farfallone.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:e5:d5:9f:27:11:f4:6f:cc:51:60:fe:18:f2:8d:a9:23 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farfallone.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:e5:d5:9f:27:11:f4:6f:cc:51:60:fe:18:f2:8d:a9:23
Serial Number (int): 294309467417955028155226044398683481286947
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:95:c9:17:d0:88:75:6a:06:a6:c0:20:86:c4:73:ae:3e:b5:bf:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:de:80:d0:fd:37:85:6d:c4:06:ac:34:95:8c:4a:08:b0:28:ae:81
Fingerprint (sha256): b3:8e:9d:dc:4d:05:79:87:a5:d9:31:34:7f:38:d5:0c:1c:38:55:0e:8c:b1:3c:55:47:f1:25:9e:c1:12:8b:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farfallone.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farfallone.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

farfallone.com

Other certificates including the domain name farfallone.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for farfallone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294309467417955028155226044398683481286947
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 17:41:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 17:41:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farfallone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1013791623873397775254832490262528461590666114730323743167082637928323937723808459100403854926756148550017296597692890435542159885475076320937481657277256287176398142194353379089068704078127886096974656808758228258259090415079190155171134543614265784526484224441676839991897559601123814905565870426378049813768500036611489834840438000656202137942927846765130187793923160506815082992632120961211907205348971539557340360268552692262762049556134245262346356990328398677125381447458530321007437264935533612203267252655183397575174364381567982570975709351474467318471485946654176435116365445789191490812452615257398581628936781023048492917342175893368253518968710075320587807753145794073859611281525271910247913000293335657558328246130412912536165769392543555481744059533897367456095625828199221311744745404735501486123636708301494610194943930628516233323701023235217392298632516936776819132754901080855395569025598012452636974970037248515885223771901370499233337713723059306066894380246691971856043764989191296850791778647570463218407257101404064892991160315974634295431978533249375472604847328942641555015807618457200389801853656591578534402728402992941320924844345650861403235864702565345750759964244098609676622135159817330532302785867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a95c917d088756a06a6c02086c473ae3eb5bfdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farfallone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e095f6aba0000040300483046022100da243d554ef74694af9b4c264838698d0e3ee0b6bc9d717eb733a34d1dfc6e96022100c3c39eaec306ce1144740d245adf36401a08ddaa13f64f79fca6f155245cb6a200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e095f6aba0000040300473045022100f995b5eb52ff5ca25f7484784854130522620009da4c0f5110d36ff6de63f4280220196358f4d13e815fa1d52d6d5e49c5b8591630ae4e40042e3bf452012783496c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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