trezzanosulnaviglio.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:38:42:0c:65:c3:9e:31:f1:d7:04:81:c3:dd:ba:1c:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trezzanosulnaviglio.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:38:42:0c:65:c3:9e:31:f1:d7:04:81:c3:dd:ba:1c:fb
Serial Number (int): 317898510414964643943110500767203744947451
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:ed:d3:b8:0c:f4:81:01:75:6d:17:3a:21:f7:25:7e:21:e9:9a:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:ad:bb:05:3c:2a:71:03:2e:24:21:16:e2:57:04:62:78:2f:c3:c1
Fingerprint (sha256): be:2a:8d:31:de:f4:39:88:fc:37:47:16:8c:43:91:8d:32:04:62:8d:2a:0d:79:e8:cd:e1:60:d1:76:87:05:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trezzanosulnaviglio.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trezzanosulnaviglio.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trezzanosulnaviglio.org

Other certificates including the domain name trezzanosulnaviglio.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for trezzanosulnaviglio.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317898510414964643943110500767203744947451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:24:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:24:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trezzanosulnaviglio.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729136186257995403728671418868607424203158607226319541791117255898195681654198574968029220384676688822788314435424926766080760104673007899564576511853783275170862691883668134665635405906038846223242448421791354440399199341528774011755520199183024537095906562578362894188476201722555632580912027045814906969581802048263647074944736418131708975450469469098077960638280673681314972267617457403944295695602913042481734892330768150272442952841092369157444111527419604577352086253878407969908627309932622373264334633026721302202467023797246011170408418055742153268628355483572921362824376321728749096760295997376793321879019530815141703413000744328553293318753266483687007253147630393846766263525630971758859531933464068234136495049320818653322557104613125210334526556875845822404060833458366003485157244531293001660639170913270075050965432249504384551492967799806704762153216080610632305868295786780979815875231101009567302881033480921564426759224111524326242321153894297073243682523328973624124824823879704194544207417293376847371912192891700331963807216751756202771317251722931936193026770511380785649334047910837011147657173518397051594008265277795887252127258432184334723791548187342953739930050681167750552117739016375216038799687501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2edd3b80cf48101756d173a21f7257e21e99ade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trezzanosulnaviglio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016affaf506100000403004730450220424a2ffa73a36616010a3bb63637441dadba95cbcf7e8fa9810848f71ed87b290221008de6d7195452d010340a62cb5358a8f5356df1500a413a233e709fd5150b380a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016affaf51630000040300473045022100f93e23d13791ce38f683c8eb104441a62315c6b9edb3677588242f735579835e02204edb9e72b4c2de62631922cace02f622481765c859750093ceaf952a9c50d470
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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