acqualagna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:e9:d3:b0:ba:0b:6d:02:78:7f:39:5c:48:9b:59:4c:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acqualagna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:e9:d3:b0:ba:0b:6d:02:78:7f:39:5c:48:9b:59:4c:6b
Serial Number (int): 313030304482441548759894515121585028418667
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:bd:ce:67:f3:55:e4:12:44:03:46:26:ee:8d:89:29:75:aa:bb:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:bb:87:c6:2b:29:b0:dc:95:75:50:ba:21:b1:bb:6b:a7:64:f4:ae
Fingerprint (sha256): e4:f9:f8:0a:d4:b2:ba:cb:f2:0a:d2:35:be:9f:4d:17:ad:32:10:03:be:2d:f9:8b:56:89:e3:0f:03:db:e2:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acqualagna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acqualagna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acqualagna.org

Other certificates including the domain name acqualagna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for acqualagna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313030304482441548759894515121585028418667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 02:41:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 02:41:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acqualagna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916328114769896304039184976380099959293144560881309120782161020373677716994768936182462363051071546424083712567584682459017578259682218669339769207601273667086119938550582546563097294953409049774991758577323335828333668564935664151874865411510519240923635472820411489748649729936052294355619748573459472450735004599048073733820937516275801562104694467410352317179005772517027158935860494797194997249885563744722884293199783542348604201235769577947796180965073710014108869850479950731279611462556171716694151678802837645725805896537182796776917142695814188031415471377145943819216890357221570745170235958242191552343106447241423829880881329517625080817665829308554382220815839903966909138754826194719137187053831665789464307380691968642726115870267875287532590573239667594768466912428798880049083478269907474649595824897843064048885701453116863434046901030531477130241058317617164042895197013168104086441217722990124330363742353815965771537419883626093967410722958121554156513453141026723172095635465525314631076834183733996673006652503356460408008598921448681743239955898028625011904361980883133587506113441885218142561768652673167085507203478700765195874308281302100337328348473756312424032987120810964110454494561872085961657297431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98bdce67f355e41244034626ee8d892975aabb28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acqualagna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec4b28f8e000004030047304502205f8e49bed1e3aa517034bbcf8a44cd0d3e21b1dffbb3356febd3675d94ad95c8022100adf785b1501a378ff4c1aab21aaf4b10d5b9793dad1bb7badad982276f03990a0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec4b291610000040300483046022100e6bf0ec9082df50adcd67bb0e407b136a8e69b2253379179e59cb956266f6907022100a7444f223627bda5df148ae8f8ce0723ab8fd986b95b041b9b803022c897d0b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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