ossagolodigiano.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:8c:de:8f:86:ec:0d:a3:aa:bb:f9:45:1d:a8:54:c4:fd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ossagolodigiano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:8c:de:8f:86:ec:0d:a3:aa:bb:f9:45:1d:a8:54:c4:fd
Serial Number (int): 280579917863239978898109755704422251676925
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:37:1c:f3:d9:b9:a4:e3:59:b7:c7:c0:34:09:65:75:8d:10:88:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:5c:3f:cb:fd:61:c3:6d:26:8f:e3:91:ef:c6:d8:6a:23:6e:eb:46
Fingerprint (sha256): d9:7b:bc:84:74:ba:85:d2:67:33:d8:2e:40:2b:78:0e:45:89:28:42:dc:aa:77:19:99:da:3d:cf:23:2a:45:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ossagolodigiano.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ossagolodigiano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ossagolodigiano.com

Other certificates including the domain name ossagolodigiano.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ossagolodigiano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280579917863239978898109755704422251676925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 20:46:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 20:46:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ossagolodigiano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734079505614180282601108170091252043093793607027947642954761513929237125760372743679986460788030881515655917306287957499614487450168494736819204441307860762494290260023937635618888225744405850846428825920859951876892277381748174371042107873291847281463004616920027129076210173964128681230407003244692123631323869406786346090087917326819392723969942945592247354220678673156539957906962150646035596084968965408729770121125887166161477864963054715094604012292929831994777649223068748638545112483462333755830492429246997451164870789984321388289842629760123291719191081524997669399490687501233250163143071979666050619869832004734200754985562900776438669589666577285263787335556995890045431779533128181188344805480601609959785572751862426831595068473057402966310399634328502126370731708335837746047344404277526988801633079863253588829005350434543210179352182920783666348085042935268937543494383745520254280257829591502576552536783671802222014451527099079210803770311304049105133379361724296143213774923548163658464433737331252884090594822132528623530348738884651312174987367169814621619983058262309540220005239907120836185493399914325187229704416349516080771317667742303769161545848884124800619360536537845167118936114853684557445912873041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71371cf3d9b9a4e359b7c7c0340965758d10884d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ossagolodigiano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c78591a540000040300463044022059aaf1c94dcf9f7a24f40d185597b20bea9cffef311d1e21cd65d358e5f67496022049b415c488f572c0110258e808e7bbc5d9697d2bbf6b61d07c59b5c82cf7b25e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c78591a55000004030047304502210080a25e0724a1b3c707c1c27bcae756378fb0ccb8b844a9973da26c91db9e30d5022059d734362162a447e2453abc58c54e081e49790a7c5d4eaaf2488444419f9860
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004d5d4896a5b6f519bc21c1d1d63f24a6a9d9146bf84ff62fddbc99ea1921706a02065c8e02146e7b28c55e463dba87595856d2ec8f279a0e73fe66aea3e7c4a5522f8eafad757633746eae908376e02966b439c9c00a71a9225a5e44a2c19285e739d819d8a543bf8f19da23139260efca48a465e60e97cb527518af97d1b058b15745faf79771383957ccb34efe39c6ad60f9baa0efcbb701af7a86a498b4856b376720200c7045a4feb5f2d9a8214db85f50b914f0d8a4b21dafdb474f1b78ad35b6eb5f4970a7827e366bff0980498b12e78fe98c132e8649fdbc59b5b16403d0cdb99391d0fd8ca263a1e688b3ca5a4cdc680177abb3bbb35bd5f834c69