cassanomagnago.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:9f:42:7f:77:80:35:0d:ab:1d:80:89:57:f2:03:44:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cassanomagnago.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:9f:42:7f:77:80:35:0d:ab:1d:80:89:57:f2:03:44:94
Serial Number (int): 340494059449194777607622250890130845025428
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:e1:96:10:b5:11:48:6a:51:41:38:3c:f9:6d:7f:0f:65:3b:06:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:b6:22:dc:7e:7e:89:c4:de:86:e4:37:24:4e:c5:b3:3c:4f:50:e6
Fingerprint (sha256): b8:85:a6:0e:1b:08:0a:06:04:ef:6a:71:30:52:89:30:79:67:1c:51:8d:b8:41:d1:2b:c5:fb:1a:70:73:5d:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cassanomagnago.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cassanomagnago.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cassanomagnago.org

Other certificates including the domain name cassanomagnago.org

(limited to 100 certificates)
cassanomagnago.org
www.cassanomagnago.org
www.cassanomagnago.org
cassanomagnago.org
www.cassanomagnago.org
marsrace.space
bgt.bible
826.me
cassanomagnago.org
cassanomagnago.org
cassanomagnago.org
cassanomagnago.org
www.cassanomagnago.org
autopartadz.com
cassanomagnago.org
www.cassanomagnago.org

Certificate

The complete raw certificate details for cassanomagnago.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA+ifQn93gDUNqx2AiVfyA0SUMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDMxNzI3MTRaFw0y
MDA3MDIxNzI3MTRaMB0xGzAZBgNVBAMTEmNhc3Nhbm9tYWduYWdvLm9yZzCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALhG4WQrsZcoqy504p9tuXZIy3H1
9JL6wW+cq5SijiZsvCyaiJIR7HbCD1ldo1opY2bIsXHpZwnCofiAD4g4FPc8VWQh
JS/HqnVg7/Vk16kJs4lNPvbjK6/3hfhR8VDRCZ4EopC7n43r6IurtqAz7PIa4FII
xxQwzrvk0TsohL4DePKkot9bWpMskofVfUD+CAzySM2uyWxGAok9qLJk2bfcFS8G
kAc74JCEwCRBssmOfNKeN6e/dXbjwGng33EryJJ03y6N9EztCLmct3bvKT1+yU6n
pvncXi0I5R+IqTfCEWqeY6ogygsQSsj9ta+35QTDJaFMPWpfhk++1jlnqdWw4few
4itGthbfebA2yRvj7sDRXKZpkrPqss5cf+MQHk8RE9GsNK5I8ekw5WXx8QdjoKw9
OfcSJo9NUOoQwDVvvfQBFsVbyasVIXBJOlATkK93nUQaoQQkqktoX54uPG8KY7RC
TpkzWBWeCGPwnyoFwAKN54Bv88Ng2ZIiAy0gvRG4r9+DiRr40JirQP7p7W6/ZMC6
JUtU7UQC3jv14vcid7+h4qV0kfhYflF6QRJWlNHZhlbyMaUAMjEsTt58QET65TOd
Iped1hLHZnhYpnZPsk5iYPu9TkIb28veJ+kiA+lUuzlxexAJK+cjYfawqqhqv1/c
i/ZHlKoYDR9WnX/jAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FD3hlhC1EUhqUUE4PPltfw9lOwblMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISY2Fzc2Fub21hZ25h
Z28ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgA
AAFxQUwK1AAABAMARzBFAiEAo+A6QMWAk0yEf4ThAAsEqSnwPiX6JVtPLD/tjqYr
oMMCIHoyCwbYRw7/Abb263MuPIHOq8wz3Reh78U+STcAbtWOAHYAB7dcG+V9aP/x
sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFxQUwK+QAABAMARzBFAiAO2ctrQ02M
fBg3lPAi6t16jkAiw+E7xW+mNswlST5djwIhANmAOj9m3aDals+S/9ufP+L3eR/6
DZWAsh621SDr2BecMA0GCSqGSIb3DQEBCwUAA4IBAQBudohiFVKdxFukV76XRFnK
xscXOAwPqInCKK2bQ4A68h6IDy0QYvmyokF7CgUYHudzblT8JrHmiF0Kuc4F6uVk
xgXU34NS9oIEZWUKXzYPCB+Mx3Y33GGb/CsaVMoo0gtWyRXpyJtuZFUYxqSkZtcu
9ofhwpJvg1J4MQNs1YSKqmW7rguuqWF1yV3mZNkMMptVcP77sPd9/YMKbiaq30hw
VuI7b0OeSIldHkqPFBn4StsdWFwttbvVLZEByRHdEtgE3gRgSjDLsbLBqa9OipYW
N80HrsIIA792DsP3k/5acYfpqCMKAaTygx4/SKaq+5VwwU2qNQA+DPdNRjIu1kT/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340494059449194777607622250890130845025428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 17:27:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 17:27:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cassanomagnago.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751784066894993244654675222044363972635429583719702161208258432420839874887210325833602998973533907398702089179312670369488789084531965796958647783678231431130251589732110929360092566691296034376704087565826125665813287451385876976181725034178738655356098114241202235038313805541420963451951505841962044188657219946522422694311253902234531411650587176157933552421344654002756607683968197880777100696220724610122993368990792534271100776757572761025012827553203983401195600360153516862633541542361643526858738629736244448989674925005396565874328009419201449821216540612670014751682621570380315300989060054725354829563512540827100457521709194745866730367116887683058805361510591152234225577488366132528413889314946594376468149309588591870699224589040895668346190488031878711359258988272018754853771367440826007979764634820705164869587768694815538656250873869182959345222844154402725852641185088414893464358987250191100510787431896472108955075940416408546804769069021274429334677787817824054208539410602051699206401161641324416432807815636204845211734030553812281120571096394079213628447265615595687813012873035054333844444377962880436704060398363630486240201590923443373519529186860548584125748949405928755807927883494734792141918011363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3de19610b511486a5141383cf96d7f0f653b06e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassanomagnago.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000171414c0ad40000040300473045022100a3e03a40c580934c847f84e1000b04a929f03e25fa255b4f2c3fed8ea62ba0c302207a320b06d8470eff01b6f6eb732e3c81ceabcc33dd17a1efc53e4937006ed58e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171414c0af9000004030047304502200ed9cb6b434d8c7c183794f022eadd7a8e4022c3e13bc56fa636cc25493e5d8f022100d9803a3f66dda0da96cf92ffdb9f3fe2f7791ffa0d9580b21eb6d520ebd8179c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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