www.preganziol.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:d7:1f:b8:96:4d:2d:47:4c:09:40:60:c2:b3:fd:cd:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.preganziol.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:d7:1f:b8:96:4d:2d:47:4c:09:40:60:c2:b3:fd:cd:89
Serial Number (int): 272852124627839557259649637862604262985097
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:3b:a5:f3:11:a3:93:83:a5:78:da:3a:75:c4:35:82:a0:68:83:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:d7:05:48:73:d4:2a:c7:d2:d7:11:d2:9a:5d:9b:fa:65:d2:29:aa
Fingerprint (sha256): dc:13:c4:f3:95:6d:33:06:d8:25:d2:59:45:6c:87:b8:74:c5:9a:df:72:b7:44:b0:b6:f1:33:29:62:de:86:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.preganziol.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.preganziol.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.preganziol.org

Other certificates including the domain name preganziol.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.preganziol.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272852124627839557259649637862604262985097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 01:17:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 01:17:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.preganziol.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763600779213317413456862656062963805323617755683741419523240739121269883126161244477682885065691651240186593349769198793282611672143304747752020909396210588287471947332484492478982421220686875615159255803460298795678107962851164581880307477199733141806724975700042356354147766804235051420897240624427635051436614144754630672002619418058725054377547309451358089181706953345605710246869796471229449531869642974939677941825237052665696642259814330881173614225840631669657610121347142562155840284259301024008210349588558454682686256243318806734999827680245638731850289435770010537550784019066699919773155115264446439291508197470685845936470661796759303727584853595692513896693630088060705996441963950461104663278099375837614643170231585268825327676621312127833137714412000491828590463402589166570292869581201467727504298808309496049301092586372972663017069643851205809739316449235398397249107601114364503200443645342512470264293863519075025376014028602590714507316158171194580621875395764962837126925706336122703480140918899279253086989277441794635774136714182535803537559095947234452500096944110702910853286209331634051217853548398318878210573526445136225343937613758438995507445230177355988866427015803205915912535725341358708651319347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b83ba5f311a39383a578da3a75c43582a06883d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preganziol.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700dfcc471000004030047304502210095230e30257eae2286998cbe9ed6bc344ee18c2d66e1ddabb3fbfa74c00fb79c0220605cfbf801f6b0ceda632a28d8f0a84582e7bca14ceb7f9326d4b4879617ce620075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700dfcc61c00000403004630440220697f49aab25a0fc047b49e8e60eb28fd0c88aee29c86619fab59b8cc554c44fa022044f0d9b184a56c93458403f5100c89b0f9947bdd108fbe505443906e2a00db89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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