www.municipali.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:7d:9a:f1:89:05:ec:5e:d9:26:bc:c2:22:42:c2:51:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.municipali.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:7d:9a:f1:89:05:ec:5e:d9:26:bc:c2:22:42:c2:51:35
Serial Number (int): 295872334866401659521197809809671344771381
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:72:66:0e:4b:e2:5b:df:4e:c7:8b:d3:24:6c:b3:b0:21:30:59:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:c1:ed:2b:b4:ef:ed:6b:a1:72:2e:85:8e:5e:d5:fe:37:7a:12:86
Fingerprint (sha256): e4:e6:17:53:9a:2e:20:83:54:18:51:ed:40:ba:f0:23:95:c6:a9:23:e3:7a:d3:7c:37:fb:d4:a3:b4:3e:63:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.municipali.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.municipali.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.municipali.com

Other certificates including the domain name municipali.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.municipali.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295872334866401659521197809809671344771381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 16:21:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 16:21:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.municipali.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702857969748801217401506436006724248346184255547023514505222465095765547705450023694910112656975366907084952691593717398525019436621584506644501436986912665838360931620847529442624234141951170680277337158108299986730899281648549693106330252623223919685529157191654122196786961595871325771893277288929225443414258032678631137380740024134931412411071006053567764515104901905383717017502818258211045498286931176316263175813699039458994629099152256652745425256707785806813432846279801134857508526929603962014774281738337284798225456666083795319901518524607474769489541091223791955650688382968312087398785342609328761978110088776451477390803307416915039917750865239364802582421193242933565186585506559979045248997200943486875417423931789959308777558067286049775243409420379168623942057332509804693938970343570910837298594434547224449378720539556195183700414549179844091229051138295095460657447314844004864296146764664418443266752979882820679611455394805927610607941416927611618361335153109638379103586189856773526207107632214425912922329583581003846685952482300168160039252851111469411063790548227259438353443885295591681907322668666900909989749526714867258843427761247529064658625171133033526919206055884433467398011952045667197496976921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b972660e4be25bdf4ec78bd3246cb3b02130599e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.municipali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2f4cd7d00000040300463044022004466790d30eb0f5590b031b7fc8739622d07cd18f1e5e7175617b43426dc19e02207da4d038b4ea2106b9baa1872839501b0c19108432ed19c9db0b476cc4f420d100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2f4cd7eb0000040300473045022100b39acd462ac8e35f1407b94f9e7a3d598a0f8833f201639e9693f5b5244dbde8022056c828705afdb016e2801259a43527ee996729cd64de3d8d79b8320e05a13b63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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