ditosama.at

Issued by R3

About this certificate

This digital certificate with serial number 03:79:26:82:11:61:11:2b:3d:ed:61:ef:c5:6b:70:9b:bb:b3 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ditosama.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:26:82:11:61:11:2b:3d:ed:61:ef:c5:6b:70:9b:bb:b3
Serial Number (int): 302562210207637138897084614765279136431027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:17:bb:6c:a3:b2:c9:02:be:ea:a2:d4:7e:45:89:ab:9e:41:db:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:8c:90:10:4a:da:67:0f:ab:9e:0e:c7:b2:90:81:a1:f3:9e:2b:53
Fingerprint (sha256): ca:24:84:76:ea:a9:29:4f:4a:3f:55:7d:95:03:1b:d8:a7:f5:cf:85:43:aa:2b:34:99:d0:b1:2a:14:b2:78:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ditosama.at

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ditosama.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dito-sama.com
ditosama.at
ditosama.be
ditosama.ch
ditosama.com
ditosama.de
ditosama.es
ditosama.fr
ditosama.it
ditosama.nl
ditosama.pt
ditosama.us
molteni.com
salesapp.docker.uat.jobinformatica.com
testepr.comunicazione21.com
www.dito-sama.com
www.ditosama.at
www.ditosama.be
www.ditosama.ch
www.ditosama.com
www.ditosama.de
www.ditosama.es
www.ditosama.fr
www.ditosama.it
www.ditosama.nl
www.ditosama.pt
www.ditosama.us
www.molteni.com
www.testepr.comunicazione21.com

Other certificates including the domain name ditosama.at

(limited to 100 certificates)
ditosama.com
ditosama.at
ditosama.com
ditosama.at
ditosama.com
ditosama.com
ditosama.at
ditosama.at
ditosama.com
ditosama.com

Certificate

The complete raw certificate details for ditosama.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVdebmtJP23BAyo6Pxbj
O/Yght4avoj4PvJ5cjU0tHeFO5ItJQK9czHBzyTKhuzGLSQuWoc/8RuG7ayQgzge
XCEJs0nq8tUXFFLDHIBu1sfOXyxrpmAhkNIs3xnjl3W8o5AiEXHGxcbfhIbB9vFC
WwcEaSjS2Ir3DvkBZm8yUIL0ggVi8MTXxgiceiFSDzAI0M5zNlosa+fwZEXZeK9X
LWVCClooubhcnWgjJ+cfBAQGulplurXoDF1mhyE1lPPzuQG8wcSFmaUFYX0TtFYU
xr29tny8NbRiUyJYX5feKF4TZuUUiWFC367NrImdbASCMOWHeDvi2ZMvpcbscZZy
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302562210207637138897084614765279136431027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 09:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 09:33:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ditosama.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22387263175686586184144347323198937253524580323738718557958116336324831874221281798565491079646891660588491461074316540512236932763681999533210437953320072303936974192657975696914085551667658391646555863905364435434825345481178620193032766647512579906406342245816947534005153972361020563633161293672033175177733463623164906415600856212431693910301865135436712722754546081453546787161538703069969342683440180117929782914751234868689023600879304060823842355481660732998728771385550639263854180835552817405029084750585095748075907054181484942927754721229718120194018035092227183656359850193140929811044987935734814372553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e917bb6ca3b2c902beeaa2d47e4589ab9e41db92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dito-sama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditosama.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molteni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesapp.docker.uat.jobinformatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testepr.comunicazione21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dito-sama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditosama.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molteni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testepr.comunicazione21.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189688fda230000040300483046022100fbd6be968d49231c21d092e470671d016ef8d674a1431a505602d8a7a4cc47fd022100cb66de23a627ec0ef2d332d92186ae848a97d584b9e332bdafaf13f76e2992aa007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189688fda270000040300473045022100b819908c023c7d601389d422e8dbd1804454f75894ca28912e469d09f0098d3602200ae3fae1cf1652147b714bd1855b1a1f8e0c2133c71684aa6b14aa01b7d6266b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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