www.canottiera.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f6:8d:8a:9e:c0:d7:98:34:04:bc:2c:b6:7a:b5:43:65:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.canottiera.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:8d:8a:9e:c0:d7:98:34:04:bc:2c:b6:7a:b5:43:65:a7
Serial Number (int): 432346746893863247401967179356107752826279
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:0c:64:e7:18:2e:0e:7f:bb:6d:33:d6:70:18:e2:ad:2a:97:3a:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:f8:18:b2:cd:bc:fc:5d:f9:62:53:a0:7c:96:02:db:65:53:7f:ce
Fingerprint (sha256): b7:f5:42:94:78:f1:f2:98:41:ca:57:70:3e:b0:c7:ae:59:f8:52:5a:b6:85:ec:41:f0:a8:55:e7:90:34:d8:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.canottiera.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.canottiera.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.canottiera.com

Other certificates including the domain name canottiera.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.canottiera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432346746893863247401967179356107752826279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 08:28:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 08:28:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.canottiera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879143910120346306990226190269970196345289383583438507123566642866329321996359984661892933656206338480829732690780117836317679219793010125722004323261204657035544668953906719465275451128848477437260555740253121150225854842495549047091053239404135935389441006528708892674804069516336254013306770580325996909347317947152000576984081608824375067859928577671717467208977885629498679653089958306985633072429959741170565997976017288219139070659520033163406282975540986211338516334792068768534479752967478559085765386697623766309829769760570547294617744307913051567944211168980938877813562905300097758941553938883714853425268551388768505982417629962337256317921175003926870174856163838529721771197526215023293307870466584008000908766883593506986016885198596412045021795455106823380678908982508665555662882539581354648297999689587965035010272170174608795426460908583833371266309245129615847914977852289939289793688779362691498826438731776685558539570561431675927502755487002672235254946575480981925078283815810614757072545865600762788734800105532300437537618152240280378260210381427926937815089873500901690998372312344377687513618236415134520765928510644676353070039691743576324215667504147244496568639878988013275740514760662097876559217953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e00c64e7182e0e7fbb6d33d67018e2ad2a973a8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canottiera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700f8798ec0000040300473045022100c11989963978842b23bfb46d3f8b23273b1627465c3d786aeb0b183be45486b502206b249cc442c12014e28775fcf2897f76c0b85b7caa56d6731310da7afc432d3000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700f8799250000040300473045022100b603ade0e4e0ce9483772b15e73b45178ac0479f760e58112286ca03765c875f022023b065dfc2d08a55c54c6c4600b265ed6d51de1027f781218ecb0db70bd4e2c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008865a60374dc589e5ff8b1de844487eb4a1b352dbc9c03ce74807bd5ffe8e8660ced279f1d5b2cf22395c38a145588ee8ecbb40b73754a9eaffe9f1c0be8619d7398c04859f1c638e5ae9b3452600c5a2492d5e47e602fb4f3ff78ae86e6e15395526c98288c7598bd6c046d6ed628bbaf17633f0c2aedf7cbd60976ef94784a4cf22ab2023bdf130211a2e93cc2e669fc9ac58e12351660bdea27d8575151b28107170f60613aa3c95ff6339e5608e694fe57d5563349b894b31e20605fc3af2fee1391954bf288abc6c70c9256cb6950729dfa23b509aaa7740b407837c6959fb74ec6ba1231618d4d5a35b8f5e0307c384db6edb820595a73849176fd6143