soglianoalrubicone.org

Issued by R11

About this certificate

This digital certificate with serial number 04:47:5f:08:bb:93:e4:27:dd:dc:3a:09:5e:5e:c1:ef:cf:9b was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=soglianoalrubicone.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:47:5f:08:bb:93:e4:27:dd:dc:3a:09:5e:5e:c1:ef:cf:9b
Serial Number (int): 372735513780929799329453001990975230300059
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:c6:db:0d:8f:cc:c3:0d:c0:4c:f6:2c:4a:4b:e4:d1:eb:4a:cd:c8
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): ea:a9:7d:7a:af:9d:5c:95:1d:eb:73:17:34:f3:05:2d:8e:7b:18:e7
Fingerprint (sha256): e8:3c:dd:38:d6:81:7c:c4:96:a0:80:c1:87:b6:43:88:1a:8c:49:5a:9e:d2:20:f2:91:d9:d1:5a:52:7e:7c:28

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate soglianoalrubicone.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soglianoalrubicone.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soglianoalrubicone.org

Other certificates including the domain name soglianoalrubicone.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for soglianoalrubicone.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgISBEdfCLuT5Cfd3DoJXl7B78+bMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjExMDQ0NjAxWhcNMjQwOTA5MDQ0NjAwWjAhMR8wHQYDVQQD
ExZzb2dsaWFub2FscnViaWNvbmUub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEAsBqxPnZ8m45/FXpT+t5AZqRt+qgM0STwdLjXzW41qWyUkE+fpFID
/nbw/KLuQa/9GdvmpDpbuVZXkm8cs45iR260kLhCqoqDtEOnmJ1kyGKVxCMozExn
tahjmH1fV27tHyW9DzQ+QYo2kcbso2rlFLM7hl42BuFOIak/0OeYBfPX3sK0HZqn
ns14fe4Kz9IJAmXauaDk4n9QWULXcYel6QczYuull18rSkiUJuJ1lM8BdZbzAFyk
IiwPG4dHMOZWIp8GOQifqOY8jYH9jpIMUOOdZIWPgASZW8TFHFlyIFSsWzd2MJgD
Ouo94cD3zb9J6aaTlv2/b6gPkFvGmfes1WiO32mTJ+EDrR1baIZqZpcdg2QOzDgZ
TrMT2dJQZ5jcgVAnr0LIzn4wW/rFHYLF2yRQE+s2EgGepyPVVLYjKhKYTDeRXK2Q
MJXOg6QpN2EacIOavb93NDLWmpcy+IbrNfqltJxU2H1b3y/SLR/ucXGW2DNNyiDr
9UKbBjQY4QH27k3RWSoQDU/hq8FCGgkHMSI5ciuikWhIziyldJp8R6tajFOa5KlL
wy3JdHg22pu9PCQZgX5MHH3exiDxFYVmDnnrreAX+7GE7i+AVGTNAAlhMblTihfz
z+p1iLs+gJNhq/+8fnmsfiouN8UOvo96rFeyDZ8dLtGCedHH1iKnPH8CAwEAAaOC
AhgwggIUMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmMbbDY/Mww3ATPYsSkvk0etK
zcgwHwYDVR0jBBgwFoAUxc9GpOr0w8B6bJXELbBeki8m47kwVwYIKwYBBQUHAQEE
SzBJMCIGCCsGAQUFBzABhhZodHRwOi8vcjExLm8ubGVuY3Iub3JnMCMGCCsGAQUF
BzAChhdodHRwOi8vcjExLmkubGVuY3Iub3JnLzAhBgNVHREEGjAYghZzb2dsaWFu
b2FscnViaWNvbmUub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHW
eQIEAgSB8wSB8ADuAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQA
AAGQBdT3NwAABAMARjBEAiAvr9dbtEvSh2P4NTD+PGaR5u2V+vItbuXowkKJS4hO
CgIgddWxxfEb8Sbmzr2IxXYS93VehcnpGZeuO7Fhhu8CniwAdQBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAZAF1Pb9AAAEAwBGMEQCIDA1uw7dSaiw
u1S5IwRtCUPOf4ErXzU5o9bA1iILFMkmAiBX607nmfe6civ7sNwFDX/uSGEXsHNx
ZBaGmnSF18HwMzANBgkqhkiG9w0BAQsFAAOCAQEAF0TD9U/5oLwiOOvu1k1oSk/y
kDCI5QdBELIyScEwNKT5752n2Sjz177WWTK4gSeJl5AvSUUGZ4zTHv+3F3hIMqSR
uLGDpNhSwAtQ4KeqBbXix5M2S0PjeRtZnZpKqS4fJ/P/pgY8Dwc1WMbd2iXgrnLt
qNelBaEzDWMTNnPGlFeRimZ76De05E3VpC/m/PluyTpD1qakN+memwHd2s0b8zWj
rqpHLsCWpjMSx5zKdRukesIK+jpQfwKGn2sJPrt2/AHrbFjvIizC9A0IaH3yse6W
Dwh7uWHIYFUYp7FdVEau0/ooyrYgm4/TA+ROWvXjwKm7Xkw+gfiAB7s1lHePdg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372735513780929799329453001990975230300059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 04:46:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-09 04:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soglianoalrubicone.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718442728336829062491821806897453768109577503290506519142232545439033317213150632029600904527102342061263000007351563172041924089824688364973782982806131382600402172965734012005706053111859913170042420669559630660126784399993657310941152695528940310155678285671172484962741046650313866531304315253013483054332531145230054781660815634935727221511317926094467548755250110567979268158172635411562602383507582866732346705407383804232409322557150198040801455606966582252215307966813572453171725648810427406053565340666880646405927835634251068637887758837799277134214005477276808882384190352068379537467752606341994651285413062125123087978129368075698200215288872789707292790637199819942499427026280260384140307112256748026871158082168594850711555994005907871984084245852438913817044926910330739214892841582228311429722095421070103459570373983006843647922788700985999912507255011698566054429256066458087189232894730522596454506727446869309572596612975799096841786266760065239266559089060867024387761804867651669376891651808943117548540887862800185668534709106917638896025295253644351331665859414275702138361730492114740847502945629728349748833652307230496919034947508359276998079697481418119985480308803294548503920836433773741766699596927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98c6db0d8fccc30dc04cf62c4a4be4d1eb4acdc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soglianoalrubicone.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000019005d4f737000004030046304402202fafd75bb44bd28763f83530fe3c6691e6ed95faf22d6ee5e8c242894b884e0a022075d5b1c5f11bf126e6cebd88c57612f7755e85c9e91997ae3bb16186ef029e2c00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019005d4f6fd000004030046304402203035bb0edd49a8b0bb54b923046d0943ce7f812b5f3539a3d6c0d6220b14c926022057eb4ee799f7ba722bfbb0dc050d7fee486117b073716416869a7485d7c1f033
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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