www.dipintodautore.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bc:05:97:a7:9a:07:c1:45:9b:df:6c:bd:23:f9:1b:e4:d0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.dipintodautore.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bc:05:97:a7:9a:07:c1:45:9b:df:6c:bd:23:f9:1b:e4:d0Serial Number (int): 325317376352587675292818787772686692771024
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 16:92:21:f4:7f:1a:1c:6e:91:1c:ff:08:b6:db:f6:73:33:2f:35:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1f:ac:e8:f6:f2:34:49:85:b1:1b:25:45:71:a6:69:e7:58:7e:e5:bf
Fingerprint (sha256): d0:f6:a7:b3:64:4b:dd:22:25:48:4b:7b:bb:ae:c6:66:b6:3b:2a:aa:e7:ea:33:7d:db:a4:e6:d8:2b:54:fc:2e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.dipintodautore.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.dipintodautore.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.dipintodautore.com
Other certificates including the domain name dipintodautore.com
(limited to 100 certificates)
www.sanantoniostemcellclinics.com
dipintodautore.com
dipintodautore.com
dipintodautore.com
dipintodautore.com
twelvezeroes.com
dipintodautore.com
www.dipintodautore.com
dipintodautore.com
www.dipintodautore.com
dipintodautore.com
www.dipintodautore.com
www.dipintodautore.com
www.dipintodautore.com
www.sangioriodisusa.com
dipintodautore.com
dipintodautore.com
dipintodautore.com
dipintodautore.com
twelvezeroes.com
dipintodautore.com
www.dipintodautore.com
dipintodautore.com
www.dipintodautore.com
dipintodautore.com
www.dipintodautore.com
www.dipintodautore.com
www.dipintodautore.com
www.sangioriodisusa.com
Certificate
The complete raw certificate details for www.dipintodautore.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA7wFl6eaB8FFm99svSP5G+TQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjgyMjQ2MTBaFw0x OTExMjYyMjQ2MTBaMCExHzAdBgNVBAMTFnd3dy5kaXBpbnRvZGF1dG9yZS5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDUBOMdYO2Af/gcf6w+K/kT 6KPO4A+O6YomxlJBVIk8+aawk8qD7tr/i/dSOZ+rEEYb6XfFSRAfNDopKz2nggiQ HlRpUEmEND7PafDM7kxNyh/lbcyTecpPiLgefMEsIL1OXSCgvQ2yA5RS6EmIixlu EDLA6F6wSQhTznSFsR5yFCqtkTfk0tOLc2a4W2onRLXIcGUk9Q45WHPAaej/W0ZQ GnqsdahhiWGOgGkYRYBrV7p+ED71HEXNdTqFTR8p+beMauYe8sg52uy9454Hua1z UnMOtAjVJpPdPtfvcx3YAcjWCy7Jz37q8Q48/Biph138cs57K9ngWOA681qtzhBj P1ox/4cTMgCXE8ZRUh7LnJxi5r/YMnjdNXK/l2+sago5yy3l4jlETod1UBPy50wR RKDKUTva+GX34/JNK+pRX5W5F9YN9dSMSvwadwFrvAIz7solFjaLHeKgaPImMg40 quQTm5BCqFSGhUI/3ZSsYfTioqulrLaE8Pe5h0beE/lNefVCa08TQd3W+pn2Feir YO86LrMxVK/XbY2bZkD2xmxwJsHSaOYsi37/tQ0p2m1F82R3M/FwGN8Hj6h7Lyxz gis0TWHXf/D19axIwtQsYlf/i4GoStCtC1+ApbgedQn69OZIeGQk3mgY8ZZI2AMH OwcmJ7UCDhZEjzMuFGw4EwIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQWkiH0fxocbpEc/wi22/ZzMy81fzAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5kaXBp bnRvZGF1dG9yZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3 NXnmEHvMVgAAAWzan1OkAAAEAwBGMEQCIH8D8A5mktzw/fT7g21QOjI+vVkl0iYm K+TieRNi9olWAiBOHDYwtb9dpx7mxu1s+dP70h/YPn6095H4PPmWrJYnKAB2AGPy 283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbNqfU8MAAAQDAEcwRQIh ANhrJArbo+6UTDvX1/pVqz2Ob0sfEPpMz4gWPs/4A+8yAiBq/FGe/xG8u2F+CBl5 xMyUrzcHS/ZBOS9A5FRrBZ9HFzANBgkqhkiG9w0BAQsFAAOCAQEAIW46hVe3cTds QowNt0m6FxFDjjt7eh7TwOKFADs+Hz0pZQMWGGFvKEzVpFQdt09K2limWEAKKGFG yPGhNKRiXV5VXnnP/8sooNFpI0eSLGinDj47rQl6lXcKlm/DVV6kD8XVce/FLYsT gQSGAs/Vt+rKm9OKOcJQFl66/FpIBa7E1ZHHWO9XJBK7V+6Eo16RbiM5PTKRqThg ycrmUEMuXEeCiUwFENVmW4u+Qpm2E/TXDxkAOBWgu/oqnsqh5BVwzsELq/9lBWJp TvfkgPyqynkYcq+iodYqOP3yx7i09OaP8NpjEZkqP/H7RJhY+3QG2pN55V2kH9ZO 1PcalME3rw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1ATjHWDtgH/4HH+sPiv5 E+ijzuAPjumKJsZSQVSJPPmmsJPKg+7a/4v3UjmfqxBGG+l3xUkQHzQ6KSs9p4II kB5UaVBJhDQ+z2nwzO5MTcof5W3Mk3nKT4i4HnzBLCC9Tl0goL0NsgOUUuhJiIsZ bhAywOhesEkIU850hbEechQqrZE35NLTi3NmuFtqJ0S1yHBlJPUOOVhzwGno/1tG UBp6rHWoYYlhjoBpGEWAa1e6fhA+9RxFzXU6hU0fKfm3jGrmHvLIOdrsveOeB7mt c1JzDrQI1SaT3T7X73Md2AHI1gsuyc9+6vEOPPwYqYdd/HLOeyvZ4FjgOvNarc4Q Yz9aMf+HEzIAlxPGUVIey5ycYua/2DJ43TVyv5dvrGoKOcst5eI5RE6HdVAT8udM EUSgylE72vhl9+PyTSvqUV+VuRfWDfXUjEr8GncBa7wCM+7KJRY2ix3ioGjyJjIO NKrkE5uQQqhUhoVCP92UrGH04qKrpay2hPD3uYdG3hP5TXn1QmtPE0Hd1vqZ9hXo q2DvOi6zMVSv122Nm2ZA9sZscCbB0mjmLIt+/7UNKdptRfNkdzPxcBjfB4+oey8s c4IrNE1h13/w9fWsSMLULGJX/4uBqErQrQtfgKW4HnUJ+vTmSHhkJN5oGPGWSNgD BzsHJie1Ag4WRI8zLhRsOBMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325317376352587675292818787772686692771024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 22:46:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 22:46:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dipintodautore.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864962424849924912333541996746600304146787156622143199596217077064249562633241292575716149310741091134319270209528871043437576098948157158230012727679921702088000063774523462045053172153255968322833604167130012273360879100966001594583380523132712773535788645519103242403914516888718641367680765814442366375116974630197756429369488165991424999745225930874377522570844235648264860406188652457298226777285129073722002331229687028688166177323437943650243742404676981176817983782533477361633493176014510386851766048286894559805993173467560515668948735609485156672583392855171714420213549751556380437884376751908105681574397422567202968031102917549436394144464076601890005181101145687717708758922342097071684633873557576658896036537808146415276514200932210754075799958743284698103077786653140181167590331787050504770023086524347948634045187403571394302719640500014071380466849487671584155338537046700011938749366173108250857294506933436313701258453919774602290346683360099245324329128828253592387219826590925898098789118622497050126300669838772602086659517345526910197264528884702978267097091960111503655131801745068945244875629722671117028675474810349584148143419619523353025737810425006126738023044682692464775693424653991840097078360083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 169221f47f1a1c6e911cff08b6dbf673332f357f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dipintodautore.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cda9f53a4000004030046304402207f03f00e6692dcf0fdf4fb836d503a323ebd5925d226262be4e2791362f6895602204e1c3630b5bf5da71ee6c6ed6cf9d3fbd21fd83e7eb4f791f83cf996ac96272800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cda9f53c30000040300473045022100d86b240adba3ee944c3bd7d7fa55ab3d8e6f4b1f10fa4ccf88163ecff803ef3202206afc519eff11bcbb617e081979c4cc94af37074bf641392f40e4546b059f4717 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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