mantovane.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:15:56:3f:e6:88:9b:de:1e:5d:17:97:6f:76:27:72:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mantovane.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:15:56:3f:e6:88:9b:de:1e:5d:17:97:6f:76:27:72:77
Serial Number (int): 329421692800966310663152900632909913223799
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:db:3c:43:cd:07:ed:93:c5:39:b5:02:37:68:3c:77:2c:8f:db:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:4c:17:8c:9c:0b:ef:08:2a:b0:6d:41:bc:16:27:53:04:8e:bb:8f
Fingerprint (sha256): c6:1c:e7:9b:26:5c:43:bf:2d:7f:fd:0b:0e:47:52:e5:26:71:cb:dc:bb:74:a0:d3:04:3e:cc:c6:f9:a6:47:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mantovane.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mantovane.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mantovane.com

Other certificates including the domain name mantovane.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mantovane.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329421692800966310663152900632909913223799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 21:47:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 21:47:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mantovane.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717108649618272202269408942925938022499960560506669794709505854908503993052596360164051654552996397065654216758471939890847201563811693204856067584304275306064665712045466256546608247944058047531444248365428760551149171263285605150819061860298137949032087453446824792938734615219588498377115248441935176072975867860612868564776244414893649976079239390645752521992688050702338251395229300172927195618002279800655372300909148061009651430742797796437307497086610640034454272511290607740428129313023826206395298785797474185198291108057651813449805154608259784944732105788716027064007890768894371222457444157092859958238725230717101962760600196839656450569769861654993504942690205277512821953179396378905398524531623386738604450082218021246485551312618363626287383404140927688924714029387063816973370700655253510982893278427282396493780773150662204361406925560585607123496357477136459296348369776026048959050423502575709632115029514115842599721519651770965755014329074569236351139813864461174210575364548354361711679189192258264621604089336321406233356452036065120767896779572806495526521589892457241225564274849053411455656378802734624928904004449265706990635227462996308037319034658037217917167413247051194498751329588172927706115822351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3adb3c43cd07ed93c539b50237683c772c8fdb0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantovane.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170db3ac44c000004030047304502202ab792998528211a034b882c1f04bab7b903584e6c88912fdac096ee3cba86be022100ecf251ed63f1feb5ac0733a4593be54c8a3e3334edb18532739a338040da31d8007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170db3ac43900000403004630440220694225a83d1cb34837b339e879742e1185326e1fb1a1e1c0e1541abf85ad004d022025210459c0230d16feeaf6f2dd6bfee219fdc5ea4d331d20d38caa8b6abe2e94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00389c929f68ced7ebf7f36b25c3a2909bce2587d976c7a89563eccebab473cc379280fd02194002ffe98b54462ffdd5f5ba78a8fd7276c34413400480d401c677f872aae7dd0be53df7fe563873ba854ec1c6512441a2a2f7c563652f46098a32cb5dfd9d1dc0c5deb98cee8480f81c8d81832d6cab49a39229bd289b6575d9aef5590489b1534f4421adb74a39ef3031dc482e19bc9eff839b5efa35a1f2711d2830ae8882f793c2f6f1083d67a9daee6f13f29e9b1015e5243867253cf618319270af0e7a230ed0fd7183ce31a33b5b4bceb3315b8137a8733d35e754603f0578b90e6402ac5893def7fd590bb14e7650047e89eddc35e114b8653aa957f467