www.sanvitodeinormanni.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:e9:ac:73:b3:17:10:b5:55:90:98:70:f3:eb:b3:f0:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sanvitodeinormanni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:e9:ac:73:b3:17:10:b5:55:90:98:70:f3:eb:b3:f0:ce
Serial Number (int): 284446381923727254245017637297368083984590
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:7c:e4:ab:df:cd:52:c6:27:7e:c9:c4:43:a3:fd:2e:36:35:3a:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:73:fd:8f:7d:52:d9:fb:7f:e2:61:0c:67:36:99:1c:2c:fd:ab:ce
Fingerprint (sha256): e9:5a:3b:74:77:89:50:34:99:6d:b3:c7:7d:39:91:7c:9f:21:cb:25:9e:c6:b5:2b:d3:50:af:de:84:d6:fc:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sanvitodeinormanni.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sanvitodeinormanni.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sanvitodeinormanni.org

Other certificates including the domain name sanvitodeinormanni.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sanvitodeinormanni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284446381923727254245017637297368083984590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 01:31:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 01:31:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sanvitodeinormanni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784707038324018995858343192537678038129063071281740177494479917759354168373147090203078720258555134710001015920330885401620868321661234613567927033522581809328609709957458534215228416334070523999592810387244851086899910490929183089895986898467781768435725778272576925813747512948868147524987305297072531498429357984346865379129983766540027178131704290183677127165556095308674703994639870811542480663625233633101947976763466128544541924886718733196118052873613839974330632236764902919790398964143811435034133125077710188267228083682408642207389265998576347207004461037288168711151222888612610969716136366071099745756199475003620438599869873319963552371718624487325812329774458019164508729109550758321850549167941781191752763677313657844012315970256993393421227337780211822516332845402124560604232539248914507054056010593975184754687230797952195474769508634779691158728115058171728235203871755588286755820370915572889847819153908319585735832486398994574742137033136344050444841271650383911539216034672806842823913304614651824030054292983641114284705701059697244954075824284913158420633223091220873479106560505720946175298182048121648369890563626271787512374224644047943367882637560155078239371467277506856551650720091579584595126716317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							747ce4abdfcd52c6277ec9c443a3fd2e36353a81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanvitodeinormanni.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7adc451b000004030047304502204dfe6b4d7851be61f23d4e38913b42c3884a1d765b1efb507457968a38d87bca022100e60c0de7b970e458b4b512f81ab98e5b1e81316d7dad37c346ad9e7e76b07b0e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7adc45c0000004030046304402202f8c565fe3d92c12025cbb98b77d065d4790fb85d085a20b7122110e94e2deff022065dd859c1082b429507ac323bc9803011fda99186173d6f277656816ece2eb17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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