sanlazzarodisavena.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:3e:1b:f4:ab:9a:0c:19:54:07:02:11:33:7d:a5:48:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanlazzarodisavena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:3e:1b:f4:ab:9a:0c:19:54:07:02:11:33:7d:a5:48:1c
Serial Number (int): 323691088232069958377313559275462682036252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:a0:fb:60:5b:96:57:17:e2:f0:89:07:fa:86:25:02:b3:ec:43:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:61:8e:a1:b0:2b:03:a2:fc:e7:99:4a:92:e0:e5:9f:34:91:aa:8d
Fingerprint (sha256): e4:6b:2c:b5:4a:23:68:5d:e9:f8:7b:92:90:39:e8:2f:1d:a4:79:99:44:3b:03:5d:e6:d0:fe:bc:3c:b2:12:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanlazzarodisavena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanlazzarodisavena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanlazzarodisavena.org

Other certificates including the domain name sanlazzarodisavena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanlazzarodisavena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323691088232069958377313559275462682036252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 01:17:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-11 01:17:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanlazzarodisavena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840310090989851441833823748348666532069075930189848938647570197685699739766737331408397797088908600234111342524960619349352202537772594239883456816330954038152596959406629535338438615341097991155273792434836830284531643677670704966747419847182822819502471513598796261718680965573735004450702484465930857565680733046268422333923841509137981815162407681221034753297296761582858582391547429859428141819968738820335881937394660285213177970420274790854716762587968220933681402725878280912712913114194282756643625329283475423713436507613476790281831763335647695230595717823314843030491122356949959394486842363486214983725524848426769297384859571090635512715398562687158475758732384885190814068545717371080239415462530485854482822450622128780371829643840549858451270908644359961021635789955225418245502772254986095416971388633841475291438098018250205796060817998577268922003001945314344585641776041607028605013005155018326405437313073170191320533254020658289118876684855944695412581125790965652723496763388328487468138933796312444614418106515996706242517897946428598359256369365654329932644507658809844939818514338377488345634587738796736142985704955829192283506483508650016410659762545044827127617356736202212749101772581608033146992948939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6a0fb605b965717e2f08907fa862502b3ec4324
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanlazzarodisavena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001716c2d71a00000040300483046022100e926b75fe0bf5ebe09badd33f8b4b4449036598933517fa0466ca3228db8f2d7022100e83aebff46cd40d11db38c8f6deed62f4f2e0bb95ef72624ad2708f877eb8d8b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001716c2d71be000004030046304402207905710cbfb8ebf4f9e2c5c1b1f818259c08790bdb6aee05e0463056945611e502207b2283c713a3727b6025d47bc009487f2fbd54ba8db520f3454caa1a80d06167
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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