www.stefania.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:c8:61:02:f9:83:1d:01:cd:4d:ab:40:91:0c:39:f1:2d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stefania.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:c8:61:02:f9:83:1d:01:cd:4d:ab:40:91:0c:39:f1:2d
Serial Number (int): 308902456109576656691141569403683490885933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:22:49:e2:89:53:d7:9a:9c:da:69:37:ca:3f:ac:13:54:4b:c5:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:54:78:b2:c1:3b:c2:d6:99:1c:41:6c:32:80:4d:ba:f6:0d:f0:e6
Fingerprint (sha256): eb:6b:51:b9:c4:95:71:04:92:76:be:11:43:2b:54:1b:76:13:50:ab:36:1c:75:4b:20:ee:ae:66:d1:3d:b5:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stefania.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stefania.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stefania.org

Other certificates including the domain name stefania.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.stefania.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308902456109576656691141569403683490885933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 05:08:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 05:08:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stefania.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759857971238916333527049084880383119275438782315358639418299477393937946587370416801614725026234806203425128532689225534759393834075159384990030399864544916473045355736525282139921854291224978352906629928866545397830689601036031137386904130950863988548828570167088322129300475857549744962891976244453579122825329715204671194587520978832441644258589054578331678682359678469104260406989929302453546220368973564971350956444475425227424693443784769052348531861224444224921380045299323303032564418636941447197436817898576580553657815409451460521105299747158502925481557975575178352591922734448089385996078663304538597079375967576366896879939394035537680523767906344613942427304607883042562985093902720565859154415721494150454764065828319379151813657761492999572150407574968707107299296733173582809767585537903101573462324794231509424985983939732568317471792999468268140055126764562227212210298893876082804110210943374247297688215019948152239765058220617474128821681275322510359163398294559800050965911384228639213869927483556253904849337415753729414222097139662675872170998873734920639741259511976316858574494365603152945944012362926245460206061221265746949787005583851203302137442765446229914936975342063977322031888853428800020014126723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a02249e28953d79a9cda6937ca3fac13544bc5f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefania.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b9266ac180000040300463044022027d2f64d1ce024c0fcdde35d03413c000ac5ee796f9cf7fa2a4e97eee00c4dce02206789979f516601c9c46c6fb113910d9826592d2e42106a9a7def9045d1d31cb600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b9266ac0c0000040300473045022100ac923af32d61b011e18ca0176d3900368c34e4bbaf46b6937cc0d325a895837502200dae6a0b75302f3660382962d71628fce6856c72a44f324b92ee35275b0b3e58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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