grigliatimetallici.com
Issued by R3
About this certificate
This digital certificate with serial number 04:8a:d0:9a:62:09:35:6b:8f:e2:c9:01:c6:60:30:6d:0d:fa was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=grigliatimetallici.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8a:d0:9a:62:09:35:6b:8f:e2:c9:01:c6:60:30:6d:0d:faSerial Number (int): 395685391387375698770017245326834957880826
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0a:78:70:d8:e1:b1:f8:ef:3b:8e:4c:32:65:cc:89:9c:05:7a:cc:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e2:cb:51:c2:b2:25:ce:e0:79:4b:d5:72:76:7b:ef:ad:69:61:e4:31
Fingerprint (sha256): d9:85:fc:74:f8:18:a1:e7:55:87:b5:4d:02:ca:1d:3b:8e:ad:8b:5c:2e:e7:1d:31:e9:69:8c:20:81:c1:38:90
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate grigliatimetallici.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for grigliatimetallici.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
grigliatimetallici.com
Other certificates including the domain name grigliatimetallici.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for grigliatimetallici.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISBIrQmmIJNWuP4skBxmAwbQ36MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTIwMzEyMTBaFw0yNDAzMTEwMzEyMDlaMCExHzAdBgNVBAMT FmdyaWdsaWF0aW1ldGFsbGljaS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQCXpW1FZW3Z0m7C7xNbkxx7l09UtqpfYdFFsxI8Qo5xxa7MJVzZKv8I V6VFJXS3Vp2/cNRHaEgWa4Quu6mnGqeHhYa9sNuUWk7yQBkNr1f72kmYnbwgvKoL 3WFns3XdJl/bK5B/ngJpHan+DopdK46IPj/xWi2bsrY670PhfSkI0kFm9ut5pHH5 yj8AO+6lM3t7dj6hgEwgob1bTorYpQRiK/s8zcDlSuPMLYtY0pqamxsiCwiucZGS UwjE5JeItX6BUihXDk1P+yPvsKNe6MQ4Xw0m2hdR5oQMu8HmpMJ7EYAUXw6hRtoo eStDIBqLsFOlnbX+QdqM7UpLDKPAhNV+R55X5FUOGgimadpFs7UCQzyICLDcuegd QbdiqS4UGTSv48dnFX8QxXovW/tG8aEwMwuB0ZTdstnugJvoAAXeDdM82qL6Kfzp ov7pUxrZqeFSkQhBKlYXxNlKtFXF2x8IcVw4VkSXzYL3cjfAvy/mvodcGI1qAIAX frE9mi/VYFjwc8Wvs+Y+MXtnepYYm2W3NsAJ/gyHvNeiEraqmV865ds2VY7/cVgG nhwsWjw9d40yKRZ5fhqosRNFtTIVUlW3j6FhbmaoNEL/H6/DWnwDPQ7DkE1RadjL 0l2sQWp72IzZG2NjKYSDw4U1YuIzJQPWJI0p8lc+RCN4UI0HxrXxcwIDAQABo4IC FzCCAhMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQKeHDY4bH47zuOTDJlzImcBXrM DDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAhBgNVHREEGjAYghZncmlnbGlhdGlt ZXRhbGxpY2kuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIE AgSB9ASB8QDvAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGM XDmjnAAABAMARzBFAiB6y8KrIvVzWlrZWKgXZx+QfdS7mYpF5GSi0s7GdRiANwIh APPw4qkL6+Z5ZFNfqQoNkLaM3BdJ61Eu74AmbNLGA9hnAHUAO1N3dT4tuYBOizBb Bv5AO2fYT8P0x70ADS1yb+H61BcAAAGMXDmjlgAABAMARjBEAiBNIbpFOzFfgqPa zieGFJomz3v+hisil49CFFJ2jAzlUgIgaWeKl9lTYL9Czt0QP+3ykFgfEAF2tjr9 YfKx6dhPClQwDQYJKoZIhvcNAQELBQADggEBAJYsn5BvB9VuPFkwJtfbjUwY3rTV DDimTfkeewKjONSsy1Deu4kXBukZuTDT0Gw/mblqAuGXGFGAH8kK9ajpc/F9ifHL OyoILDAwAtxwn9Xqzn+jMGTME5k7ilH76/t1g2877aHogiuZO2ymXWSWI0TMLd5p PAz6GgqkXq3Xt11f0L8Jwj5KntXigSoXvmv5QTaUAo3rEvoyZSxPC5n8fvAiWmPS TKIEgUUKDqpx9wxBcLZK8eusULqukHP22gd0vU/kd33/FQCdy/O+zmu9SioAEnIK F1bb2qM5OmQwCYV7TfzGJnV7dRpJGJscEp7QZGfeYd18XF3Zf+FclVHpElc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl6VtRWVt2dJuwu8TW5Mc e5dPVLaqX2HRRbMSPEKOccWuzCVc2Sr/CFelRSV0t1adv3DUR2hIFmuELruppxqn h4WGvbDblFpO8kAZDa9X+9pJmJ28ILyqC91hZ7N13SZf2yuQf54CaR2p/g6KXSuO iD4/8Votm7K2Ou9D4X0pCNJBZvbreaRx+co/ADvupTN7e3Y+oYBMIKG9W06K2KUE Yiv7PM3A5UrjzC2LWNKampsbIgsIrnGRklMIxOSXiLV+gVIoVw5NT/sj77CjXujE OF8NJtoXUeaEDLvB5qTCexGAFF8OoUbaKHkrQyAai7BTpZ21/kHajO1KSwyjwITV fkeeV+RVDhoIpmnaRbO1AkM8iAiw3LnoHUG3YqkuFBk0r+PHZxV/EMV6L1v7RvGh MDMLgdGU3bLZ7oCb6AAF3g3TPNqi+in86aL+6VMa2anhUpEIQSpWF8TZSrRVxdsf CHFcOFZEl82C93I3wL8v5r6HXBiNagCAF36xPZov1WBY8HPFr7PmPjF7Z3qWGJtl tzbACf4Mh7zXohK2qplfOuXbNlWO/3FYBp4cLFo8PXeNMikWeX4aqLETRbUyFVJV t4+hYW5mqDRC/x+vw1p8Az0Ow5BNUWnYy9JdrEFqe9iM2RtjYymEg8OFNWLiMyUD 1iSNKfJXPkQjeFCNB8a18XMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 395685391387375698770017245326834957880826 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 03:12:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 03:12:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grigliatimetallici.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618662514533218049442606697310235571561892891800093644374797450059563649690593127018077925930546916201345424306209721592729557012508691847477427083333925972608737190126486922766391146835822391722999590464642601207028943053092616176945270188948968004316208485362694393395027017724173310948455650005227236477271204582289961062151300421257188913386337916086645986644505573477763345303585629279982405101735006248494356826278658668673954174724442281818467307476726378374991377086588792860339730120678428572492475115225932151946509755242314463227344863921773363888232988636060335430724240018527942320140516395036876812376237260475033914793151950945498730256467089741578050550927614060901457178504128619974925853953206119176800922743301986688353887619950138778445813830351874333120136685185659096731072873816845244097061493638861872810624818408732000740569360248350364512904805189684708813913362746643346872230587086065057307267425143814072490017235662336762429124915168902547371088745381627511975697423628853935343968581365462830171881810972951788297444164942436433480599732221914033009014486730263573044211218799554834983176435781260298528589134074608185219193688494693793228736995001020553954606559060999056277284608232066914343657533811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0a7870d8e1b1f8ef3b8e4c3265cc899c057acc0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grigliatimetallici.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5c39a39c000004030047304502207acbc2ab22f5735a5ad958a817671f907dd4bb998a45e464a2d2cec675188037022100f3f0e2a90bebe67964535fa90a0d90b68cdc1749eb512eef80266cd2c603d8670075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5c39a396000004030046304402204d21ba453b315f82a3dace2786149a26cf7bfe862b22978f421452768c0ce552022069678a97d95360bf42cedd103fedf290581f100176b63afd61f2b1e9d84f0a54 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00962c9f906f07d56e3c593026d7db8d4c18deb4d50c38a64df91e7b02a338d4accb50debb891706e919b930d3d06c3f99b96a02e1971851801fc90af5a8e973f17d89f1cb3b2a082c303002dc709fd5eace7fa33064cc13993b8a51fbebfb75836f3beda1e8822b993b6ca65d64962344cc2dde693c0cfa1a0aa45eadd7b75d5fd0bf09c23e4a9ed5e2812a17be6bf9413694028deb12fa32652c4f0b99fc7ef0225a63d24ca20481450a0eaa71f70c4170b64af1ebac50baae9073f6da0774bd4fe4777dff15009dcbf3bece6bbd4a2a0012720a1756dbdaa3393a643009857b4dfcc626757b751a49189b1c129ed06467de61dd7c5c5dd97fe15c9551e91257