www.trezzanosulnaviglio.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:b3:9f:5a:df:f1:2c:e3:52:57:9e:30:79:70:f3:22:eb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.trezzanosulnaviglio.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:b3:9f:5a:df:f1:2c:e3:52:57:9e:30:79:70:f3:22:eb
Serial Number (int): 299006677386189362622616053944137704219371
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:ed:06:d0:9b:51:d6:73:64:a9:0f:f3:ac:5c:c7:56:c5:d9:30:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:67:21:33:61:e9:e8:7e:07:15:08:a2:2d:ff:5f:dc:69:36:e2:82
Fingerprint (sha256): b9:be:e2:47:25:af:89:12:25:6a:53:36:b0:81:b6:58:9e:05:39:72:31:a3:7e:c1:d7:d6:69:fc:5b:db:b9:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.trezzanosulnaviglio.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.trezzanosulnaviglio.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.trezzanosulnaviglio.org

Other certificates including the domain name trezzanosulnaviglio.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.trezzanosulnaviglio.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299006677386189362622616053944137704219371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:37:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:37:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.trezzanosulnaviglio.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762906469316630183637234077868626398020565466950006397107445047831422762872244686361895434266861714002368145530385768550282670669904981366075009442913251484948667584705037879176283063945920997244894978470750167504454266057563269996574130033911320985597583966765764479351276499252310926460517696660125013847533022503569995507577208986021138168461574288933850594937750963990216288827436265540508954962344752396144856749268151408546853224757700063074942604398704303180729082025851273873153416082667758959799142165252028586631426552270154657197144089032348291264337589979462266445933899659295609811003354965942555674423356911294090461210843563527467789402787163178497539207877622226757224103604206215151175311689082793327949615773348151286578360868025267199534507193440976789474041560989091105724297287021274700860514675599213538938502791293696837967592167662253256673279365172538960077343373086062462255997148290297090360714338635500920952494772361808007318888439418245643592136599019740116267752587021538226460637990232498168044232052640296376029907569545209797269740615687041826426387160053636752151321594519760642712255809566907728350727734352675432718730789478501925093661646745987336856916796352758667743334713064566288074480900991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9ed06d09b51d67364a90ff3ac5cc756c5d930e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trezzanosulnaviglio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3b296c7c000004030046304402204d45241ae4c75b483637c9368527bf29497cb3f5a8b5e440e894f6ef7368025202204988e1ee708b421b6f8a9c31104cd910ed669704fc78872325463e8321b7d743007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b296e64000004030047304502200eccf6491bb2d0eef9ce1c9eebabd5ea3d3f6e3d41d3ee0def3270b3bdd888f60221009e22553927fb42bcba17f26f21fdb19129ee311f538d370449c2acb7649a0ca2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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