selvazzanodentro.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:96:f2:29:a5:9a:86:37:ce:bd:1c:26:b2:60:a1:82:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=selvazzanodentro.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:96:f2:29:a5:9a:86:37:ce:bd:1c:26:b2:60:a1:82:b9
Serial Number (int): 297267147901886044928435938958887190889145
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:ac:61:48:e2:28:83:3f:e5:6d:29:69:0d:8d:fb:c4:7b:a5:bb:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:df:c3:a8:e7:d0:65:c5:3b:ac:a2:db:67:c0:32:60:02:11:d2:30
Fingerprint (sha256): da:0d:2f:f0:8d:2b:b9:18:94:45:8d:e4:cd:58:f9:88:a1:75:7b:8b:61:69:1f:dc:dc:35:f7:af:3b:68:df:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate selvazzanodentro.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selvazzanodentro.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selvazzanodentro.org

Other certificates including the domain name selvazzanodentro.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for selvazzanodentro.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgISA2mW8imlmoY3zr0cJrJgoYK5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgxOTQ4MThaFw0x
OTEwMjYxOTQ4MThaMB8xHTAbBgNVBAMTFHNlbHZhenphbm9kZW50cm8ub3JnMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx+wDnLsJvh7yYYCyWpVBnZfz
+VCxsRZ2xHW3+CvU632eWX0GrGY+lMK8YP9ZRfMzFdmqvo69cIsZjrvuco03OQUE
1A0JaoU/FduP967nQ2Lu2Tr69ix4kvTwtlwbI8Zh61NrnYETXgC+65OuDtmwi3pf
1UAXNxXUo68JJiym1A0YU3ij3YCDelLDNTCLiZZfPiFxRoE9rbYXm5V/68bTLb64
1V8OO7RL+UQi+0cAQV6tpwAX/UGlgJdtQ6cykcwhBraEnh4xj+9dMZpCGLZ5s1Rf
DPD4auHGTHso28EssiIq20+Wix0wxXuvTyyTTz2hdUl4cy4cIccEesjGRu5aCNgS
gxoxUqzBQhHa9SeqBoT9RiAmF8pp2NLRPI6wG5Phan9AqSTTN6S29FwuBv10zDAB
y1PKtvtztpDJBqu2O7V4tm/vNVz9e49s/7uOckFB9lA96LHEYiYqJdTPxdmXSZxp
snnwkmSqufxKPeRNCa2GWnsMK6lPcZ/B2RlRNQVXz2e/9y1phlHDRzBzsRItcQgl
8GCdPBUW3yY7HeNuQQhCg26bSJr8ICIh08n7BVDaSyX5V9uQIWq7pptd6ZInYHbc
z9563fgJ6UpMFupO3kcNgqMrx8Sg5rZ3QZeuZXbMsfDAmr1xDO9jVYsAv/XTefDU
k67XSzojHorsbqaZOlcCAwEAAaOCAmkwggJlMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUD6xhSOIogz/lbSlpDY37xHulu/8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRzZWx2YXp6YW5v
ZGVudHJvLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ
e8xWAAABbDpXWAsAAAQDAEcwRQIhAPqCs6aD+ibAIqEySb0tB5dwZf5X3UPrNbXj
GdxiWzzKAiAhrWyadgCo4tnmkR6y68CCHPDpjdP5MvcPFiyOJcGLswB2AGPy283o
O8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbDpXWfIAAAQDAEcwRQIhALcE
mAP9MxQCSZ5YQ4rVl7T+oaKVhH63SdXIgW12Hu5fAiAW4R8+HfN+RJzlgXd8/3bD
TWbu8rPhjlQremPIlgPtGjANBgkqhkiG9w0BAQsFAAOCAQEAO/xwCeTXI+eKkGJ7
kIq5KCYdZCd+8eln17Rg5EfhD5zMeOlZycRLlYuBHeJSINPClk77ZnwmoodTg7XW
K0GrH5X2R8HjvH0jEO8Reb1iRVQjOaFVS36x/+C75pE3/UEZiApKDUAbDSg1FKQT
ReFxNtmdEeERIt8caIwGp3bz4h0Za/YrmxxUtDio2cScMEP0fxmswzn15panP/Ya
rONJ0bj9OKa23Q7P/HDUJTsdAhIHN39tya3icFwbv/lm+ByiKHkBQ1l5JvkJY5fK
VO2lKvtUwrRmIZ0vk76xP04Yp56bdVeDqIKR1CJ/7IXRQuKQk9C1Mtf+H6pqifCZ
3hxe7g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297267147901886044928435938958887190889145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 19:48:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 19:48:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selvazzanodentro.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815610316274012031139397710826304686380482439312111991785577238486323472042812024594197203375469200409996343556005740427893335419788342290353600696935543614705272670612892957707217926084451880922471592008966067580130533873001188076675860688805544752490510881410333452438653228747166133793248942048413733041158643865846276854552920284757911677948143539388313909696801087132337285390726377216985389458797692611451782494069917487449949900414218565551580260633787310498538745432088595589414573064497110088157088906066563508117946432524275718490865271601269005298617360007826281493603688226430622739990966834046132578659695495480354148872185461991468812138641987117058847810153114768493034286071568179420846281868293256546442888087566445230092275193166404493817077212655326057790126868481942761013562184153162991819104255707452755838205591301945385201207237629464902647772732855433286043738189088896407686145884402961100895064424879377148845243164300831157734186619980925524957617143052209754754865513666705719066732949712632661338224165645683883993735993321244717456458632440146526916363656735158255989639168661877252966038717784928425843193814024849124795911189303820287329367445812125524640163341108142808679281202542490612437131803223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fac6148e228833fe56d29690d8dfbc47ba5bbff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selvazzanodentro.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3a57580b0000040300473045022100fa82b3a683fa26c022a13249bd2d07977065fe57dd43eb35b5e319dc625b3cca022021ad6c9a7600a8e2d9e6911eb2ebc0821cf0e98dd3f932f70f162c8e25c18bb300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3a5759f20000040300473045022100b7049803fd331402499e58438ad597b4fea1a295847eb749d5c8816d761eee5f022016e11f3e1df37e449ce581777cff76c34d66eef2b3e18e542b7a63c89603ed1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003bfc7009e4d723e78a90627b908ab928261d64277ef1e967d7b460e447e10f9ccc78e959c9c44b958b811de25220d3c2964efb667c26a2875383b5d62b41ab1f95f647c1e3bc7d2310ef1179bd6245542339a1554b7eb1ffe0bbe69137fd4119880a4a0d401b0d283514a41345e17136d99d11e11122df1c688c06a776f3e21d196bf62b9b1c54b438a8d9c49c3043f47f19acc339f5e696a73ff61aace349d1b8fd38a6b6dd0ecffc70d4253b1d021207377f6dc9ade2705c1bbff966f81ca228790143597926f9096397ca54eda52afb54c2b466219d2f93beb13f4e18a79e9b755783a88291d4227fec85d142e29093d0b532d7fe1faa6a89f099de1c5eee