sassomarconi.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5f:ad:87:26:13:64:c5:53:50:bd:42:10:aa:6b:9f:d7:3e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sassomarconi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5f:ad:87:26:13:64:c5:53:50:bd:42:10:aa:6b:9f:d7:3e
Serial Number (int): 381006626760144920342607288152697436362558
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:d2:75:2d:88:62:76:a4:53:59:59:84:bb:a2:66:47:84:15:83:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:5f:c9:ea:f5:d1:2c:fa:76:9e:5a:2d:8a:ff:0d:f2:12:b1:ef:c2
Fingerprint (sha256): cb:27:bf:b6:35:1b:da:c0:71:62:8d:f2:51:7d:6d:26:4a:b6:6c:01:ce:3e:d1:de:a7:f8:d4:17:66:04:ee:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sassomarconi.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sassomarconi.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sassomarconi.org

Other certificates including the domain name sassomarconi.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sassomarconi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381006626760144920342607288152697436362558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 06:51:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 06:51:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sassomarconi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866213309195775041126650354398046415802212239677609568652540140562047789273549660837681870229337379257024031600527319043864900905363681810149977119315661777491890775340067472131892985137335281904928281247514498701481278334629220838161444683758360629183026069960985153991883025361967704842012105323395726326202667333939741611221445144913291213802854371707204664550765759915174642354443605456968748219487411437791742265117728144841226399381924696469977423080710225500808043373224876317325736123793374698951072965294645037630658401114521650955947124391232505377679354543526196405048736840175576753775030868351624820004413685423245149236698285929487540318653887646655262064613071673192593942794985846633653578644177331914402963550083051908922665325578388688107471005991389247132614246921219772959218027075116714828439940834805593008923470222982203689236615511196529903315757052079455464848728601567100729123218071642141536134028680628448248902923525976490896813856390601903533857982081067326673633816092882996287243093472971495557067957406477843848661883855127730284405102081867841937455278182991810252815894189939644275384523935217368795643475509355333233912542438461686403094395873446968885128120789262434712035281983251998671220827437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1d2752d886276a453595984bba2664784158369
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassomarconi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170333b333a000004030048304602210087f238aea46fe98ef244b2ed12c30fab111746eccd3fd64ab553c5d112139ff9022100910034577b874407064980aa9a6edf27f891ac5bb484ffa4e8f27731407bc4f5007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170333b333a0000040300463044022046badbca7d1dbc992ac7a95fabd0bf7404b332f78d9841be394d521eb57f17570220422f32b044d147fcf76df28f9346266b380ba896f1e296eaf3eb55f4dbc21319
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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