www.umbriatico.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:65:a4:4a:59:aa:89:d6:d2:0c:7f:ad:d3:66:01:c3:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.umbriatico.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:65:a4:4a:59:aa:89:d6:d2:0c:7f:ad:d3:66:01:c3:bf
Serial Number (int): 302986411631896704920258961631719209419711
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:7b:f6:88:fb:f5:4c:3d:63:07:ce:44:be:65:7d:8a:5b:f4:72:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:c7:8c:f7:b6:b3:b6:e7:92:1d:db:bc:0d:18:76:c4:88:41:d4:81
Fingerprint (sha256): d8:f1:33:d7:fd:e3:da:ca:77:9c:0d:d6:58:8f:d8:c1:1f:fd:4a:b4:f1:d5:14:a0:2b:1b:85:13:62:a5:f7:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.umbriatico.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.umbriatico.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.umbriatico.com

Other certificates including the domain name umbriatico.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.umbriatico.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302986411631896704920258961631719209419711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 18:17:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 18:17:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.umbriatico.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832530177830661658659792773374191234955376827947821833738358705572421415370519044324913687389704686226769825306785965856072837944931711910437570911070321903193921596964224627405744710196692527666478072396462888817975047632924378644432900807565339273905298363615023347878613405987703699590104214937244343608097796257135818838890069838643035433523043231227983967788250164455651902730105031255955115827700999408189039752126733379925218483483710835565406682071953242541714625451424578079625466767371329638096712731348771708842023214326133172524385160963686580449711799866037601022442483876611563186286590721959423483956770754964690078310345434652915073294440007001120952664767172523295016604978007816326671972505463628317946101691010874767853616810658531191125268562607391027011997649890141938439690809497371407192116118754808135462081281726438410196367666338365138219336017535378352385345661741238565157555275995436200795593416747803030721625651494234925930698409781782531180312391330356653468676750845706274018770210072671259904098105067125560887987416452909026405205945155402151578703732066088540951596224899596843369967919220020365271050863898832843976908454152705334880579156406747662653345986395401766091988750918670797538945017979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af7bf688fbf54c3d6307ce44be657d8a5bf47221
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umbriatico.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f960a1ed70000040300473045022026beb2080eb5b58b2751da3d8906b1e4df98e0ae480befb4ec572f079f25fb5d022100fb904d78ad07ca19408a4a047896a2440d65472fcf6740e2b1de3cde299653d600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f960a1ef2000004030046304402205265dbec5d7e282880c25eaee7742d6b569d26cb646f526ee91f0332ac2300af0220030b9c3f85f4a4f80606bcccfdcebab519bae3287ebd487d81d40a585f3f77a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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