www.pastificiomaffei.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:46:ba:fc:d5:bb:49:6b:2c:31:af:c1:0f:6e:f5:8a:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pastificiomaffei.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:46:ba:fc:d5:bb:49:6b:2c:31:af:c1:0f:6e:f5:8a:b3
Serial Number (int): 293757699507791306748223584216862369876659
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:e6:24:3b:c2:5c:c6:da:48:c1:9e:04:96:e5:74:e8:f9:6a:09:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:32:3d:05:3b:31:e4:e7:c7:73:d2:26:93:5f:ec:10:8a:00:d6:09
Fingerprint (sha256): ca:18:34:19:67:43:39:aa:f5:4a:f3:c2:59:86:b9:61:35:96:35:12:14:4d:0b:f4:d1:43:b2:98:63:c8:82:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pastificiomaffei.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pastificiomaffei.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pastificiomaffei.com

Other certificates including the domain name pastificiomaffei.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pastificiomaffei.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293757699507791306748223584216862369876659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 23:58:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 23:58:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pastificiomaffei.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738916201173602173095899191379354394277594142052735495214429794545934255137937176516872548761332983168559781893011162694660828181534705380101575639511605438940601978015411657591237213907077773759969529950641590302422702752570536472446997406253864249971823234615775533855550722375725306436414843663383266371901041645377201565610050984622291593018191225162617926571988465196262706381775388724270030082510665132403749690672989931972280345019455515874936417319418936338649441115767646424040632701126545641653478859368818378790728784669034881722082208145499133354973444013690591284955778110817972635688128117896089570676934106401717030342700803909932874919056581324350798024388533135758319507808208701352785678172547227162010751436630790018786911030753591865107636771448376088921469558326344592960710281524672485632933557880269644048445520510303324639416934317666480133913867334035389196072616209588540608966898947126313110558798963463433179657941040951360182314686786124676381771633728503489900141940360425949124068340630274358887720172501203833318605821888627666989659836479925469670335257030488259854800287772391507723990188716027675222096892850848614397036106716760886306575088125910003939055662545059576333895452022272468155057615019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4e6243bc25cc6da48c19e0496e574e8f96a0953
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pastificiomaffei.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017098c07078000004030046304402204e367628050cf2483c2eda9b70868bceb85eb957560b72d405d45253097c808d02205174dab52d29c4f8710e1a3063c104f55d91814062ec28528d47ec9c4bd0e32f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017098c070890000040300483046022100cc08761f08bea41e29febb9d03264e088378da7a49eb55debbb4162183e927a20221008d0d3351286a07e9dd0294fec54d04b797405b870208513e587c8702bea36279
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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