www.santantimo.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bb:03:68:f7:b6:8c:27:a2:f1:59:a6:8a:bd:9e:39:61:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.santantimo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bb:03:68:f7:b6:8c:27:a2:f1:59:a6:8a:bd:9e:39:61:b9
Serial Number (int): 412086479048335195122354881179734777618873
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:57:da:b7:b6:67:88:ee:ae:7c:ca:4d:23:bd:6a:f3:33:0a:ef:7e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:42:0d:4d:01:63:dc:8a:e0:fb:91:06:62:bd:ab:fc:a3:e2:7a:d9
Fingerprint (sha256): e6:6e:ac:ed:69:71:cb:ae:1f:85:44:05:12:45:ed:5f:15:9c:cc:ff:49:e0:80:75:36:b3:6c:a5:b0:f7:da:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.santantimo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.santantimo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.santantimo.org

Other certificates including the domain name santantimo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.santantimo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISBLsDaPe2jCei8Vmmir2eOWG5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDIxNzE1NDlaFw0y
MDAzMDExNzE1NDlaMB0xGzAZBgNVBAMTEnd3dy5zYW50YW50aW1vLm9yZzCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKzO4DXKParrjLRgea08NcqDmxmP
gZcqAbPGtxVbPi0mUFELyWhAJdNRS9zF2ebF/JTl61yoFnjVl5KjmRICykGVTSVF
FJRc0RxtDnFUELGFuK8F7hrpdYV3Cz+Kls9bK917lcwEppllHwmPX62/QjW+zZjV
hBM1OHLrPWjzxMZi5VBSHOhrRtROVpXAVjZMwk+6SAV9/i2xNNDF4pAijCTgPEXk
Z20ywQCbwz0L3/2I7EQcTJDGjwZ/30Ah9UonkvlWfPO7TXOR/Is9eZvLvnVbYKFK
Y7L7F59NXnL4NWGtWnpsWdDP981bKq9srWus/IQNo8c/TIne3cRKQGpCSP5aAGVr
KAYqFh+i1sBMpVniFEk/+pF2gAp8567H3wRgvP6X6aonY0fzoCOXJmeNHDDaDchw
L6N8o9NV3JIH6/nepuM4tp+7P1SUpeVKDgxDcNHjepv4Pga/LHskLb/E4um4ofF6
TYBpqpIu5KTqV73jFHI4aHPjzaxxZLZp0Pix5xpe/HOj4s+/7Bs8qQTXzYGOyfi/
NGw2o/eX99QUw+MmV/aLlgGblanqjWr2b75wDToek7mBU4uUNZ+a4qMIpoedC07t
eYJEByryp6vaLT3xvrJcNUf8420Vv8kqupOVlQGBRrVkiwwwmQVmXgmYuYvALT7B
E1deImcG32WSAss1AgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FDVX2re2Z4jurnzKTSO9avMzCu9+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LnNhbnRhbnRp
bW8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A
AAFux9Ni2AAABAMARzBFAiAdMH6c7kUZdC5Uea89rqa12oRlG1EZ6/tl8fkj5AK3
qAIhALZj4W3qy1BxaXuItB1gVU8tSPFmWY5ZYJe4we5GlZmSAHUAb1N2rDHwMRnY
mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFux9NjCgAABAMARjBEAiAOJX3VSj34
InGcJ7kwf7nkbueiUYrVOQ5DqzaRLoirFwIgXTyyaEij2/mSPbuC3+8+SXkMSwsF
mon+mOEjkN+XQDIwDQYJKoZIhvcNAQELBQADggEBAA5Qjjr5vWHC9ZKzyh9NhYkp
tkeCD0owCtI9NOkxHhlwXK6oTPy3gdDqW4uSKGnFQvpreYh+d9z0o3u+dY05zW33
cgbxp2d1h4+xTzs1F+Iclyw16dBUfUULehyzW8rcONumFxau+elc5j+8xFCAnyzb
K4P7TYWe0m4CtY2wvx4B4TrPs3J+wLD5WhTvXC0u+9dzY/Z6VdJkGMuPMVWxb0CR
zY8p1k4/Jo0CZWprVBcm95rssALOwswu7R4WzOaWvGPGtTZ3mFt9XAfQTbhz91GC
r0m2PtEBpI9fB9XDFFdHqbCoxpJytaY7TOH+YEfmWjzEHLejP7XFkvmEC6GxZ8k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArM7gNco9quuMtGB5rTw1
yoObGY+BlyoBs8a3FVs+LSZQUQvJaEAl01FL3MXZ5sX8lOXrXKgWeNWXkqOZEgLK
QZVNJUUUlFzRHG0OcVQQsYW4rwXuGul1hXcLP4qWz1sr3XuVzASmmWUfCY9frb9C
Nb7NmNWEEzU4cus9aPPExmLlUFIc6GtG1E5WlcBWNkzCT7pIBX3+LbE00MXikCKM
JOA8ReRnbTLBAJvDPQvf/YjsRBxMkMaPBn/fQCH1SieS+VZ887tNc5H8iz15m8u+
dVtgoUpjsvsXn01ecvg1Ya1aemxZ0M/3zVsqr2yta6z8hA2jxz9Mid7dxEpAakJI
/loAZWsoBioWH6LWwEylWeIUST/6kXaACnznrsffBGC8/pfpqidjR/OgI5cmZ40c
MNoNyHAvo3yj01Xckgfr+d6m4zi2n7s/VJSl5UoODENw0eN6m/g+Br8seyQtv8Ti
6bih8XpNgGmqki7kpOpXveMUcjhoc+PNrHFktmnQ+LHnGl78c6Piz7/sGzypBNfN
gY7J+L80bDaj95f31BTD4yZX9ouWAZuVqeqNavZvvnANOh6TuYFTi5Q1n5riowim
h50LTu15gkQHKvKnq9otPfG+slw1R/zjbRW/ySq6k5WVAYFGtWSLDDCZBWZeCZi5
i8AtPsETV14iZwbfZZICyzUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412086479048335195122354881179734777618873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 17:15:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 17:15:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.santantimo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704995575461268158435520698979835980521336998922629229039691856462238274949441031324239965834516881739690331436094843760747449454663922764759614630352729181738122622961131818724449286536332082664263683602764716884530674316922946645758111649700486821704157182248181199999594983365952239361105086474628531989696671770236461706866649804260366016321484285232673066114608869110318315554089983386808382648291688237348920376616548406337777596274744390479649198310517893347172487600373557449884368623845923639431950642773296972794899486411179384216515825424922428875961970785072452806248105926399209609001967693515341500383943199191348263282841672191531881856266876832362389508263332370326950284006191321453821982243874568356162270475442203201753346770246524425934929203361233970834652075283783982108622998381807641643068778508733578833424475347743687820629853506961467497389141485848002109377880368863210776246797978358584297064278716042240760679850536055947434025980042056962913262555991833363823686070363275360209281607691387184623401276752379565861217924697384820055304976317813781094303211833176590549691439074082307368103363557001945867495762538631672810641243054354985762660007592672378356962776604513373619925110234593295563594320693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3557dab7b66788eeae7cca4d23bd6af3330aef7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santantimo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec7d362d8000004030047304502201d307e9cee4519742e5479af3daea6b5da84651b5119ebfb65f1f923e402b7a8022100b663e16deacb5071697b88b41d60554f2d48f166598e596097b8c1ee469599920075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ec7d3630a000004030046304402200e257dd54a3df822719c27b9307fb9e46ee7a2518ad5390e43ab36912e88ab1702205d3cb26848a3dbf9923dbb82dfef3e49790c4b0b059a89fe98e12390df974032
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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