gravinadicatania.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:24:a1:4a:68:29:f8:14:71:fa:a9:81:12:ce:72:9e:11:ec was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gravinadicatania.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:24:a1:4a:68:29:f8:14:71:fa:a9:81:12:ce:72:9e:11:ecSerial Number (int): 273801415054419158099397169017091413381612
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 13:4b:c9:8e:61:ce:28:29:c9:97:e3:81:76:8d:15:d4:e5:af:ee:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ba:c6:39:7a:3e:14:7e:b9:a0:bc:ff:97:af:fc:fd:2a:c6:1a:35:07
Fingerprint (sha256): d1:61:04:78:8a:06:0f:8a:cf:2e:3a:84:83:62:3c:33:fa:c3:b2:7c:1b:fd:5d:03:25:43:60:e0:cb:6d:80:2b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gravinadicatania.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gravinadicatania.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gravinadicatania.org
Other certificates including the domain name gravinadicatania.org
(limited to 100 certificates)
gravinadicatania.org
gravinadicatania.org
sangu.bible
gravinadicatania.org
retire.fund
www.gravinadicatania.org
www.gravinadicatania.org
www.gravinadicatania.org
gravinadicatania.org
gravinadicatania.org
gravinadicatania.org
www.gravinadicatania.org
www.gravinadicatania.org
delivery.la
89971.com
champagne.media
gravinadicatania.org
gravinadicatania.org
sangu.bible
gravinadicatania.org
retire.fund
www.gravinadicatania.org
www.gravinadicatania.org
www.gravinadicatania.org
gravinadicatania.org
gravinadicatania.org
gravinadicatania.org
www.gravinadicatania.org
www.gravinadicatania.org
delivery.la
89971.com
champagne.media
gravinadicatania.org
Certificate
The complete raw certificate details for gravinadicatania.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISAyShSmgp+BRx+qmBEs5ynhHsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQxOTIxMjlaFw0y MDAzMDMxOTIxMjlaMB8xHTAbBgNVBAMTFGdyYXZpbmFkaWNhdGFuaWEub3JnMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw4hXE8B7AS+JqwqxZSe1qV8Y xq/wCJYbG0An8kHbx9K5c5I+/8jyrW5AekOqiLnCAFJ9rkbCARbQ6RhRQy33a7Na HGdPXpzc2yb5018doZuJzaBafN0GKHLDrY9BECLeOVwEla3ySlYEYWGs3MTxFOzX V+VLM+BDwTQSRhfy+vXaG0p7IsqNlwaM7HxbyN3CnGS2xqSxIDFCEr3BEkAzO40f jso5RoMJGKXcO3b3MKWpGT/df5aD3sE4fKqiJDkgnpjdEGniLJ1inqxXTwmbMSs2 sIcylhR+HHgtXNWPMY18+GRwcc2JX/BPc/YdMTwovcdm4WAoo54/9oWqjB28PvBD DhoK23KsA4F7tZcZszb1kgjupMgFUSwX8Xddkqa48YtmkxgvIV4MvpaB8fhLVanA JzAYyY/JoVyWWyKTlJRASHal7sJywxRhsGcLw83Qhnlk24TV4XN1jnwZ66GSmnC1 70e2QxWUcQhnRuS7+Jvq6M/IvMrtSjt/J5KlpkYPd2aBNr1mEQDc9VBQ7BuZ2sSv SHbZrGIKQBpawsR6Xl3f4SCSMHCa1oNlSSvn+eQilijOBw2Fbh8/pAZD51Vwoc1K RDg9zJPdz5MqSzEVJ1qb2VaYkxw2mONpGOwKfC/si3nBHm2i6aX9uTgNheZb2Ejh COnMP9ZxNn1ah7YwPdcCAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUE0vJjmHOKCnJl+OBdo0V1OWv7vkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRncmF2aW5hZGlj YXRhbmlhLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG AQQB1nkCBAIEgfQEgfEA7wB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia N9kTAAABbtKTKCEAAAQDAEcwRQIhAL6fjAsfxJlOshEhzePBBe65wbwPnk3vLTeR bMCrLBw8AiBw2j+zS2Dnic2dUcUOap/OlCyBdYMHATEdznVTRiYSVgB1AAe3XBvl fWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbtKTKEwAAAQDAEYwRAIgGJHc xVnalsENhq3h3Rd7ddrggZwUgzDd1vlvuXPriYoCIDZ1zyXg3E+4pdLckx8X0dHd SCs8oD+ph39kCT2n52LkMA0GCSqGSIb3DQEBCwUAA4IBAQAi6H1Qe3hYqOyUNQ4z 8O1KejBaMDCIt8zGT7c4Mcjk8LLxmMs7e0m9PIfyI3Kj1Exj83FwTJeB1emAHjmc EsjbCMnp5RyOPLU7EaQb17UdnlyFtS/TTFgPAOZrGJd28jPRzOtnoKQ1BFz2of+Z 2S5ok34BzYmO+nyJYmGjPSQckLjlW0XIe5F3pXealDlXQDW3N7YYWaBIfQYSrCDi ZyeG5+UfRl5Aqa7rOFWOf8Sk0Hts6tvydVPJtG7/tqJ6BTFuwpxT4w1k6h+j50BR ZFZ/vypTyzM/oO09ZXS5RWnIPCrvPfyuM6sd13T66wz3zc87XbWVCbqayjI58NHe Oe0b -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw4hXE8B7AS+JqwqxZSe1 qV8Yxq/wCJYbG0An8kHbx9K5c5I+/8jyrW5AekOqiLnCAFJ9rkbCARbQ6RhRQy33 a7NaHGdPXpzc2yb5018doZuJzaBafN0GKHLDrY9BECLeOVwEla3ySlYEYWGs3MTx FOzXV+VLM+BDwTQSRhfy+vXaG0p7IsqNlwaM7HxbyN3CnGS2xqSxIDFCEr3BEkAz O40fjso5RoMJGKXcO3b3MKWpGT/df5aD3sE4fKqiJDkgnpjdEGniLJ1inqxXTwmb MSs2sIcylhR+HHgtXNWPMY18+GRwcc2JX/BPc/YdMTwovcdm4WAoo54/9oWqjB28 PvBDDhoK23KsA4F7tZcZszb1kgjupMgFUSwX8Xddkqa48YtmkxgvIV4MvpaB8fhL VanAJzAYyY/JoVyWWyKTlJRASHal7sJywxRhsGcLw83Qhnlk24TV4XN1jnwZ66GS mnC170e2QxWUcQhnRuS7+Jvq6M/IvMrtSjt/J5KlpkYPd2aBNr1mEQDc9VBQ7BuZ 2sSvSHbZrGIKQBpawsR6Xl3f4SCSMHCa1oNlSSvn+eQilijOBw2Fbh8/pAZD51Vw oc1KRDg9zJPdz5MqSzEVJ1qb2VaYkxw2mONpGOwKfC/si3nBHm2i6aX9uTgNheZb 2EjhCOnMP9ZxNn1ah7YwPdcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273801415054419158099397169017091413381612 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 19:21:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 19:21:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gravinadicatania.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797703324765300835290857559079097316367498233705842543624186751843027590697700093335374841295255102859127655427348065629657445075560687482859032510504112238042046037922167745073017570447060008913125874761523763940497781821360953865064780704517306686784150902788971466051938949168648405311037739360181745887942165614368802948225317999519152632191355097121783524007874029778821471638028625145120513635881095951903156748176153147454339163437719460026126300765135365098471967806967000572813681206028173811819496322311541027288135396997863776755949198814584904063117401071896314736040769303260137916776519048985196963562092050205284286810575299586770391413760225244461566300428222685029737354671397217558343620201876325023596327721086113304112113948018980457806285112348491009803947491285410189510219624108225604043561894285307858000592184373958532473019144428464914019629187098388743760462132825151065547686267661762850353788932882910060662891079479864167905592506594084261118098078261396803216507790150767893541100085864726026843578954462060610615658449156132746936920599509510557428568218705787004277936935857350693499596136416651909985762635616403125830171325824714852339232869267723253423733684040487944605222874722880273388619709911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 134bc98e61ce2829c997e381768d15d4e5afeef9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravinadicatania.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed29328210000040300473045022100be9f8c0b1fc4994eb21121cde3c105eeb9c1bc0f9e4def2d37916cc0ab2c1c3c022070da3fb34b60e789cd9d51c50e6a9fce942c8175830701311dce75534626125600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed293284c000004030046304402201891dcc559da96c10d86ade1dd177b75dae0819c148330ddd6f96fb973eb898a02203675cf25e0dc4fb8a5d2dc931f17d1d1dd482b3ca03fa9877f64093da7e762e4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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