nociglia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:81:23:f0:c7:46:04:03:d0:1e:cd:73:a3:b4:70:2c:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nociglia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:81:23:f0:c7:46:04:03:d0:1e:cd:73:a3:b4:70:2c:55
Serial Number (int): 293835339678182574856600395206825471913045
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:77:32:0c:f7:57:f8:8b:9a:e9:b0:98:20:e5:e1:32:3b:fb:b2:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:06:f7:37:32:83:00:cb:b1:48:95:cd:e9:85:16:b4:a1:96:87:10
Fingerprint (sha256): c9:29:fa:60:0d:e7:e9:25:25:ca:d3:f4:d9:62:60:5c:9f:1f:75:25:6e:4e:9c:1d:da:06:7a:7a:74:89:4a:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nociglia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nociglia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nociglia.org

Other certificates including the domain name nociglia.org

(limited to 100 certificates)
nociglia.org
nociglia.org
nociglia.org
nociglia.org
123overdracht.be
nociglia.org
www.nociglia.org
nociglia.org
www.tipkissersofgab.com
curacarpignano.org
guitarguy.store
soglianocavour.org
nociglia.org
www.nociglia.org
nociglia.org
nociglia.org
nociglia.org
www.nociglia.org
montesanosalentino.org
www.nociglia.org
www.nociglia.org
vegetables.organic
www.nociglia.org

Certificate

The complete raw certificate details for nociglia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293835339678182574856600395206825471913045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 09:51:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 09:51:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nociglia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837452145071892928619499257675419776848470518569826234693654068894896856437952453803031589675669748222593166246912538775318791465836676551937240057751731020366403301038631964959938242680352756729897004747546571166875778363173969909246346219230456092516769722739769132220383160180569784571655495220338344991415873587135222450605883764790616037964774394198229485711784584169269268722109252467091937854844025366451840894911056497489705704083869203230984285223537034929131343229876064970905220662617759543721839934950772520043563442648622350329515908726301065135232781905020787914864468991991222891531043017405359226315879848749312124875422686689078144921304414931221874857869819231944122802038184587693581246137582674414124455110862721047130980869119373753100989682854247673530678774689578687415671450240862759821650575592013742847218651636855323772733804875701295848348883391910987631948339742963117926621814206309985203519109628851399274914311248213751717486579936088921767304091417704209395370437692969480360777315505392762399432398205081292880602159977991283410716376298035821522246322549424030670964703319555009861107359291543651959261953164604474735297427739961398803240795646121640876988181946270292452901737683762142948315553653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3277320cf757f88b9ae9b09820e5e1323bfbb23b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nociglia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afe11716f0000040300473045022033f97d1dd4491c73d5181a874061144098605f7c0b63ef1071f42e49569952fa02210083f69589cdbc0a8925d549a183780bbe13248e5fd784ea76c7166b88f05eae2e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afe11715d0000040300473045022100cac7b4920f0cd154f203507ebacb7ab2dec8d7a9e584cdd65cd7ba46c46d244b02207c5e4e03b6d6070ac51e93ba8135d49570fd377ef18cd354fc6324116ab0b0cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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