barbareschi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:af:d3:f6:67:db:98:27:16:c4:e2:6f:d5:00:36:92:e3:37 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=barbareschi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:d3:f6:67:db:98:27:16:c4:e2:6f:d5:00:36:92:e3:37
Serial Number (int): 321168018525069033606611270576261697823543
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:95:33:46:26:2d:d5:99:e6:24:37:f8:3e:2f:36:ed:5e:21:ee:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:38:85:46:0e:aa:3d:df:b0:47:cf:9a:55:78:93:f0:26:5a:e7:36
Fingerprint (sha256): da:04:76:b4:56:c0:87:4f:13:00:37:4c:76:25:9b:4d:ac:57:ad:41:f5:a7:58:5d:5f:10:ad:ba:9d:0d:58:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barbareschi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barbareschi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barbareschi.com

Other certificates including the domain name barbareschi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for barbareschi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321168018525069033606611270576261697823543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 13:34:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-05 13:34:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barbareschi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885451628487126351408422931370578440894521628218036101696545030028143758514674616312298709089649907742735537619695443221922852307936720093537861905018814335989183590732537183429637737187078864637828583350775904767155985176780241451474330619637381659707706153987617487175871460033355553163713452510315195277635067944157639734650339199203365565237189321157655928578208161052125761011625143355438239422172690582364012987685500192011263212332972533774919044199521692482813669130883028354866993069687928841920378312855235634283867055259835306331254092427448473851154078287099070877188880767736797925603680600850442444071577930851600503879094271716711967289327308665269323882449399946281219679377205266751130092419865910448201614417354126174808606328365493849763230651026005366418498395740433513217496697478043206907411496176892966646421836368052444619537895735060867094792085036498274693439745469757153992940161645440453787210719766863005641869282247395035252136376037692292454792264990904625620360223573365013517779092037572854623632135434565051468196065591469131024893313859772671936875956154397025880259197727294497686759462929935916014524639815420612401983785566606399094197351319208442496590202887856125554735484783098074484173351883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2953346262dd599e62437f83e2f36ed5e21ee03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbareschi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189d06bcd680000040300483046022100acd1c8356e7eb74b5790c339e1b064d107fcfaac6f2c7acbb8962c763d5e2bb9022100ecccea4ded9fb6716b18e9257cf7adcf12ac4ac665d10fb1e57ec50fa9a044ad007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189d06bcd5100000403004730450221009aebebdb5b5ac849e95ce95038fc23d47ba4f492e2daa8bcd2a8ef8baa707afc022016d5633af592c48a4a637e059268a514052f6b9ce1029c2b8aa41b480951a604
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000cc4c2030d0c28d258536bad513931948f098c1e955b77577836a19815b5764e4ada7721d4945780fa1f11af8b510988c4b7259a066c41ec8eb14c1ae9c3bedac4dc1a19c36133c5d2f4dff150dcd49b7ca150c21d55fbd5316a5a2d76356ff537298dfd001827a6fa7615a3b57323970cde2a9397321d70f961e887a2b57aab97e3266439a5b22d48e42306dff459bdec900e9a7a5c1fed942165f87c5aa8662f8e95569292d89c78cc82ad63051d3942805ebfa4c49ea6dc19aaf6945c9d381cde8b052d181516d6f88a0346adec43bdb229d175cafb5e7d9ead892c32775a508f7d89e05752aa049cd31bc8c8042d889c5a948ea60efd20f7f3ca27bb1472