i1shg4Nr6a56Vq8V3n4AfkJHKodB62nPUle2G3M8ErIPK9NcnvFSWRTpL+0vv2M6 ZETdAjL0WUsRRXi/3DjIVuZ9GtpUFMnKRnit9Y47mg/j65dwuJyfKxJpT13/Ua0K sbcVZVruzdkOKL7ws72aJRHZsYNHlcsP7lJwos4GyZQ8wfh0/LRTE/MDc6YJvR6A 7Mn40TmvGNChTCmwixdtpptkTxKsPu3bU901h1Zmm1eDK3jqoMgJNr+AW8FCjmfP XBgHKx4iyFrCizZ5mDmeqNzccQXOv9RGDwGZKlnYdssxnKo+2am07Gw5TD6rL5xm b0Z7yGyoJ8oAOPQeTi6mf2RYFIq6/oyfd0k6d1fLzZsAZ0jHoAaYwAARvH9riz7/ 1BukRv6OVeUgK4N8FUgEXVIeiLhI1EZtNR6mrxBctgN10O0qAraYRB4Rv39SR1R1 JjfVxvZXq+6UCtaLWgZ0wQIDAQABo4ICbTCCAmkwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTwtTznN1eGscB3FXUILiGFn282DjAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFmNhc3RpZ2xp b25lZGVsbGFnby5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEG BgorBgEEAdZ5AgQCBIH3BIH0APIAdwDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz 4PNL8kFUbgAAAXFV7UvWAAAEAwBIMEYCIQCB96jU3psDeW0xXe8KFepgCuCVQWfA Trxg5T7EdhTTNwIhAIxc50lOLTcrHJ2GBNUy46WfXKCN4ekXVQBpXj4Uj8+fAHcA B7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFxVe1MAQAABAMASDBG AiEAkXAjasIIPRsM3e1nQ6o4juG2I/3ecpA36xrVXp6zGkMCIQCutJCyQ1HpzQYD S4oqCs1SBaorbGumLo4hYzRUvZTvlDANBgkqhkiG9w0BAQsFAAOCAQEAXGiHqL5L VhNPy/hWO94vnsqI7xwInHEFbSL2Qu/elBlVB9uM/+zPlkrVyQXLvt27YwUCTRe8 Sb/RQg0cn7Ew/RxRETRil9bAmBoNSpb0T4uyp+hd6CieMPWMo7RdRZWqc6xPQBmJ 5XCPfEAHIEkhv8M82Im4F+z9Xez+z7T1in0KKoBK/co6t1TBkjhly/Im+B7uHEys BbtcHuvmI5OoYLfWG+WFs22C95xSP9cBDvI3AL7AFQdG0yjKtNbayez8RINY5BA0 KXm/a7N751hV/Xk1cnE7Qz76bQFe5kEtTqUchjhvEeLsPkjRDuf/bNit4/Tr2kbN K6gUeWOTSJovlw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAn0Q+YWgoc4G2ZsS6o7qv z0USScWyk3js9N39Tdv6X7CwMVT7wMl3/YlKwhafPjcZGv6eSsGiAkJUxZJXM0Kj NHbHSHJ3eL1ULih5OPKg0JQ3cI6plCA6NE9g6pTrcmnhL8SfA1ek2X1EEcbEf7KP 9s5gHeL/xAOuHRok2KKKAcMZGilvRjb1E+RvVNAWfi7FaHQ8VpnGluBu9818C6S8 qotbIYODa+muelavFd5+AH5CRyqHQetpz1JXthtzPBKyDyvTXJ7xUlkU6S/tL79j OmRE3QIy9FlLEUV4v9w4yFbmfRraVBTJykZ4rfWOO5oP4+uXcLicnysSaU9d/1Gt CrG3FWVa7s3ZDii+8LO9miUR2bGDR5XLD+5ScKLOBsmUPMH4dPy0UxPzA3OmCb0e gOzJ+NE5rxjQoUwpsIsXbaabZE8SrD7t21PdNYdWZptXgyt46qDICTa/gFvBQo5n z1wYByseIshawos2eZg5nqjc3HEFzr/URg8BmSpZ2HbLMZyqPtmptOxsOUw+qy+c Zm9Ge8hsqCfKADj0Hk4upn9kWBSKuv6Mn3dJOndXy82bAGdIx6AGmMAAEbx/a4s+ /9QbpEb+jlXlICuDfBVIBF1SHoi4SNRGbTUepq8QXLYDddDtKgK2mEQeEb9/UkdU dSY31cb2V6vulArWi1oGdMECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389304808641266374912416905933640808311019 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 17:35:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 17:35:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castiglionedellago.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649750945483334156582797778085506433459832834496172610261280043204525356583672110106855618963975372644372525045077235858491109297006797418273681790189163996828474777690002966624791575237251726279732219397492943465527906073196541015371320902722402669922809968886829608317947715196441325657267901216337032953095490385267396189127518522921638761418880209725743611837635475766303833480704921560275374426495490632654173476811484648102992051519438216572708840551599332420741806879436270062587181244637342689783029230671692824175174558707638952623469905649511885227627649944027435530146731490277850064004660357997894952214110961057080525201124061268786621078917922002146450672832487659307099778560546665146606213442438682898427178197549278465931326764513911760356190425182389812786941886622242260179416150595305129879986826555750318171623552293230564429516220044799177555947680457800860637862364913632112415810387937222146632310898969513276126279222416500112178031929668662733092789787560368413096117929160956254572998980825592562328578143041791603803352259414076955417367355001767639993689943571480233832643849304046837063797198650369376667101112416465837568482656937704286399839445605078675919469656410192586653907982480812664513785918657 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f0b53ce7375786b1c0771575082e21859f6f360e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castiglionedellago.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017155ed4bd6000004030048304602210081f7a8d4de9b03796d315def0a15ea600ae0954167c04ebc60e53ec47614d3370221008c5ce7494e2d372b1c9d8604d532e3a59f5ca08de1e9175500695e3e148fcf9f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017155ed4c0100000403004830460221009170236ac2083d1b0cdded6743aa388ee1b623fdde729037eb1ad55e9eb31a43022100aeb490b24351e9cd06034b8a2a0acd5205aa2b6c6ba62e8e21633454bd94ef94 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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