osservatori.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ad:3f:3b:86:b2:f0:4c:0a:1b:19:0c:ef:00:b0:33:3e:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=osservatori.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:3f:3b:86:b2:f0:4c:0a:1b:19:0c:ef:00:b0:33:3e:9c
Serial Number (int): 320289757713872065519164363165292207226524
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:53:06:07:f4:d7:21:32:1a:67:57:f4:e4:f5:5f:18:9b:a0:34:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:72:22:55:4f:55:96:1b:0f:72:eb:d4:95:1d:d5:ae:ab:03:3e:bb
Fingerprint (sha256): b5:9f:93:ef:d3:01:70:c2:9b:bd:db:1d:5b:7e:e2:07:bb:8a:6f:c6:5b:42:e3:ca:bf:f0:75:a9:cf:44:d6:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate osservatori.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for osservatori.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

osservatori.com

Other certificates including the domain name osservatori.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for osservatori.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAstK7rZV+axpDYNb9ciQr
WxZ3mj4ASpbyVte6vygX/qmBARKEN3wGrM5bVH9VBh/hEZvew8Hbv7Wupq5nzCsD
DwW9e0wI5ADaTFCoYsAB4nrfOBLwntIybKnLwdgP3z+QpLuPVK66MJG4jRc5vTzl
bV1edVZkLMtL34bD7GEB7+Ya7yGtewwvFKoR4k4tX357yHlyCbE+wfXnUJvbFHbb
gpToZILUFKH62O+YOtcob92v/RpqjELMtQdR3qdGrdHN6Lvwbo4Y0EOFsFH1e899
WIZ2RpA2BdGFZxGk7Xk3UiWizE7nsWqeMwCvPUA6vd9ILI5Nw2gLYiw5lQeHCI8f
A0LaGZ7m70F+KM/E8pmaa0BfLKAW9q5F94cC2YJbfbkaABz5E+OsqKxVvZzSviTR
uA7YmYju52OvPnh7VaPWpdjIMQK2zZoQPVWrqzcx0hARz8bfSLPyrw0XcSVN4Gk0
lAkVpesJ4bWX0CHZgSrpQ/iabqAdZThP0X6qWFFuGccYfxEL8FhPqhDlwIi12x1F
M9BtfxzmUVIzQLUxYZq30bRuSyUtnOJJ4W6qYS6aL04v0bLKeNghjLhyaU/y1E3o
MTfDxgMBI+yNKYbvTvupDgnJJzL+DvXncz1GSyzKQNomT8jkIR9vgjiIzY5012pX
6aD6ZYi75BU+LwssdODFnO8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320289757713872065519164363165292207226524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 13:39:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-01 13:39:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'osservatori.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729534910171890830794056328768320884937537205615381000334750217641007696956705786834341764336945030543003379728271980315935977637729401637518585422291448671997477449793008582144670827408650462117477451975921594946827064228202905065346678278108875755241846985083907635529482610158856068144742362079411370788190884357913815574025143156809023680366606442047175487608530243682851557279096923917314660569921250059444485527011246760600767598589254179411735862200149755924211596306498863534093586322923598643946494921077936314325728793804334356056401330418277343954783743115971338758097664614524345442531527178583551268219500562143783408980192486962192974921444209031355307388295260902662218565910034878743318205131770872973379025057378068217782907368341179175947919156841755711301028477248144250342382816686687826322594025427982512614650243735451762707100651258074207651289995347608744990870319015223572023438602912824625210438127785796832437984383954832848115764699769670667901603855750917399764386103335326937907722013993941542407615240100898547504836855331841997405863733505500975645324847272700266288963611166241698803610430116059683755492048703479805232838986498171293828550381900398567880102232208397577476596368975574801399756987631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3530607f4d721321a6757f4e4f55f189ba0341b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osservatori.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001713b54ce120000040300483046022100c708d572805fd1ff54563a89024d5451a272c5f5744b5f3b0a478272715265b1022100d4914d5f574586df304a94527e59822d2dc5f7145a290a2532537dd54911d59e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001713b54ce040000040300473045022100e11c87db53bd8a53ccb43b34e409bf9f13f87eb5ece6b291abeb09f0f3f6e97f0220643543a10d2f336a2126541c54ab30ba6c84a5e23f681f6f2fd6259f1ddc27ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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