santarcangelodiromagna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:ea:9e:95:c7:f2:e7:2f:9a:ac:3a:20:ba:77:6d:6c:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=santarcangelodiromagna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:ea:9e:95:c7:f2:e7:2f:9a:ac:3a:20:ba:77:6d:6c:da
Serial Number (int): 310989663770654746102568841640889444822234
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:1c:43:58:7f:eb:7e:c4:37:f7:2d:c4:42:4e:eb:98:66:cb:57:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:ec:e6:d4:50:6d:74:9b:36:91:ea:82:8d:df:8e:1b:20:0e:25:c8
Fingerprint (sha256): ec:0b:e6:81:07:5c:e4:96:69:da:be:c8:17:46:5b:c9:b0:60:9d:00:75:87:8e:2a:b1:67:80:70:9d:fa:af:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate santarcangelodiromagna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santarcangelodiromagna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

santarcangelodiromagna.org

Other certificates including the domain name santarcangelodiromagna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for santarcangelodiromagna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310989663770654746102568841640889444822234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 09:12:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 09:12:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santarcangelodiromagna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801883335151640156855174037247495163589674606060906823445344058342996105773865183858220670973205563651620877165306593823942850127133942902822981264380247788098103842022582932419566652195000479246983741872015836335244836982469160955573465068069942247766145544146236839645851922421132650767919220622695445312480988289472501439704969034585333081532061411994251910046277927849364205044784770826078191853882576814671776525362964932086605487872170921414836454300410569663358596848370566431990706715384338400465827083912784879863372225425988983081704263460658347274370352432361667793883903893557908023734857084213618937257475299092360329536531216833985640485080156722846856650888577760215280006047950505243503637442152857704421444491236393268100365313983468565096731876939774575684090747785543061082186006534796293249966108126992257324623597768143274795692368872159237977020273328105818435094498895545600189221974360085221189630520535547539501946083482523886918868302629056645645019015663527374657223307354263197115692084497703938332338524791284707950844297822904997698087606932351396111521220984918730858361902024878860659985421309578662848765057434287671657082311908238771736775616100891293529723070749142409824986641916505434094785931229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							271c43587feb7ec437f72dc4424eeb9866cb5712
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santarcangelodiromagna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7c81b6c700000403004730450221008873caae26a568803174af85eec17c5095642793120146878e8c37220a45272702204bfa52b80a4b168168a528ec93b261e647ff1f76303dac7c92c176dc4298fe5b00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7c81b6f4000004030046304402204ead3fec26dcf87499d238ee91a80a40dd58f28dff72dbf9c89f94d4e8962f630220554f798c697ba0c312cf8ba9830c7762cb592609b94747348db816b3e0cef93a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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