university.4dem.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:30:51:e0:2e:7b:67:d0:97:38:83:e4:94:2a:cd:c4:2c:95 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=university.4dem.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:51:e0:2e:7b:67:d0:97:38:83:e4:94:2a:cd:c4:2c:95
Serial Number (int): 277779242892408711057140970743379152612501
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:3d:93:7d:6a:b2:4d:60:7e:c5:e9:f4:16:94:22:16:a2:89:f9:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:83:19:22:81:8a:6a:75:43:6f:b2:5e:5b:ea:c9:d2:45:04:b9:bb
Fingerprint (sha256): db:54:f6:3f:d4:c1:7b:28:e5:1c:03:51:ac:8a:eb:6c:97:90:4a:ce:6b:06:fe:04:c3:a9:cc:30:cb:30:e5:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate university.4dem.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for university.4dem.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

university.4dem.it

Other certificates including the domain name 4dem.it

(limited to 100 certificates)
en.4dem.it
demo-api.4dem.it
demo.4dem.it
api.4dem.it
demo.4dem.it
mailchef.4dem.it
university.4dem.it
console.qa.4dem.it
api.4dem.it
api.4dem.it
*.qa.4dem.it
*.qa.4dem.it
university.4dem.it
secureapi.4dem.it
secureapi.4dem.it
4dem.it
en.4dem.it
api.4dem.it
*.qa.4dem.it
secureapi.4dem.it
*.4dem.it
*.qa.4dem.it
api.4dem.it
shop.qa.4dem.it
university.4dem.it
university.4dem.it
freemium.4dem.it
4dem.it
en.4dem.it
demo.4dem.it
university.4dem.it
en.4dem.it
demo-api.4dem.it
api.4dem.it
university.4dem.it
secureapi.4dem.it
en.4dem.it
en.4dem.it
www.4dem.it
*.qa.4dem.it
*.qa.4dem.it
api.4dem.it
shop.qa.4dem.it
demo.4dem.it
university.4dem.it
api.4dem.it
signin.qa.4dem.it
secureapi.4dem.it
university.4dem.it
secureapi.4dem.it
*.qa.4dem.it
4dem.it
account.qa.4dem.it
4dem.qa.4dem.it
4dem.it
university.4dem.it
university.4dem.it
developers.4dem.it
mailchef.4dem.it
freemium.4dem.it
*.4dem.it
en.4dem.it
developers.4dem.it
mailchef.4dem.it
secureapi.4dem.it
mailchef.4dem.it
signin.qa.4dem.it
4dem.it
*.qa.4dem.it
developers.4dem.it
mailchef.4dem.it
mailchef.4dem.it
demo.4dem.it
en.4dem.it
en.4dem.it
www.4dem.it
en.4dem.it
api.sp.qa.4dem.it
developers.4dem.it
en.4dem.it
university.4dem.it
signup.qa.4dem.it
account.qa.4dem.it
console.qa.4dem.it
demo.4dem.it
demo.4dem.it
*.4dem.it
demo.4dem.it
secureapi.4dem.it
*.trk.mailchef.4dem.it
www.4dem.it
www.4dem.it
4dem.qa.4dem.it
*.qa.4dem.it
www.4dem.it
*.trk.mailchef.4dem.it
secureapi.4dem.it
www.4dem.it
internal.4dem.it
en.4dem.it

Certificate

The complete raw certificate details for university.4dem.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277779242892408711057140970743379152612501
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 20:49:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 20:49:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'university.4dem.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763422297667741814699409784905629910398787355604063469847327212558926553429000788314266829723173249464517732596184324327842785680291490157752455612803083586555754935326769478266555508889031476886662570754301688689315106945611036512201866822642139379255392260262503374319985757558691749609707429833645951217572321567695150736242831868380623842217565825692648700777335985952201691745546596276762477968609284307934857190769578764444318371318978330976514721262183477276639358436432929855952079190959226800848339395682139926256833680103331717937721669835764940479960554120308555910003768113759468848283046439479764362872382574027055592247304250545426743828008935925478710250709393487119494756284206003477368204644339563276377989573114773673439962227915483805335589288866449619422543805983259038704076729581764472983906717970951622171513003442803660178871800096159430397054383862904793458268003846857604678549737787455767363037727176542824575204981818676023543692131920319837377395206558166479731019977497850355972408918377685529394768378473549292852509461479427842234521603600562065383854333214902691907583259563242921904692449604286419600753377984953425358669595791028515449208195099820444937290248002703510483719505815430655874114957901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f93d937d6ab24d607ec5e9f416942216a289f9f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.4dem.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e0f31c6b10000040300463044022003aa8a843be1cb5b9607a8c23ef4b9cec9f450d762ba6f3ba18778eb31d4a56c02205dec64912028ad11d154869a083b0df8fda438dc67a5b036133b7a44fd4fb04900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e0f31c6d6000004030047304502210080f23962e2b253285023cb08692cc3732a7867bc5a7899e60e4e53d504cd798e02202ece75f51f661fb45627a92b8778197faca5435b4b27b43308ac002ac4f66dbc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007281671036525ebe56aafda372d835d0da8b0a1f568e39749b561d7e72a12e89adf6f48b3a504b671bdd0635c84cb4fd84baf60e838fd0574c877e384a079e4ccba61acf31a6de874f3c8c5f33e09f1d97d3df8a32d6b8b835a97ea87e486127188685a8432791ff3bdd740a87cb4f063ddbb88cfae3c3e9ddd37b8e55419b5f619078f230e9d3aad4bb74fffbc7c6c00f24afaf4840aa4fb2cf5818daeafe3725c7b756d8bba0afd08451d3f263b4743a04093e19e2430e74b1d803dda914fcc3ad2ef757837da96a247b8899297f9624d5ad8c4242cda80d2ebd170ae60175bf75248a01d28a2bc4cc4e82292d8cc63b5276f2fc58920080c6507f9a8ff1fa