fazzolettini.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:95:ac:78:5d:ce:20:dc:c8:d1:c1:19:95:f5:21:35:b0:c0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fazzolettini.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:95:ac:78:5d:ce:20:dc:c8:d1:c1:19:95:f5:21:35:b0:c0Serial Number (int): 312268182659993865755250375123579360882880
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 50:5a:2a:f5:6c:40:fa:53:aa:3a:92:0b:37:de:2e:99:16:b5:7a:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6a:e6:ad:a7:a6:05:e5:d7:70:df:c6:34:93:28:42:d8:0a:fb:18:73
Fingerprint (sha256): ef:d2:0e:e2:52:0b:10:2f:8a:28:bf:b6:1e:fe:04:a0:d4:aa:cf:45:71:47:b5:46:13:1b:da:0a:36:9a:01:80
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fazzolettini.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fazzolettini.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fazzolettini.com
Other certificates including the domain name fazzolettini.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for fazzolettini.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISA5WseF3OINzI0cEZlfUhNbDAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcxNTE0NTlaFw0x OTEwMjUxNTE0NTlaMBsxGTAXBgNVBAMTEGZhenpvbGV0dGluaS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGpBRG9Bkj++NukFJ+CHxPXWuP7WdE 8KjT/k2/pIp7A0IDaS1koPs87wnclguplcXHZIBK/opg0aqiUy43nGU5NrVQdBJu Q5l/Duf1jXHQSn740S7CRD4mOZ7xE5cLkVE/PorBO42Im6vB8OvU7IUF68AUaJ1M CGbHJJ4oDYk/qsMH5CLvZ6HkMchn/q1SfDT+rbVEsmH35Sc/NxpMZPD5c8JruaHY VmLncgR/aHpod2kN16EIV8/aLOfqIm50uSrptGip84Kwzidblo8VQr98ALa0PO+j 7Dikd+Qv/x5bY9+DzG3mFHGacU2KthkooSJGRAC+fIAIs22AWickZ5wi1a9JWQmZ f/BVdbcwjV4Xr84w9vUn0yDKwmBE7k9HTfd/Yw6RCE4NMyTCd8eVVypT98DBvW+l +OinPq+8OG+Hl0+RK3kd1SEQuBq5Ku5Sieeoi1O9LTshDpM0Bf/poP6ZSqaAJnIQ sTdNjyWPB9mMqL4WuRp3g3HKmBB2ynaDGg/dIALbfoDGAv4H92Qpy8lkEYQ6W7dY Qrgy4WHFTbJ4o1x81AIzcwSMsA2vwX7BdLx/6Jzyq0pazFI4sw0EIqGZpZTyOjmw PLat+AYPaki3Fp4FxGOWCOX+8AXjm7N5M9SMKtqQ/WxdtpG3bLeuUvR9nWpBBxKH bJWSfGtBa1sHGQIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRQ Wir1bED6U6o6kgs33i6ZFrV6nTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGZhenpvbGV0dGluaS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWw0 NsPAAAAEAwBHMEUCIQDrFWfkYNTjH4HPKUnn+0WTaYTI4m8gRxSNzK2Dp7h38AIg ZTESZk4bxpMQPlwdbQjjiDmuJIIRzFf3JE+l/KK9cPgAdgBj8tvN6DvMLM8LcoQn V2szpI1hd4+9daY4scdoVEvYjQAAAWw0NsOOAAAEAwBHMEUCIQDTYIo4Lek8U/XU kNr9lDMi2ZdSqEP3uk4+XgOg5yeQGQIgM0jFmWn7R0ous7UVONwFVXNgFCxJi6GW Fr/6V/3kSWkwDQYJKoZIhvcNAQELBQADggEBAH8GqucOZlIlqPRpLbFh2dLLaY7s kE8/N6A/ND0+2+4Tv6Ti1H3//Mj7Zwt5Xc6+yAHN8xa39M/ZpY7cfzqaVP5UD7en H4VwwmE+imnRNgPfE9fjSsOqnUELlrcdQ5NdnPbd+n06V3ILMfeuFbSUZ9ZjNcU+ tdwZJ2NJwA2ON/381T2c8jYQrWDWRZBVWKs9MacAZXgHPG5GUnskTuKmYjvAQq6p z1rNOWVYxzfe1r/GXGj6LK0dFOHycAhtxS5jyFknItfjIiksN0VrlSzA0aacppad b9WFooCMUybP/HcpziSPSDxWhExc/R1loDYZuYTtV2k1hEU1cxByXAT4cC0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxqQURvQZI/vjbpBSfgh8 T11rj+1nRPCo0/5Nv6SKewNCA2ktZKD7PO8J3JYLqZXFx2SASv6KYNGqolMuN5xl OTa1UHQSbkOZfw7n9Y1x0Ep++NEuwkQ+Jjme8ROXC5FRPz6KwTuNiJurwfDr1OyF BevAFGidTAhmxySeKA2JP6rDB+Qi72eh5DHIZ/6tUnw0/q21RLJh9+UnPzcaTGTw +XPCa7mh2FZi53IEf2h6aHdpDdehCFfP2izn6iJudLkq6bRoqfOCsM4nW5aPFUK/ fAC2tDzvo+w4pHfkL/8eW2Pfg8xt5hRxmnFNirYZKKEiRkQAvnyACLNtgFonJGec ItWvSVkJmX/wVXW3MI1eF6/OMPb1J9MgysJgRO5PR033f2MOkQhODTMkwnfHlVcq U/fAwb1vpfjopz6vvDhvh5dPkSt5HdUhELgauSruUonnqItTvS07IQ6TNAX/6aD+ mUqmgCZyELE3TY8ljwfZjKi+Frkad4NxypgQdsp2gxoP3SAC236AxgL+B/dkKcvJ ZBGEOlu3WEK4MuFhxU2yeKNcfNQCM3MEjLANr8F+wXS8f+ic8qtKWsxSOLMNBCKh maWU8jo5sDy2rfgGD2pItxaeBcRjlgjl/vAF45uzeTPUjCrakP1sXbaRt2y3rlL0 fZ1qQQcSh2yVknxrQWtbBxkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312268182659993865755250375123579360882880 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 15:14:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 15:14:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fazzolettini.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810384309711088323161173190055485241384840294646802149090939536057397724932523448444578674785483988826088410554459916492247758901553996926327894342147884555002246175470658010017754423143074379805002691255598697047674563874871476179560713496782125182243057944522330290652239870012255720234773595764951564129024029178266076943388579516279544547742100259283073665678472777480159430964531636408748523980803678212343504324815022399401768382170946330021053384513212155016784764775298178036846892622449547948918914997451572211524463452968549598417857076044402100886670448075433313464464137646171648845156254840947952186567320432522023052087714584999363976417451409353708737513035969187956203621316242047668437045690262803459214990684226461094868613689915302374434614944512633558478066188121386920407325089582578013927971053959411554571563394689327554141121534236697261542647329446562372206470089362757947140146921467576363779685695354298075635176343538512834474038460944977230009566592054965806383799665711287476117072685992789442486473419670981954443061546214689642319553229139109849321539337128994415561279750695167290494723811068987038002167619814953812257536318959928713279886128641857334108933130243590053604221682053412007184959211289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 505a2af56c40fa53aa3a920b37de2e9916b57a9d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazzolettini.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c3436c3c00000040300473045022100eb1567e460d4e31f81cf2949e7fb45936984c8e26f2047148dccad83a7b877f00220653112664e1bc693103e5c1d6d08e38839ae248211cc57f7244fa5fca2bd70f800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3436c38e0000040300473045022100d3608a382de93c53f5d490dafd943322d99752a843f7ba4e3e5e03a0e727901902203348c59969fb474a2eb3b51538dc05557360142c498ba19616bffa57fde44969 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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