www.casadiriposomontelupo.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:25:41:6b:7c:80:ca:d6:c9:31:0e:ee:6f:e2:f9:54:9e:80 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.casadiriposomontelupo.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:41:6b:7c:80:ca:d6:c9:31:0e:ee:6f:e2:f9:54:9e:80
Serial Number (int): 361126549223828363779778365159882179780224
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:95:ac:fe:de:7e:d2:ab:9d:a9:03:36:f1:51:56:a7:57:a1:45:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:6b:33:af:d8:38:71:3a:f8:f7:cf:db:30:e1:b0:0a:34:a2:57:e6
Fingerprint (sha256): d4:27:2b:96:d1:34:15:01:ba:0e:4b:23:0d:5f:b0:2f:69:dd:9a:26:28:5d:09:ff:fb:58:53:12:37:4d:17:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.casadiriposomontelupo.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.casadiriposomontelupo.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.casadiriposomontelupo.it

Other certificates including the domain name casadiriposomontelupo.it

(limited to 100 certificates)
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it
www.casadiriposomontelupo.it

Certificate

The complete raw certificate details for www.casadiriposomontelupo.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361126549223828363779778365159882179780224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 19:18:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 19:18:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.casadiriposomontelupo.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 575498274008759440646832338451302379347621965943511075098124083429815002451336291089055545062374667684586096102658029931586754184571868475785490838649118535135144622497016193677522854676564128425662597603939876774036297964855843460603182444479488439694635580308298659957487748390952011297498473116226395607614346671387336339556120921869121116750040887148934703004002414465784058783028986144878011171942971200581980680248721198986532216234945774238824755657317610462068691228640950756639796827632190393226510218986376119821636423631632198462945423502081717930464568229462903142699760537189151020053161671911110684684715030097195960988059247989639161360510266750381756946666412425554942618324897299870760548409904834815220336041371912464226863839277551291371236125790966763421222034957180645929072486622779095964590116954042835979722506481590497438749349402492798852380666550890195838841882121593208096566094847354136824862854056670065500020562265500182762541328989796778484794966704238623973969118163283279206840964915009104663265492446096391533771247495171370389475334641117996991061288518042556812967999009542213893768933595320061662719464501107372189368282182621913782824625098232985566882350557028036757568876024354635879750903717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e095acfede7ed2ab9da90336f15156a757a145c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casadiriposomontelupo.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000163d6c0650d0000040300473045022100a234ad7fbfc5d749689249dab572968fd539440fa7459f47d577a612149773d702207bcf8b511836e41711b95e9fb56f6f50457024ee530c88aab7f07e62468354c6007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163d6c064f700000403004630440220489dafcb4ad25c9116f3927e652567e1922b576b17134aef3cb728b9cb9e77dc02202ed5fd75c4611a36eda0e5aac5a6eb3cafd0c9f17159c590710821fceb314ba6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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