pallonicalcio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:68:fb:2d:fd:01:28:3e:94:16:96:3b:fb:c2:44:44:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pallonicalcio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:68:fb:2d:fd:01:28:3e:94:16:96:3b:fb:c2:44:44:15
Serial Number (int): 275768261116786794315845309142703521678357
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:9b:b9:83:5f:6c:3c:df:78:44:e3:6b:90:9f:e6:08:06:5c:1b:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:a5:55:28:a1:6d:db:41:78:62:68:54:85:54:67:60:72:02:fc:4e
Fingerprint (sha256): c2:51:4a:df:64:fb:a2:a2:3a:70:88:9c:7d:d2:38:fc:1b:cc:69:37:5b:a3:fd:81:c8:e4:ff:ce:c7:94:3b:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pallonicalcio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pallonicalcio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pallonicalcio.com

Other certificates including the domain name pallonicalcio.com

(limited to 100 certificates)
www.pallonicalcio.com
pallonicalcio.com
pallonicalcio.com
pallonicalcio.com
pallonicalcio.com
www.pallonicalcio.com
pallonicalcio.com
pallonicalcio.com
www.pallonicalcio.com
motocarri.com
pallonicalcio.com
45705.com
www.pallonicalcio.com
www.pallonicalcio.com

Certificate

The complete raw certificate details for pallonicalcio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275768261116786794315845309142703521678357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 19:32:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 19:32:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pallonicalcio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 620512450490677968469328847945539672866284309562992826220947991491783057152991227124603618115971723489211201949058641456140305586107718891321351022409756108704012628061806869864779028701664422937105990859806089851184061788186073654139816359195319990667068825364798385699478660200218813023497039754441256514725325576427460579833109612661227626227724147317571800175260323285971578267079544922215054300523845869261049290388680259861303968592575643717385706063178540251191144167126928389691382091301052681425400420228802555142317188493271874632484016696377186730073111297224645454403491084726521536946308412177233289552644420423176345072128558508967211616866093617525778241016375433664628700450089281715705097843369866488666500845178060402980402201612119977687781926320566678768740168393022020360322703296402405745499511175230304106801413976632060189928507687388915109128081866839690763670911032429443830238190846309442502885103117862947879615372019419794317393550369498696815220582700428103724076525102257828336667667604776413432980880738122569498967287954470245833249860463090126523548962917630165412342230283529132885553218063698005122256438403784467525728693526330098708665900662319200667846673254944461948220581448911119872644107141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							599bb9835f6c3cdf7844e36b909fe608065c1b32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pallonicalcio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ff30101160000040300463044022065dd861a47ac094953c78716b352f13ffe8e755623e36eac2217b8a31916b1620220786943e434f05241fdd8f0a37a93e2a5abdb27cf609206a49ea6040414a197a0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff301010e000004030047304502204b756ec3ffc82e23f501f21046e2cf2294bd25bf06a514a9567cbb113abd1dbf022100d96edbc77cf2f50ed5685529711cf67e4b61ead33a97e51dd260cdc2b4523363
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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