casarano.net

Issued by R3

About this certificate

This digital certificate with serial number 03:42:c2:de:53:77:1d:c7:5b:a4:79:aa:e8:bc:29:28:78:55 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=casarano.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:42:c2:de:53:77:1d:c7:5b:a4:79:aa:e8:bc:29:28:78:55
Serial Number (int): 284054518626024911456109701662172087089237
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:a9:27:8b:52:dc:9d:15:47:dd:b1:c2:61:63:91:2e:46:18:a6:c1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:df:c4:62:72:af:ce:0c:fb:43:55:26:f1:16:3e:ba:89:9d:dd:3f
Fingerprint (sha256): df:62:33:a3:e6:09:dc:b5:de:b9:bb:e5:f8:32:1f:0d:7d:c6:3e:6e:2c:bc:84:86:65:7d:d1:da:d3:16:5f:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate casarano.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for casarano.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casarano.net

Other certificates including the domain name casarano.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for casarano.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISA0LC3lN3HcdbpHmq6LwpKHhVMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjIwMjI0MTBaFw0yNDA3MjEwMjI0MDlaMBcxFTATBgNVBAMT
DGNhc2FyYW5vLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMLO
w7K5aOhoPD0h2ROSQ56bqPqmWkghbdyEj8IlGYv53QyiK413HN/H9qUbXeulMVc1
pESFjtY6dMIgweIOUsjU4eOpa8WSodfuSjXl46DSSeo6VZHmquuuKOCt1LYVCebJ
NEVG1grG3if0ywIOorgmMWLwB/hM88ADTmfMqRHXx1DXjElyHeMXueeWlzI2TMvU
Cby+yqxWtmrFkPQBVHbfJQY3i5L9tIPjE9h4FrxKwjGhTOTmwv0VSEo7YXiLuis9
r9EQetrKNPRMBTdJ9PLbdLMkt54Nw1JLC8DEQ++Q/A7V2or741Mv5rggMCeUkCdQ
8Evd8XSXiEvX1rpJDf71dVaMh96sZzyvIZJMl0BWXkj11/kkTOHFDaCK63pSyTfW
MFMMkEr6uDBq3VBNrYCHWfE1YqbuK6fQ5xscdqmGpSiDYqJiLGY+3cTeUVUuDb4T
1jfoBGVvK6zvTm7TubpjNY7xWIyFkxDwCaT16TbXgvfYu1wR9GNO7GmplJQHZ2mV
qSbyXNlpxHylhgQV5P5hE1oLH1OUXtkCrc10nlg3vJ1SFN/Pk4ubQBv5JxTa+k2N
ksw+kg3jTVsYfRxn9Nveh+3DtETtWbr2HXHoYU5sFY6/CWNiRI9xZQhmLAajGlTw
H538Tv/GDHCdrmaczJPDDj+DcLqQg///N0Mf0U0XAgMBAAGjggINMIICCTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFBGpJ4tS3J0VR92xwmFjkS5GGKbBMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDGNhc2FyYW5vLm5ldDATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHb/iD8KtvuV
UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjwPVIRIAAAQDAEcwRQIhAJJxQ7TU
BlnlkpnbAAoIFoOpODhuXsnoBqzuL8QMjQuaAiAmZGKQ/EA6vi6drfEh4YWOnnPc
VP7D7C8RAGUcIUt+DwB1AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJc
AAABjwPVIYcAAAQDAEYwRAIhALDfUH7CBmXW7Lh99n+h/31730SVZhp2R0nMstso
YcvkAh9KzNweKLoQ/BKTH5mYGh+aJT6ZYv/3rmEYJ612RAD2MA0GCSqGSIb3DQEB
CwUAA4IBAQC6w284AjGmXmSACMS4VM+b1x2RKSQjc2cFzw6aNOc+oL8aafveR2rl
A/Q8U+nbNi7QMiQynevCos6GjBMUtbLTrijATLSCJriAc3ns07iECEJK2QEFlJUl
Az+WdBoCchyKnlKe9ScyQ3xEpjV9UostHI/6ETEzotTEVVTbZMRsKZ+wFQCgJtHr
twl+R/p4AUgNzETsoFCRC2Kc3woVCupYyJWLIWmynS6A1go6YBkqg8VkGFunyTCX
92odwNXoNZ8hye6DaHJ+47l4rCalEDIsobTR34he6W31R9+HlitO+bOEywXKU6yz
0A+sQczhnh0+OnLZiT8kBnyXcvcf65Fs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284054518626024911456109701662172087089237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 02:24:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-21 02:24:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'casarano.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794745970075020365958515967960417214494194190977301664361176772049154521499619210134151813472809068388522639989680637748871423893419937382937988859066821292524455496156980252497494175755790611522800273271457498218980977305657497720727839459793391014671982609007866993711353390866180345460810854445663214257647540155395306956029380404474415516264370952531314811049079588792957599479011630649586928391814398454399458252078793938168553780856687269583488669036779734585618515837608020176262060459745780873738291961795462580285110035437308086238324997044006310615613347060235364115482478815513806774113606435267033564653666033598627232849815573937726988479832926332454112771046615593072217579663049002016122747929515647639751739842674279190243250187982116393413108810836084201135691551171048363833494724564810394374544762051784603755273656827179710323750537951512362725938071055545976776912214348438777222717946101865437600927815311202514633303292823804825882968246069774649070987624554273361206591189422164434902984994165527642471807611973724720321746141821818599365222850008923752628556468770459547908851316264988800371087064385417100572759843030848374723029019608906425043712624501064454385275403623946134246957523755783712454994906391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11a9278b52dc9d1547ddb1c26163912e4618a6c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casarano.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f03d521120000040300473045022100927143b4d40659e59299db000a081683a938386e5ec9e806acee2fc40c8d0b9a022026646290fc403abe2e9dadf121e1858e9e73dc54fec3ec2f1100651c214b7e0f007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f03d521870000040300463044022100b0df507ec20665d6ecb87df67fa1ff7d7bdf4495661a764749ccb2db2861cbe4021f4accdc1e28ba10fc12931f99981a1f9a253e9962fff7ae611827ad764400f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bac36f380231a65e648008c4b854cf9bd71d91292423736705cf0e9a34e73ea0bf1a69fbde476ae503f43c53e9db362ed03224329debc2a2ce868c1314b5b2d3ae28c04cb48226b8807379ecd3b88408424ad90105949525033f96741a02721c8a9e529ef52732437c44a6357d528b2d1c8ffa113133a2d4c45554db64c46c299fb01500a026d1ebb7097e47fa7801480dcc44eca050910b629cdf0a150aea58c8958b2169b29d2e80d60a3a60192a83c564185ba7c93097f76a1dc0d5e8359f21c9ee8368727ee3b978ac26a510322ca1b4d1df885ee96df547df87962b4ef9b384cb05ca53acb3d00fac41cce19e1d3e3a72d9893f24067c9772f71feb916c