www.contrattoazienda.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:23:66:2e:24:5c:f3:c5:78:f0:1d:7e:17:da:6c:f4:74 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.contrattoazienda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:23:66:2e:24:5c:f3:c5:78:f0:1d:7e:17:da:6c:f4:74
Serial Number (int): 337266879148653882841079173616920559416436
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:5d:f2:1a:7a:89:fd:7a:5d:bb:37:56:9c:dd:ae:47:6f:39:0c:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3c:1d:2a:d5:ad:21:29:c0:9e:99:28:a6:6e:b0:63:6a:98:a3:b2:af
Fingerprint (sha256): b3:a7:85:e6:df:cd:3e:21:19:d5:f5:c4:a7:a2:6d:ff:c2:9b:32:c4:5b:ae:1a:06:39:8d:6c:44:3e:c5:f7:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.contrattoazienda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.contrattoazienda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.contrattoazienda.com

Other certificates including the domain name contrattoazienda.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.contrattoazienda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337266879148653882841079173616920559416436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 08:32:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 08:32:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.contrattoazienda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882113725430241276701150510614413016986348107822954813910128249579624670326694058706345401426617697525951714819814445238366642720046725889080710183253404751076226779015714060323145946878674657595031813754725295991733894276063352582968034746648426868311446681358255999009231602670953381472957775638099133024195642116051671759618361623374862591012436884616942103258297656406015557347121994543294778205370906048419353377590552888784686196023288835487056678382792492229159887903868930985614854319370988595704126992773578291581497325597105128039353572458314018019575040975166690585938927277294213415544951214623901849983707703619801444093275107298760154887617032298334405037204131476430312399436551910490490983834816835577017023392001562150875648198916784655284930422545330229358939932071912146320717666735867173050542937404044211332892083452455387054439874573349227708683061603466335246012092282561689666520288699431182025094856965674259450545446011843090605169880142928506079600220082398828152839204773813501522388793026678906136417498428626623824788933833352776174889799635472548689106347064350206257080773350221848165959452560251958978764648396076429620579267046059165020090141371497521444354197316988606323143122066809927933253472213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d85df21a7a89fd7a5dbb37569cddae476f390c0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contrattoazienda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cdcb8415d0000040300473045022017155290398d613554c64a58a3e697bfdaee301b2fb8bc8f07026bba12db7add022100d608d003c2bd9bcc5ae896a0e12bafabeb792fe83ae958b299cdf53365e7568c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cdcb8414b000004030047304502201b26c39d7dad21720baf5595b6325b9cb93dd42acc0a840186828a1f4dc644cd022100c223ca9aa0d219ec68c8270cb3eb93eb727c3b861e1969dd703a733f2832e950
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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