www.pintaglio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:db:09:3f:5a:6a:f5:b9:fb:ff:88:ef:86:a0:55:47:c6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pintaglio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:db:09:3f:5a:6a:f5:b9:fb:ff:88:ef:86:a0:55:47:c6
Serial Number (int): 299399349470208974906413111030544493529030
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:ea:43:d2:c8:a8:43:dd:d1:da:a1:87:53:96:4a:10:1c:96:5d:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:68:8f:cf:56:ec:5c:f9:7a:d8:f2:4a:20:bf:ca:5f:27:3e:5e:54
Fingerprint (sha256): e2:98:d2:76:20:22:64:f6:50:0d:bb:77:ec:72:cd:6b:0c:47:28:d3:bf:f3:6c:08:d9:74:d9:51:c9:5d:fd:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pintaglio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pintaglio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pintaglio.com

Other certificates including the domain name pintaglio.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pintaglio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299399349470208974906413111030544493529030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 07:22:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 07:22:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pintaglio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744625841311127343651991916584913536780396362375261842609607872790011521672198201279693139323313951979841827082272057895808139507301919329970364487889371609414573967591899102393351491684622966409831268540428157986152576889703548154718272461078940223325055786687709030335232736006824397307405930372044545680623071744990514140168533491244334525361705561157517074317715751647363614641839341801253200489218685975528716034145764962574553615036579036249249993743328321116866804798180029545282642870129295459548091692396885007520059100256470505753635979563524501301701573937932076605274340264028117244832583724720716869556580047133372644523061799909688642572723230142229533696020647941232348284371616873686527087434031241596848457031674894970535233176124866116621398923874296072923263839423806976840851699683544883889755390026540780712975423906432619284737029243512896621476665385181869049424622024105407712558008971814922928758776769477385236192714876086090800790425544503801386058794668354014318086290498806537388951304851749482495687918826046597004006985448504450983377517619349196067661556604811326986429744159139695068310414607711644447872430768485311272326568287708603315913805220710411833361404711338923668868584678947606630764602871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bea43d2c8a843ddd1daa18753964a101c965d69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pintaglio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc4369aa300000403004630440220641f7a98ca4e853eacf51573740cfa25a3d5244ef6a3819794e456c693e19f1002203922a8527346f3634982d84c509478bbf6a72317f31d8eef1bd0be9ad170c311007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc4369a9a00000403004630440220736c9f7d7afd2434cea3eb1a5efb5aedc5d94888d8350cdfd2a372a76b2a4731022071bc876608d03fa9947d0a1966f58efb1c2ab24031335b6383893443ff598b20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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