www.salvagenti.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:fe:e1:ed:ce:8c:e1:ea:aa:75:c1:af:ed:04:32:a0:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.salvagenti.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:fe:e1:ed:ce:8c:e1:ea:aa:75:c1:af:ed:04:32:a0:4e
Serial Number (int): 320204221906700373184753051702434846646350
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:6e:f5:b4:cf:23:b3:91:d6:14:e6:7d:a1:2b:e7:dc:5f:71:dd:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:a2:05:72:47:50:77:42:6f:e1:9d:17:a9:dc:73:d3:7d:8e:21:b6
Fingerprint (sha256): c0:0b:69:15:d8:b1:3b:a3:a8:e1:ef:ac:93:96:a1:5b:7a:99:45:ee:aa:74:1e:af:be:ff:e9:06:7c:1b:a4:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.salvagenti.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.salvagenti.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.salvagenti.com

Other certificates including the domain name salvagenti.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.salvagenti.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320204221906700373184753051702434846646350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 14:10:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 14:10:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.salvagenti.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808757605284100348457916425429330814773403291582283682707863633440519931770372595441510883114087973247676047254198050855126114716596097171301928438285857755312019511758911411595432253882880294976205307702054611071977968034604047199843178750603037892088605230537031111753472868869537398890780737861224240531382205423559421275517769616153515687568963896939185089881627444985942314604509292942094608503384696321634431894001932949545094145694925791697896363134207179280398674673249130814658686088693630649148422192321345002975025595992703890883646428092096011968133683445197559212595899910961122501561042459873141482039272220465721760393639436511485594143137497580938795304591018157384942750724517087853599368693789300408880347715428149618090936086206383041045314934708029508067936842184124309032871350465293073975589024429859474769556095199670864179708834335271472464453424398721533721169797680867794454295052464863181023419776988167940989125819351068480090487748967281235911142371267403531929989604673761329801239681079152436181293315719075051685541660497928825570370526081646900509382932672571549358784939387366067040087682544341988023230748038978959890082073333708164830703461362110613185182346222014651216537278954089536120116955289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da6ef5b4cf23b391d614e67da12be7dc5f71ddfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvagenti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2ed564680000040300473045022100e23fbf56eaa1f7a169836aa8bdf58a45c23aecb2b2671683c0953aab3c7bca090220174de7c10b5ca3a0f240330325f97e534f2e8b979ec6a0674062e471438197a5007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2ed5648a00000403004830460221008900c84209703a4cd67b97c1f2a6fbc54a329af0185e2a6045e7f103ef579fb6022100bf4595b406c3f6727d89daf5b0701e34b794bd6a89c5dbb4012ff57c97dc1ec3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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