www.salvagenti.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:d8:c9:47:e8:8a:62:90:9e:87:4f:b2:8c:00:aa:ef:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.salvagenti.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:d8:c9:47:e8:8a:62:90:9e:87:4f:b2:8c:00:aa:ef:ab
Serial Number (int): 313007653557575398903350524764585569480619
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:1e:17:f9:38:a2:9e:fb:01:d2:9c:7f:80:71:73:64:8a:6d:74:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:d9:10:da:e4:fa:3e:7f:ff:6e:4a:f2:65:b5:45:bd:ca:ef:fc:4a
Fingerprint (sha256): ce:2f:97:21:8b:78:9f:65:62:4d:a3:7f:92:26:a4:e1:2e:2f:a1:de:e0:cf:40:4a:a2:58:8f:87:70:8f:53:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.salvagenti.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.salvagenti.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.salvagenti.com

Other certificates including the domain name salvagenti.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.salvagenti.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313007653557575398903350524764585569480619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 01:29:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 01:29:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.salvagenti.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 974237860162128505363540052399873536453491054116546496500041745918323241378001677816662655347982540587279279660998723430189749047463530148305260312280432755157483612795082417753453304364057149399637721394330733616309986989688887499768005365911974065519026191626918480471142621362857440889974498236043326068695533923872406289666940512239221427959918797957603427690148666530466352415983575309944575114358750283576091899125602323320832791666403203194901907357098559729434530883730377232731994833927747428068633223000562627397456131818122983917208504715442495691456482667115752377780192377653994824544437966585134947008575068708044658150174354063799411926299716063584833925796968315909486084380773009019968657380380749917257562824524017209560055069865596330107261177734179966237682434353061557826537267550883817590056027730508673725607309107468936062650490256629769616945049234364385471863847464747845189955536425139244254466125096688097699601224370640461244580265116761230565804397496257176610525088214959040658711833301668252096233386553053898134901575211978467792091943102952846850806586505626980989074494511213482607804003787834510942153573064307647829103540066074383605887716687485436601986986634820244392351737863839200665195799323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b51e17f938a29efb01d29c7f807173648a6d74e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvagenti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d75b3626a0000040300483046022100c90f72dd1f6beb2f66ba9b38236cc07ad5586045d0b1667b87cc23d0a19d5817022100bb0388ad13a6b3d14bfacdc7ff7e479e05261437eafe16397230a651155ad58a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d75b362900000040300483046022100cdb9841f23f04938b548fe84ea3ae0d29245f0dc6a45866dc766b289b3df1a4a02210095518d98f9ce98b69715ff22443ebac56311729b05b7051bc6f3f2fde54ca36a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0029378d7bd2f0625ca6507823810c22d5a2d637fc85e869ada89ffd3607b467fd43b1a6e3e2c2b77d17995028a799023f0148e2a12fe260e5b92e570198d286f81b23c9f9ea53f7c552d3d71fd846451b74d4cb668a153170cc763b26e74e42b6f531c3d39c6f6c271dd6ce6eb3d3cf911d4ec80cc41d5f43f8d6481a6e36735da03848a9b8a02af578f86bdcdc7b2dae58b38b498a3981be30650916e21856f9abbee63797d99ad5f9ec16cbaae27d76d56199630c5478d7ba0cd8ce3426d484ce0944f5d872f0529288fdb4150f3aa35b3a6937074e0f1a47d75bb5be9af51aa5225e0766f70b02cdb0b069265641fc182570cff024eb057d97f4994ae807e6