roncobiellese.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:07:58:93:90:dc:ba:14:8e:73:ab:0a:29:b3:c8:18:83:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roncobiellese.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:07:58:93:90:dc:ba:14:8e:73:ab:0a:29:b3:c8:18:83:ec
Serial Number (int): 350948858564909600789247747905916853847020
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:37:59:60:df:50:d1:1b:94:fa:45:1b:c4:2e:e9:91:eb:fa:20:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:a1:a2:ba:bd:f3:f6:23:37:0e:20:a4:d4:6d:da:83:76:11:3c:b6
Fingerprint (sha256): d8:72:9c:a5:59:bb:dd:40:c9:74:1e:88:4c:c4:81:3c:3f:87:23:22:57:86:97:fc:73:96:3c:e2:7c:e9:fc:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roncobiellese.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roncobiellese.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roncobiellese.com

Other certificates including the domain name roncobiellese.com

(limited to 100 certificates)
www.roncobiellese.com
roncobiellese.com
www.roncobiellese.com
www.roncobiellese.com
roncobiellese.com
roncobiellese.com
www.roncobiellese.com
www.roncobiellese.com
roncobiellese.com
www.roncobiellese.com
roncobiellese.com
roncobiellese.com
www.roncobiellese.com

Certificate

The complete raw certificate details for roncobiellese.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350948858564909600789247747905916853847020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 03:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 03:47:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roncobiellese.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714849592276795886536117394521270681063980577298827480522846028663413725491468649982303512875919132438396135791086807490995363779151515656501556493776096358809003322784634853476290536570901018772845597007359449169795546709234900898329561893195180493322535760921071272214423119734276955263926692903270659109655057702025910794477700662175168913442902254143831568198623843158528815869223125135592089559217800667978017702736399885000575011688715696717885731421319937791572820755259874436535562065304250628251911950258463847800766005845380283785680463594001796635762374103159646625971946517861879782135235859544850184791793290045153270108720180781837762807938703693923405140762667672999475756226363544569501976691996185107021724750476910846292538965983041492295562591529102613084795971270559222144568024090817776109278506532324580759534168773281233646542425059230151559047281221474242852548555271021893736821621137551016932473169254086758429149039494456793190608358619030331780738314635741979368208681300512691947801286010725605274005571077061518660434483899599042675698072428096672762991678573890754039195437185163326563871587565637023093348982447209325180137783402095279679137641828441629012794081390353887704925304724289137056323330727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23375960df50d11b94fa451bc42ee991ebfa2049
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roncobiellese.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e53a33c490000040300483046022100b02744b816f6135822c9970d850a0ec9d9b0af37b7a60732fd1587b908b10490022100b56365ea14e89b7404f8f76c1ad21e9ecc676822156707c582322c80148ec5b60076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e53a33c7b0000040300473045022025c0def6a08eca271146c34d13c28f11b6b9b58d59ccc64bdac5b392596c307c022100f41169688947bcde2bc199960e3bf7e3d0d07074b0908155fb504210e6c31253
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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