pavullonelfrignano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:fd:f4:09:b8:19:24:cd:2c:39:d2:2b:b8:d0:fe:e0:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pavullonelfrignano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:fd:f4:09:b8:19:24:cd:2c:39:d2:2b:b8:d0:fe:e0:0e
Serial Number (int): 312716774633916025624129578104022772932622
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:c6:51:a6:1f:ce:03:7d:35:fa:1c:9f:8a:58:19:62:25:c5:3f:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:97:02:a1:7f:3d:9a:d7:a6:00:9b:79:c5:2e:dd:de:5a:4b:fb:3b
Fingerprint (sha256): e1:da:dc:2c:28:84:1a:b4:c4:a3:c8:6a:87:1e:af:9b:10:bf:b8:be:c2:8f:1d:b5:96:81:87:52:18:a5:3b:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pavullonelfrignano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pavullonelfrignano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pavullonelfrignano.org

Other certificates including the domain name pavullonelfrignano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for pavullonelfrignano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgISA5b99Am4GSTNLDnSK7jQ/uAOMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgwMTI4MzFaFw0x
OTA4MjYwMTI4MzFaMCExHzAdBgNVBAMTFnBhdnVsbG9uZWxmcmlnbmFuby5vcmcw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDMFNIkeBH5bqyUWnPUitwd
gdRTHkbE8EmtHuW506UmcKHRsyg50DginJu09qU/1K4MDT5Q6vBOdXnXCoHipgtn
FgcjUVQc1vtqb3MNqUa+BG7H2QTzQRw6swcXwDNptID+YFt1tD75qSe/FL8F7Syx
KZZPMh+qQcV9qmuTfR5EwNrWZSSB4rA5MgjK+fIfpHVyVIX6C1IE8eGfGjzN4rUd
s9Bz4r4nsKvUtrnzD4lCuA+Db09adfN0+uW+MebTInQCPWmLKp+HbF7xUoCmEVHc
DovGRcUuHxj/x+9SL9Qj+hfRYnWpGuNT/3WyAijMDGYCLUyzofDQmUtCKOUNDCEN
2B2SjZjllV08UBF6scKEKHP2aizs4fKUEDv2R1Jfgh+knzgnGIesWqxJmyywzns7
K5lUQ4B2qAcCHohOrja/C5qGUe+OODaJyquulZR1pE9lVCYStOyj4NG0pyoI6tzk
QPmmfLyYHdVhHggRLvFvgvY+eg9kz5MfJddvTrNYks7hURaH/9JK84sBjy3Wqx6P
CT0BUosqYCQSTP5lexhOaB/YNgn1BICwdLFPnNSKMiFgWt5nlJ7DEHPAb0Gxx4dW
tqNgalQDXb2i2tohyvVoMq9iR5xp9nPrlvmIQkj0A1zrxVkrW9GzvcBo6VPqc17E
ExWj19epRZbPfOUHK0qvxwIDAQABo4ICazCCAmcwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBRoxlGmH84DfTX6HJ+KWBliJcU/ADAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnBhdnVsbG9u
ZWxmcmlnbmFuby5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3
NXnmEHvMVgAAAWr8RIqxAAAEAwBIMEYCIQD1qLSMTel07Tye1J6+t51d4YtWlVJA
gZVhIPhtTsvc6AIhAMmhA6KhUoby27DuFQvKmaJfEOIDD+qNsYpobrJXsdOzAHUA
KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFq/ESI3AAABAMARjBE
AiBgawI81SmD9l71EJFfyESM3LZCuMjeVmYrF0oMNovHjgIgMIhZBirrjlYxR5ho
KfXhGZa0uwWXT8ziyIZFHWtIzpQwDQYJKoZIhvcNAQELBQADggEBAD/inEIXfP/F
B6RFz5J2rndr36hQM60/47OxDklcfwt8mMV3jK2lElKx0brBHek2mXbEkt2MQqMh
O1R9giN2Y/ka1tR7Up8cEWz+p+nxtFrLNYvF0NLtoqeN0CD9yxa0FQOv+fbzKn84
Koszw8dV4oy16zYE00StmgoBYtzRUUl44Wfs8QlzvqHp+LRO6/IbHnsKDJ2QbKHo
yBu9ugBVF+eA+L2enrCdO6jZwHDJQAO2vuKjzVXrurt0EfndeaYQyAeeXtuVMUK+
SPaKgNHEQq30slqlk83HfKsag7fgR65qOGMrE6/IdA0HboSZQvwx1Aq47TJbp0us
TAmW75rfbF4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312716774633916025624129578104022772932622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 01:28:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 01:28:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pavullonelfrignano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832579193526876724098241260359782864033785256842918261428753857781047039903445571449199646987291531365029647931743504799903532598396115076983379981315016280025907233487100815944620130946039060261159255844385136588964096404897610837219694690003826656100699466935855320654173168426095115897609770318142863073768472528122776089446650539365484725049300114240133798912741930235510334660710821354244087034855497533912050048878282624103552913527666268604371145525545965448162737964993785251585929667405276736131168646948127138468452043862897902241404262338936278285990628104195772224474524379600860338577035962663211320820000772860705455738250264206479155245524656378619469640985903775043923712424099159622283245575944905623789673016789660250266059785002479083964117895372176409198996203367568173664208464615694580431213857587355671765945846316508574441623380226822690373452628972752635705933387956591925522225896136587689547203609393050869610482401677342816988803882755138590222544979930216290075313660882215408957760591524207535288560097089024862643233037619219551663561879083295570871299145841335680620037493975582184371705512175236022231543804264322505414028715416918637518374506746448046014105597240334422540723988645534965675913293767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68c651a61fce037d35fa1c9f8a58196225c53f00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavullonelfrignano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afc448ab10000040300483046022100f5a8b48c4de974ed3c9ed49ebeb79d5de18b5695524081956120f86d4ecbdce8022100c9a103a2a15286f2dbb0ee150bca99a25f10e2030fea8db18a686eb257b1d3b3007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afc4488dc00000403004630440220606b023cd52983f65ef510915fc8448cdcb642b8c8de56662b174a0c368bc78e0220308859062aeb8e563147986829f5e11996b4bb05974fcce2c886451d6b48ce94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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