www.rivistamoto.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:92:90:90:79:d5:b6:39:f2:ba:74:cc:5e:00:7b:0c:88:83 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.rivistamoto.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:92:90:90:79:d5:b6:39:f2:ba:74:cc:5e:00:7b:0c:88:83Serial Number (int): 311210242358981969490602875299524982376579
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 84:05:41:22:d2:21:4f:4c:48:99:1a:9f:b1:f1:8c:e7:e8:d5:9a:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5e:33:ad:88:7b:e1:69:f2:29:3d:4c:25:e9:38:cc:ef:d2:05:19:f9
Fingerprint (sha256): b5:3d:da:5a:2f:35:30:dc:34:0b:f7:94:d7:d7:f0:cb:de:e7:2d:1a:01:6f:8b:a6:76:9c:97:52:41:6f:13:40
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.rivistamoto.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.rivistamoto.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.rivistamoto.com
Other certificates including the domain name rivistamoto.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.rivistamoto.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISA5KQkHnVtjnyunTMXgB7DIiDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjMxMDQ0MDVaFw0y MDAxMjExMDQ0MDVaMB4xHDAaBgNVBAMTE3d3dy5yaXZpc3RhbW90by5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC5cpA08e/Ji3sDhLlIN1mxjhcY nW7PjKi4XX62jY1zM8NHszQM7SosXUGOsVGSjKxNYgjOCwfOKzknlMYS10dN438N CwuFYJYgwgxT5CdMkJmB65A9NqH4q3zeqGiKhH8BK1zlYq5gRMIk7e2tjR2VIsK1 ASGrl71l/ES0YRotKm8DBLnIzEgdDV5i07cHFm8xK5skIrldcnkLKpsaA/Z8SrpZ QRgm9ND0buGBKu9a37IxO9NOLzXCmBEX4JQ88Vfa6cgkqUi7R6win3MbsVzlFu8p OsncDtk4BVr3MRTW5luGInjV8Jc6pXKmDDd7noUmtFAfbxeNNajigk4nBrFT3EQ1 49Cbyu7Q8+4nJnBO0ue88DA2pk8Q3nvlLRRug0Vm3pwFl+lhgWLQfSYnDZw1rDlV ljjRgB0lLj8ExfIJ5i0TXlOJN0MDf7/Fzd/TNNdgz0enPGYEqlsTRvmJdlL0YjYh 5N9C9HtKMkPTWGmgLVRiRMUFFUYCzPLP1JqbqPEK4fazSTBSmEzDdyvHO7ZoVct9 ZTvW5zf6N1aGTYc0oywHiTx0y230EljoaUjGOvkX7CZXby2gFHn/n8ER5YcDHhC1 5jNWYRVpqyh33KrMmqIXa7hdSKErpiVGHe6jSaqMGiDClrnXggcVG2A7JQhX9Adn 0fBBXpXJUY+jVeskXQIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBSEBUEi0iFPTEiZGp+x8Yzn6NWaAzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5yaXZpc3Rh bW90by5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6y cwAAAW34bl1fAAAEAwBHMEUCIQCkm+yyH1zS+tzDtGYOJ4KB2D3462Lg2HUs7poe drn4EAIgLzXtC1P4xGjyRGH9s4XHLJFwYZgy4Bw1Ds19+GJs8LYAdQCyHgXMi6LN iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW34bl1NAAAEAwBGMEQCIAHp9Z7k ufS3/WWT5B+Ly+KY3n6paeIhbYWEHrpiFk22AiAIVn6h2ZlmDnRex2kq87vZJzJB ZBYtJwkjhZ8zof5t/TANBgkqhkiG9w0BAQsFAAOCAQEAFN8VS9OwbMjC4FzaUOZY nBkrmi+qt02dBjixmuKOVBl3Ot//NXzM3rEIgH1eQteXKz/k6dMCdqw+YJfZ43zw xWUipTRv7/8x2AgZrtIJNKH8TA8sCBZtvpgYdNfBqMEnOLnW0mY6p+/RBjHUZTS5 BY2PQ4M/XG1P9JknLQgwtCFO3DutVcIzK9859GsKxy0vIez+MqkxHv7JY8ASIDQ+ 46d+Piqhbe4T+idwTPhUmKpDNZ07GYt7omr6wrrnDHqrOEr2Azd+HidK9xE9y9+h rTqe69YPCrOYKrl+y7U7yjxSTVD1QitBOswMfkDPdcpMr/a9DzPrRuBycKhXIrz/ xQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuXKQNPHvyYt7A4S5SDdZ sY4XGJ1uz4youF1+to2NczPDR7M0DO0qLF1BjrFRkoysTWIIzgsHzis5J5TGEtdH TeN/DQsLhWCWIMIMU+QnTJCZgeuQPTah+Kt83qhoioR/AStc5WKuYETCJO3trY0d lSLCtQEhq5e9ZfxEtGEaLSpvAwS5yMxIHQ1eYtO3BxZvMSubJCK5XXJ5CyqbGgP2 fEq6WUEYJvTQ9G7hgSrvWt+yMTvTTi81wpgRF+CUPPFX2unIJKlIu0esIp9zG7Fc 5RbvKTrJ3A7ZOAVa9zEU1uZbhiJ41fCXOqVypgw3e56FJrRQH28XjTWo4oJOJwax U9xENePQm8ru0PPuJyZwTtLnvPAwNqZPEN575S0UboNFZt6cBZfpYYFi0H0mJw2c Naw5VZY40YAdJS4/BMXyCeYtE15TiTdDA3+/xc3f0zTXYM9HpzxmBKpbE0b5iXZS 9GI2IeTfQvR7SjJD01hpoC1UYkTFBRVGAszyz9Sam6jxCuH2s0kwUphMw3crxzu2 aFXLfWU71uc3+jdWhk2HNKMsB4k8dMtt9BJY6GlIxjr5F+wmV28toBR5/5/BEeWH Ax4QteYzVmEVaasod9yqzJqiF2u4XUihK6YlRh3uo0mqjBogwpa514IHFRtgOyUI V/QHZ9HwQV6VyVGPo1XrJF0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 311210242358981969490602875299524982376579 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 10:44:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 10:44:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rivistamoto.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756559846018862298361351924969527309266674715574773987687201082098190966779754928163614992956366812926366560860171662651535364169563188917746904814164456267658965432921129206601515181538536355367421491611718558460900058377394777333632163302711641270543108805439246927916958039769275296001518621498609509593804699659798073289016148643111920990581311543304200738557324383206431528734325800911166035320438803152175650157802510452325993945681223547754340067617547450804775105730149402625872298853895120722746260490438677584827881376609044349198675212326992618707908977080938497861139592364330362199208761840793713308482993052228082653797653835593751820513154803278514290703169887795309554554878928634228405393549991133631010606589758844918950777576175169284195114133839591414979237371462328034310670680074484464785032096855858161505309313554813225481218890091445623065367782949841898993947138863558910150419204362040520977413221568726138108842591168141363182015427330625569189392079940444717920928303737323659321503125119593814559872429499980982851523000539478223752836023984553027880997263873731729301047053815636946073367750817542141098896348913687863063162101076564448278400161275657828303134615171797217329864348897965982552265794653 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 84054122d2214f4c48991a9fb1f18ce7e8d59a03 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivistamoto.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016df86e5d5f0000040300473045022100a49becb21f5cd2fadcc3b4660e278281d83df8eb62e0d8752cee9a1e76b9f81002202f35ed0b53f8c468f24461fdb385c72c9170619832e01c350ecd7df8626cf0b6007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016df86e5d4d0000040300463044022001e9f59ee4b9f4b7fd6593e41f8bcbe298de7ea969e2216d85841eba62164db6022008567ea1d999660e745ec7692af3bbd927324164162d270923859f33a1fe6dfd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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