pit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:51:55:a2:0d:b4:f0:2c:9a:8e:e3:67:dc:da:c7:4b:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:51:55:a2:0d:b4:f0:2c:9a:8e:e3:67:dc:da:c7:4b:15
Serial Number (int): 315890148602358767298921083873281782008597
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:65:c3:b6:5b:69:90:5c:d0:a8:4d:7b:da:60:eb:3d:26:85:36:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:44:a9:75:e1:8f:6d:10:64:92:63:67:15:96:bc:d5:cf:8c:8f:98
Fingerprint (sha256): d9:5c:97:a2:0c:38:a3:5e:46:8a:b0:2f:f7:72:85:de:67:d7:0e:6f:69:9c:44:21:a0:3a:6f:cb:9b:91:bd:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pit.org

Other certificates including the domain name pit.org

(limited to 100 certificates)
www.pit.org
pit.org
www.pit.org
www.pit.org
pit.org
pit.org
pit.org
pit.org
assicurafacile.com
www.pit.org
pit.org
www.pit.org
pit.org

Certificate

The complete raw certificate details for pit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315890148602358767298921083873281782008597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 18:11:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 18:11:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763917124217421857615580078470560287000742727563195246964674999931809367826648440706405458413677447055436489637566045474742087233162700662810240327159631422317496349627585881938657922999224174431005409209337876538600403708925871212750420385107573220239161302101381833286262457190330938011372880739109724564012052448232210913653705321982452531094102537805727332015163772758564102924471660354588990973094885147818764406327148249848869737735571071034901454824435742149832066117739827749087156750223620769133638132084245380775651823929739017040204850374661757281596773003490213449757997280261152416374895810929178568924877776638810895694767713679544145847336924798300232343174437952274774824980928520841513908709206296444852996376701255162050234129956422995137698446750232520515270624279827130601716370643002086649514392904986147435368269454091776412160220148465161482105416208204003842949681914996960440741191227243061827566424104244341567778109624875043776231023376672850289136931511287442492119702462799267675363619769461986756402965886500138403225561110867574761427038958074779810334570415751613655549721685718717476308258078438506544308489894071511155775198221814347376057301213903769295821918480457680183870162517195550506532168383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb65c3b65b69905cd0a84d7bda60eb3d268536cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f395281dc000004030047304502203d21f854bd826a0c3f544665bd3f781f5ae5da8ed29f0a7242b6793dff15373d022100e7bd7d27778d59c79a334e5fae54091c652298d816a9d59dc5fdddebab8c840b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f395281cc000004030046304402206bda94b854c5594998bc56bed134513d77d729fb479e559561ff8760d258ea4b022045a06927b579d83a35b7f503cc2c0bc0f00fe994528a08f9e6917cf6e383cab2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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