disegnodilegge.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:07:67:f9:94:b7:24:08:c8:88:b7:e8:60:83:9f:47:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=disegnodilegge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:07:67:f9:94:b7:24:08:c8:88:b7:e8:60:83:9f:47:de
Serial Number (int): 272235738001400132950037753312805631510494
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:8e:06:27:d8:de:3e:b9:6b:ec:ba:a6:1f:e9:2f:14:2b:bc:1f:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:dc:7d:a7:d4:82:99:64:4e:3d:bf:dd:93:96:f6:14:09:ca:1d:f8
Fingerprint (sha256): bb:76:4a:40:3a:e6:bc:9b:0b:4d:24:46:fb:ea:0e:70:c1:a2:44:4b:5e:18:ac:76:44:6e:d3:29:10:9c:4f:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate disegnodilegge.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for disegnodilegge.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

disegnodilegge.com

Other certificates including the domain name disegnodilegge.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for disegnodilegge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272235738001400132950037753312805631510494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 18:16:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 18:16:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'disegnodilegge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779577563974489446165184677133737780768035474890036343240662630163085088500608742225093020826741835814594338696580330547129162879863338170166033005054861032665180675630929586737598724557192240907362011624933957976567144676320313704465909651778258055282301767842298763492695827561728638179086431414808976261021019074917522800227130928284721563089740334406498909883864034643276900640111277733880512375954519786736680411763764625066120372701495961344629118881411512853412567241169333180420175403806887679885277852337097968569491986421091978066785801019727898101014766388307398697612241703727270574659698544590927367345066020784823815540348940864810869685806655506413684459608116343444659051874811487751809153107668733623882236412568666670420687696772359544894224603088027056298637161506602396739401688771146033969985042257303228456844433751047833632749569896312390205812143627699598784653915301556759333999206815483133572379614294476115492133123960342544701531663200985769912367892986913132976901455166415968533293461433711469161817141745755344093832724540788432921092963821945688985586670193059412585224427527584159284919738831685726622781164306941303902602534461758914394327484185391760021911652742669591593798018350019738453181635887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							288e0627d8de3eb96becbaa61fe92f142bbc1fe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disegnodilegge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d794de8c300000403004730450220788b3b9863911b63305e9f14a41bd7f18ae766b6b5a70e73473c87517d8eae55022100ab1d870fa124fc27ac84d07128601836b38939b0b2d6abbdf73437f669a4ac7900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d794de8d10000040300473045022100b04eb23c612daab6328652ca4d034622c74b39270514bad909915278266c2538022023f657c82732a9f9b317310ee302ca6a48cdeae7916b159fa6445b6c3721f380
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001502da5761d589b80e342ed23a789701700ec5ddea4bbe0fe03cf1d3267eec0cd17e99ce8e7216740feb1d605902f1378bbcbfef7178430412202668782efaa10fb34322030358b39cfa7f56ceb66f71535948355810062517c3a10f339b62d11b128f5a0a2a3598e4c5e3a03efd68f292c6c97b6360340a2cad7fd0cb5242798af8eebe2387086dd76a53c74b3f4e25d015eb352047667d75944ca3c7f9a25179f7fccbb583b6b80d32da1226324d9ec6ed9dd9d05a9ff3ec0cf7b65df1ff9bdf225895bba6a4537c351b87b8c169a803cd9cf57c751a4154ed41a6da662ca52b46a7a38306bb361074663c5c6a57ba5c4000fad633915ae74fd22e753daa51