sanferdinandodipuglia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:ee:02:02:3d:58:fc:2f:bb:d7:6a:dd:58:7f:c4:d6:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanferdinandodipuglia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:ee:02:02:3d:58:fc:2f:bb:d7:6a:dd:58:7f:c4:d6:ce
Serial Number (int): 270160283661320005250123001827526929864398
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:d2:94:6d:c2:88:67:bb:8b:b2:c0:03:e4:c1:10:fd:21:8f:6b:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:4d:ff:dc:38:29:f1:f0:9d:35:78:6d:9c:53:cf:59:b4:13:ef:f1
Fingerprint (sha256): ce:fa:d4:6c:b6:c1:69:f2:c7:c4:a0:1a:25:1d:f6:ad:54:35:1e:7b:5f:e4:65:39:d2:9a:01:3e:f6:4a:7e:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanferdinandodipuglia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanferdinandodipuglia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanferdinandodipuglia.org

Other certificates including the domain name sanferdinandodipuglia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanferdinandodipuglia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270160283661320005250123001827526929864398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 08:17:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 08:17:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanferdinandodipuglia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827793708020157746435167121642705154030063056472409151411527507614299936639464263359264998818261696814200020758692879150974194589607232585307683869955368256750155718953827187480071842491069018418954466845869334543237857059516906280139684726938335310644181981110877423787200601980942105134865914559657951994126975928142454304139438539589284916197071741296024646575020185682120671999548253800930831040701641420839078710796877948393923387478197097320033808827933222447302357239873837565377457476912063013876967600316923000665769420694258175588156609940030233610022842176057542121236266310756489071499993319261785695109489345782599763837553905874989841710824696585589732604951902935648234764602904700591103411310327483982883983260664097839824423966533048078761387419478294896033448462793941578546069781330348671053414652518649081745011287131057837888100783324939427423374936891027008435352628989488326132978160868150566211209873741394012722873523726568208256511555011004926226468302777881604479409700510693705975205798410211195928278634897292509466657558504335943832980326797002446217794479231773461570602652666040266472384717816323765847604425867003913013312955050667744922047893436621403610057920865341363377366024689152527602583508811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ed2946dc28867bb8bb2c003e4c110fd218f6b70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanferdinandodipuglia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7728f4df0000040300483046022100dd6e9d986ea56ec6017f051dd7383d30efbbf8728a9a82c2bad8b5d832f9c2a0022100acbe1ed6b0ba0189f066563650402d2c1430ae441be05925a369befe0e8ab67b00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7728f4d70000040300483046022100e22325f25a1d681a4c17b0f2e955b8fb765624eff73e1856f5b3c4810e843df8022100c0528f99ec634b50409458c492a4f1f3c532a8f0fbfb1690ce530097ec59e737
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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