romanodilombardia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4e:52:70:ae:d1:d1:3b:ae:0c:fc:89:87:32:07:4b:bb:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=romanodilombardia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4e:52:70:ae:d1:d1:3b:ae:0c:fc:89:87:32:07:4b:bb:8b
Serial Number (int): 375100750125539417255390569863318715743115
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 27:4f:4b:39:7c:bd:5b:ee:0f:7d:98:d5:cd:c3:4a:af:0c:15:d7:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:06:c1:ab:84:41:02:b2:d0:58:e4:55:4e:70:20:ec:61:13:79:88
Fingerprint (sha256): c2:fb:36:aa:34:1e:da:c9:fa:95:c9:c8:97:7d:36:fa:82:b0:44:21:ad:57:65:97:e4:e8:0a:b4:c5:7a:01:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate romanodilombardia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for romanodilombardia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

romanodilombardia.org

Other certificates including the domain name romanodilombardia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for romanodilombardia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375100750125539417255390569863318715743115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 06:39:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 06:39:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'romanodilombardia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815167986790459838812467410166905424141918692060453959222124614415349177350615609771842305575733923208165920597246927332698128768106707968216634974834022059311151117205494421829101285095158591159596071964857495296563491463659588348430700969399671189098711272792544939165052643349813794970533842925856884063670288848485630212985970044122782181316196778515718107621983983989056980734155537091959377802673071413131118431762770619121200712502833718653552048822193841047098653558813762866726190628969987691824674849116610244563197130808764086584109576357057182349806663247454017265291056093122446318855381202204622034220515566908397140324612440987640258962910355157208732726638331945633931830532505126991143600532057984453903857439493410241532291913696155638430805503000719744977495835312768708614759791071984284786294100598084511495894207552471779219008281984028817890963127942558143586967495650733049402704756863130488198103920816688319469041340586742590983694476369477219388473907495240881601187183800421550414731303841817453821474320528299307754022956429922952587949024674712887656241357791393076412674959300842829466745070921424049983823948477725133775141814815457201903981827931420918024355740977534790953280600792825293064598692357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							274f4b397cbd5bee0f7d98d5cdc34aaf0c15d7e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanodilombardia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ecfd990980000040300473045022073882613a0078c122806662114ae3cb9379c68b635c8cbf453f544d028b4f4b1022100982cc932131dddbfb6fa625614a0dd59b4650b56a07d515adf8a26c6879c48ee00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecfd9909a0000040300473045022078c8e466ae8653650217d39d105622a594dce3b1935d21b1b25f06d314f9157c022100d34b465cb04e4319dec04dc3c11efe4616ec1b016d99819669b2694ae121be02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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