www.casadiriposomontelupo.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:13:3b:3e:d8:6b:c0:9e:cd:c6:c8:68:5f:82:1f:1e:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.casadiriposomontelupo.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:13:3b:3e:d8:6b:c0:9e:cd:c6:c8:68:5f:82:1f:1e:2c
Serial Number (int): 296071222173307056458773887877045930630700
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:32:5c:1d:b9:04:6f:ad:79:de:63:19:85:f5:f8:17:d0:14:9d:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:24:60:4d:e3:a2:b4:9a:2d:21:f4:24:a4:34:e6:be:1d:ae:83:c1
Fingerprint (sha256): d1:7a:fe:71:39:0e:30:c4:4c:35:af:a0:c1:42:70:3e:5e:b1:cf:82:4b:a1:96:ab:85:12:e3:9f:e6:5d:ac:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.casadiriposomontelupo.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.casadiriposomontelupo.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casadiriposomontelupo.it
www.casadiriposomontelupo.it

Other certificates including the domain name casadiriposomontelupo.it

(limited to 100 certificates)
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it

Certificate

The complete raw certificate details for www.casadiriposomontelupo.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArah7s5V2GCuAYkbZj3Ey
pCq4ii+pdRWNEPeUPjWJKBu1DWWcofaAaLJ/1hPifVJXChXaRA4tzHiTeSUebJph
8rwEVLW4T/UY/rj5sGyrYweqgUVcIJ3SkhhVpxj2aJYOa9IZMuWZVdnm6v+t6LhQ
OvnUDoAN3vQYjcI9lMHvBmHNCwsQ3FRIOn4m8cI7vKe5FsTVVttROAOFJHM84w7R
CZGQ92wq4B35eW1jZCqo0nCSbeJiekqo7+E5dldSXMx5Oh3xhn/1lyDQVBai0DK7
j6/5zAa8X+LbVoLEGR9Lh88MWmlZKn0KK26B47ah1OJgr9LlhsDJTjEXr+HKac/i
9H03hlHR0ehGvHKRhVk5253em9SFbfS7eJNS/UEF/p4ihCsNYxgHC/vCSndAk4NE
N4/O0nf7sLEOHoDbRk35PfmlVG/DCZWEcWPcQm/Uc5GZ0YB7Jii9oawkTNbF4TdQ
EQkQo+snAMu7JyMyHHAlmXOOnEZyosW+//wx2sik4TWWD2Dr7T7koSnLb57N0q3d
LkcjsZXybVPKRf0zJpfsTwq6YGGXtMJ67qcBbund8EBLw8W7m+4Gfz2ov2IaasFw
0YvE5I3we5iwxOtSQDafmFWRpA+pEkiO/mxfOBK0D2GeAD/9szLdulTtHGV4efBA
CKxDt6Tq7A5QPKM0vThthBkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296071222173307056458773887877045930630700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 03:12:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 03:12:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.casadiriposomontelupo.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708463390658433995488806274331640005468973277598562902650869883417797842701842123401385972754823933012982980814586117140906630742364682048157121499201178467327817149543220520092756166099036964598130688123719791240880450703138680095556483733510650951276203022099108688451407227592513938343575565136356079354488342559708787566757066353400779833707397857972512074350641015319256033112665425068686450634326774056228041870530435015924899393828677661161344102689578250606963198522416018508954477032374197950969040646186918965759620197711457583125025516186355123240571493670019653255213346929168513694639169003045109060707463578477628603908444785904208310742773520876063964740246841423190221346757682716656924169446149852278442852007170117180259658926940954609559845171460861307857509550007091272901587177670926072915291574303379235616581098662300761274379375368647872189141345341992025854249641372209379942078936414118085463209365942301859567479874109305751768041877239456685929828985005282026913949673400944962856374362984279252704322908033408450283203307993157045285665075641552502047709065619837737861257606601609174697459347426349229684269083718300572195401781652994806721550070465990304119263545722611553947858310225134377902124401689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6325c1db9046fad79de631985f5f817d0149dfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casadiriposomontelupo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casadiriposomontelupo.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c17e159a90000040300473045022100814e40419f3ed1ed7100e970c52547cf5cd51b5b38befb4ee4dfb0b8064e689602204ca0a235b8ff46eaf84ffa027731e9be4c9d2e439811581d431c149245a8741800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c17e159f900000403004630440220416ea644f4e3a63701b39a86111d5359a49732cef3f32480de9231b6ef382d31022033829ad6fa94177d937345ed64736f93e89cfe2f6c9d62c82e675c9cb2ee4e89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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