www.lettura.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8c:78:91:4a:9e:c5:a6:6c:06:aa:41:7e:90:70:75:4e:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lettura.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:78:91:4a:9e:c5:a6:6c:06:aa:41:7e:90:70:75:4e:28
Serial Number (int): 396248936851988579012359403379020600266280
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:02:73:10:77:db:a7:4f:d4:6c:46:26:b0:d2:da:47:6e:d8:f0:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:c8:63:a7:cd:a4:ca:a6:95:31:a0:76:35:4c:65:3c:89:37:f0:5a
Fingerprint (sha256): e6:11:b1:cb:27:0a:4d:67:64:4b:60:32:07:d6:ce:9a:c3:7c:f0:fd:6b:c9:d0:cf:8b:c5:de:9c:1d:9a:df:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lettura.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lettura.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lettura.com

Other certificates including the domain name lettura.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lettura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApJuQH2EvdVCMVTx/P0kq
kxzXyq+UeRX8SHoOgVJW5XrkNbiKsG786S2OVgBqHULC75aau3NooAOVxuNZp2P6
iDugFGXAIcLi5TpwvTURag00bUF4+hOe6zrYJAnMChh8wi+1G4k3CWQ9lJ6zfPoJ
6pqBlpquB+OR6odQknhtUJvglMearNDsiS9kKtBrmgkqa+hvOPk+AZIURktNWt1y
/ju3DrqTnet+wg1kc21pt/6Vpbjq6tRXKN9Y+/FPQXRpTLOLlGOC1EbgXYG53Lon
av2X9wmfAX2IUT0C65L74lxJmQK5GLg/2wfoNAeCc/o9/Yi4s2BWyisujMK80vvN
RAfuzaGoHFDN5ph0RSYhTOZULoh093q1jnbc3cQXt8KQfc/R8dao6/ffTmxvLFwx
CpXsARZmclHS3tTtZOuBVXhOqf3mnggZbM24F15lRyMuCN9OLa1Ie+0VKZpurJS/
ErGCe7iKDmPw1MBjNPBeBVJ+7V/NHujr/fBUWsvlEG5Hxx2botuIrzRIGgzYdn2L
igb3m3Qq5t2E3BiGb8Y2Xouj1tz6f6QQZxSYXCfqREkeXw4XYEnacQqeQIP5RdAc
4GcMk48qk5eFa93i7RgFfglZTN/svRXX+E5mJQrBPIU3sMMeSoHBxsDN/KiIKgqd
3tBijc8UyKvch79YNu7v8hsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396248936851988579012359403379020600266280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 13:05:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 13:05:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lettura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671540695841733688444577519550556592745586431423171352242147848838896132243550196813199278836412052627830142114678443731240378798572790069277637603352208951997604306557121666840375413801555417320244132533526095319231858329618666424694467081342792000965176943083484400628005706738092040414970736360453337404627338774569843187986785507844827999612655090971452079207736446019356699358499221273325480802834631745134162505810863742292522931871570435976833708788229151753503753430032412497052119315204646753339416965334105656807571182588688868001503446636408305170952958081561536033727860701658633557198199057807918384494609308490049234959881365294685300896371908181687902946814545001252546327384110904562699811250687337492574352963131095675450691987159094868547756058378169153802159123315692683282956979821821659198420836329752090367593793990965392858791549964210910962138184903364392935613303857719119401607541454152905459030572906346216370498833785033467995940207987636431132447988381801974680826691308679829580692607897781209839473004163960543417716108952098463152990051760541551014897181590478964559083937328288538516496474263260244309764111534386281949496364132613693608796799934213256902970350674466996606089620083455535644568187419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b902731077dba74fd46c4626b0d2da476ed8f0bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lettura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fec785b0c0000040300473045022100ac2f969385f83e186355196193b8e0e027486b1a4b884a083f58d8b3121f17b302202cad2978140715b572afa8a08f71f8d1dac6421900525b7adfef7ed22af6b45c00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fec785b320000040300483046022100ab65166cf5744d35ef9cf5ee7cd3d5760d1a8d5ea867a2484e7aea56554f6e0b022100d1a2bdfa2dcdcd25a762cd998df671aa39c19f7dbe8a163a40e42a5096fab5d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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