miggiano.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:33:44:e6:82:65:52:53:17:19:48:53:32:0d:fb:d5:b6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=miggiano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c7:33:44:e6:82:65:52:53:17:19:48:53:32:0d:fb:d5:b6
Serial Number (int): 416233483123564379370534219758838837138870
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:8d:0c:6a:27:a6:25:1e:ba:b2:11:5b:9d:6d:c2:f0:32:1f:4c:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:f7:5e:b2:65:85:30:12:01:d5:a0:4f:82:a8:d4:92:3e:83:8e:b7
Fingerprint (sha256): ef:ad:25:1e:ee:c3:bc:ce:1e:0c:42:86:ef:04:28:2d:65:39:25:00:c7:4c:46:15:20:cd:e7:3b:52:8b:47:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate miggiano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for miggiano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

miggiano.org

Other certificates including the domain name miggiano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for miggiano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISBMczROaCZVJTFxlIUzIN+9W2MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTcyMjA5MjZaFw0yNDAzMTYyMjA5MjVaMBcxFTATBgNVBAMT
DG1pZ2dpYW5vLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKy7
HawAYPT8+kBS2d7TiYd6LMjbqix4i63i4IIIT86JIu9Pu6CEOByIUWzc1hKd2f0J
imcGE4QYc9ucOc/zRqOVKLu7kEQJH9so2bMHPne1e/Ndwaw9EDZh0ZyFrTKCWMpM
+XRGH+CbdZ8HOqtnM2eptSScy5sBKgnbql4lpSpyyxkspi1VGgi+kn/K4RtuGOwF
JxQIbUrQRXsvFb5LmN2PlAIcTOz96P1HFQ0wpesh8vE0shMYVUI75EbcND0IaKxf
jKAKHgTNTgdLR/JO9O4nYyBqz2WxQPtc3hzgHVEy9OCj6ZDNpoNZmGwTWzD0vF9C
bNLpLcgEYZJ360N7LJ6Qd0oxJ+E7hCtI01fNOrFPkuv8z/83RKxyBD04AzDTB4Yu
SAI0U6XfNqYuy1tPLDZcSedWUD7Fbfrw6QwbKdqndzqoHSBSjh67mhwlCzvyNg00
+H3bDx7LEM36qw52D6gJ3GLlOJsu1GbTo/w1XOF/sk/8FLMw0LcoRW0i5TS8q9hi
Kkn2VThHPyBWw+vclPWy9oVXbmrgWaXBVlN4ijNX+lwzDFcC3W4Sz60o50G4Klde
TbDQZkpJs/SliDnX3qVOL98lk4Qy56kClXO11g1OC6caIH6v3jWmYmKbTUXmsDPv
EnSTuNhBHoxO+hxOXisMbQrAuZ8vHwq709UH1lsJAgMBAAGjggIPMIICCzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFECNDGonpiUeurIRW51twvAyH0xrMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDG1pZ2dpYW5vLm9yZzATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ADtTd3U+LbmA
ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjHoKockAAAQDAEcwRQIgY04nWW5h
bNRlCpUUyyRHwuQxtmP0vFGbgqcArPtZbuQCIQDQ9fZawwpKytPsgt3AhOKcvZdZ
LuKe1moJUB6B/rgvcAB3AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfY
AAABjHoKodUAAAQDAEgwRgIhAPwem5oeM34rho8enZvEH3Fm5fa9w2sspPmw4U5x
o5XDAiEAxNzuQU7JUf1XcumeF0jh3aHlH+zOewrUUyYC526R6c0wDQYJKoZIhvcN
AQELBQADggEBACSWNQuSDKB5rEc3sQ9WvbHjVF2FALScFFSN9vwcIX10N/QTguOQ
zALgAMZcKwaR7AKvN3uw0oaovCeBpp/m18V5aAJaZAe8OxbK4BViZe75F99E2gDx
ZM5jbKHYrwulrsxzoZg/rr2HgOJCedD/q97Hpv4PL1j9j7iSeSfQj5aVf3MJbMww
5aeSUzkvyMQUHVvrtm6sCIRbIS7adJvwk05vadEHP3Ms78YW0POOcoYYNayC2/MI
aiGXhD3TeW9OguI8xgIi7ey2w+RslH3w/13QwoutpScsts136sufwlhdpC6rjLEp
Gm3jQ4p1V3rCizN+l41D3WR25ut/aqUx5lE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416233483123564379370534219758838837138870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 22:09:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 22:09:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'miggiano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704680679289559907450981874696846269781822479042452207248091375638457471339005566809312552872564886675439725431842022208233179487237945104693971866382933614631632662925972144028588532495346399957668598990399205742825136227252370496626266040575959648001566529673012209945879923904192983114844743778350265710657628378182413966924473710214608363282793440953214999730414068833825749271257190807640626538220195794657757003970138110767348750164682609058478043043573690435935838411314749206251163301010824233502598569194832665036672387248453985562615909510660582618407845329612187980087509851460556186216469770162903962293871649846822598008762125616309590445369823410623038036421106526984231639876092009017373344807943988926166791784673594181014912678812205553049809844559623499991652881443882519670596259494490438075449699034046080253207251885150871152894743415123794647169073256353252329198310906251372499407874936022736487941826491837224100378473367597753569809400597660288526365606265943070310063684653404378337485128725554257011972695755042135784407574316910418498091066921935772627208753594774686830804195149097273142077034015183159492368413556215297156439925311534729165845583909439155861486239404465321868451555034291766635942796041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							408d0c6a27a6251ebab2115b9d6dc2f0321f4c6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miggiano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7a0aa1c900000403004730450220634e27596e616cd4650a9514cb2447c2e431b663f4bc519b82a700acfb596ee4022100d0f5f65ac30a4acad3ec82ddc084e29cbd97592ee29ed66a09501e81feb82f70007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c7a0aa1d50000040300483046022100fc1e9b9a1e337e2b868f1e9d9bc41f7166e5f6bdc36b2ca4f9b0e14e71a395c3022100c4dcee414ec951fd5772e99e1748e1dda1e51fecce7b0ad4532602e76e91e9cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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