www.municipali.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:c7:a6:31:2b:a2:62:2b:65:5b:7e:dd:3e:b4:f9:51:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.municipali.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:c7:a6:31:2b:a2:62:2b:65:5b:7e:dd:3e:b4:f9:51:d0
Serial Number (int): 280317767265667207288749565873467235586512
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:a3:c6:cb:43:ef:7c:ca:5c:73:fc:94:df:79:ac:28:0b:8b:20:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:73:5e:8b:5e:a3:b2:38:c2:0a:f8:48:e1:93:4a:e6:0c:a8:0b:d2
Fingerprint (sha256): e2:ae:3b:8c:a0:b5:f5:88:bf:90:86:d5:c9:24:55:d7:12:38:94:9f:06:b0:34:88:d3:92:1b:e4:48:3a:37:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.municipali.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.municipali.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.municipali.com

Other certificates including the domain name municipali.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.municipali.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvbM6w8VL+KmADHMZzXKZ
jeeSroU/M4fIdIwYKXWZr8FZpIYJEwFyUEPauxu10ngbjv9wkqpywoyaGKBBiJXI
qFI+vTmrORTo9lUmkTX5knZfih2Ie1+oNeYuAhhFr9fNHpqAg/BRJgUZRnO9OdcC
rfwZO64b55pweXth5wZhfb0XscVvuwRO2myCs66l/dNRuapN4f2iT89Ifd0DPNSS
eWOhnb0gWGIzIxs3Fn7Mbt4nkvHAg6X4549UfSd+m8REwT+jI9MNyO1kbi5d/gaD
pV1OuEzsEFudcaWcHSVeazfQFxjpNctO0NQcLAPm/h3wUCuh0N++acKFJo/JfO3g
/4oYXBST2povNo1Cgt6liWF9+T6+A/KuQ/eqUlDiAipZtdYxypv/N7k4v4oIL0Gr
DAwFu4Am+f2GQq1lrICDBdJ8Gr+YQxMAnk3OHmACNt1NeGUkuchaYkjktHIFI6d9
kQkBm+33MpGmA0ylykN9DLT6vcQKcWQUKSrTsEbvKjlsu6ENdiFwZGThIG2fjVGB
cUDMI1TS9ROHJCmTIDZrh3GzCGbabeJUnlx8SexbilsScByb8wTyWA9Qe42RK7NE
gD2Q2hYVGMAyWl0xya1WUkNEFfDl3K5K2egrjwoWBP8h8w3UhYRFZ6aj6W/VQH0n
Q3j/7Id7DRJl6bJAUBx6b6UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280317767265667207288749565873467235586512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 07:27:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 07:27:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.municipali.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773908950611054356153469220372636945629989945058368700132333347524866478342794556835908185546306823626906089152183886683640935495290183259398062033738577906778708908532823374543672064002409346054834393877287484928930346789172846382065607461276260187439390286711745800868153815626604975196377006006079845814567670533539510761225135564695497738366499657381356603848959141187816267009968541585630340707848819620777976533328697007041611812156529890879650401188568314705123372227410896135731934590579271335154183722253513734919609428969419866833130254563881145202039637714941265024542988212637470686385473516146285941749329150983490991773797848157815260475036200797511282107584615686347743868937350366732553356637673957884404394991999897757459385882771251827128026843869828330512891814484239706838647115409739939371345851678373853968294433742968127148395402077574769813347185974106884454719567656014872803944915000043870501551139585712978364523593439949470007031598859498154606737002606955287738764726814490187641641890863717246610919256798856398845013970491513266421578587565953578614744928180755379812259520398282129928839631318203559903894246214976449617675208697187015430887028121675451126001107438922387954107964754627618576629657509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0a3c6cb43ef7cca5c73fc94df79ac280b8b2042
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.municipali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d76fb4dd8000004030046304402202347e74f6476f22c073ed8c90d5c6b0cabe543fc8aa081b7d970e409805e535b02204745019574b7b2a5f638cde391b35ae4251b43e0b805a93a68db528eb84937c1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d76fb4fdb000004030047304502206f06b683942c03dad4e19a41a5890542958309389fb98f2cef1daafcef31e1e5022100aac84731ce6b1844a24055ff72147235637eb04c87fb20c8bcba32cafef7ac49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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