cassinadepecchi.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:e5:0a:4f:e3:24:94:7c:bc:30:6c:f7:3f:42:4b:d6:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cassinadepecchi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:e5:0a:4f:e3:24:94:7c:bc:30:6c:f7:3f:42:4b:d6:8f
Serial Number (int): 285461070234056236015118938860104304023183
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:91:b6:f8:d0:98:33:53:f3:01:9a:03:d3:56:07:00:e4:12:52:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:ac:a4:97:32:17:92:8e:5b:9c:d8:88:ec:53:9d:5c:92:82:b7:ff
Fingerprint (sha256): d9:15:0f:2d:68:8d:d9:19:17:36:bf:0d:87:da:0f:96:5a:86:a3:82:72:8f:e7:da:b6:39:d1:85:83:bd:fa:5b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cassinadepecchi.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cassinadepecchi.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cassinadepecchi.org

Other certificates including the domain name cassinadepecchi.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for cassinadepecchi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285461070234056236015118938860104304023183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:10:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:10:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cassinadepecchi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834742817507728777560823469598679682412395603254849948527071865891141993192577482119134740416929939934970609869139549962223149732655329801054792712300555135760920003876927460204298626120099941855366675217544778369252295180279630717273238067893660918732050446349480358594974888496029744063915114576107839579066800189980953559533716022897825160103208458126674234669404599386497357170374319858614672499990486272648877849110620021333913806253023147531507329705170243598060667970975198191936878962854795661099582912225413748858927918009452493108290332485682171493344978611577179636740063826193940087320536399780775174478601390571301996788921517234249450198002162773388325539470255169076493681762754823616907128300637868670389276781724567882872331706671918683623886237949164409277582962182828443580549821863053561010535858500371954880080228799474141917158428044220787283461248938094845529544687424040791755386189571734399596971137124666426025742884291914778405615490712609201332100934896852638156463145521144320637379868506093853773434350850098072978928241597049092979074390400993873480654482806608513459863894345564481175479545597091521442331266091339044255058952515875591766880167642047756240496864315643977353774709793234086821882792897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b491b6f8d0983353f3019a03d3560700e4125241
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassinadepecchi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3b105bb4000004030046304402205aea6ee3dfed07d59ff4021337e52903bc5a0176f066c07c1e2f80e45a034f2802203cb8d7de5b46ea8cff00fe6099b91d761cd45b7fd360bf642b921bc99fe4e7dc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b105bc2000004030047304502201e69c7813cfd8d3f51d33ab0818639c740f1c4ba1cb33db412e92d96fc41aedd022100969ed8d5a575ec5c7c511b9cd30cac3f43369d6e6be3352c5ba2b015dd3bbb46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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