castiglionemesserraimondo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:eb:d3:0d:29:3f:bf:56:71:43:84:3a:b1:0a:f5:e9:8d:39 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castiglionemesserraimondo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:d3:0d:29:3f:bf:56:71:43:84:3a:b1:0a:f5:e9:8d:39
Serial Number (int): 428696035397060687829816881899064378625337
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:59:fc:64:3f:fe:d9:e6:76:b5:6a:fc:bc:5c:d2:2d:9d:4b:9a:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:cf:54:11:dd:e9:8e:c0:f2:78:fe:a5:01:cb:1a:e9:5b:e1:57:e0
Fingerprint (sha256): f0:41:d5:76:ab:fd:58:31:2e:d0:cd:e2:10:7a:25:35:b5:a8:35:ec:37:46:2f:65:93:9d:e8:47:9a:65:e1:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castiglionemesserraimondo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castiglionemesserraimondo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castiglionemesserraimondo.com

Other certificates including the domain name castiglionemesserraimondo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for castiglionemesserraimondo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnkBlUC5AcaSPbaIpFuZY
S6N22FDWLIyOsELpHesjIaxPc46sWhJB7FLcYkv9/C3PqKSWCDcjElSQ8pAY9Mbz
xTxtfi9dKfFyJfXcLIL5Xx0JRj7JWAG4ZfxfiuBsyFbLGU/VDYHqQlD4r6ysnQbX
8sTQ6o7QHdsV0V2hZKu6+Uoav/ED2SzhQpxnJjr1lIF4hhHl2gjsZ++VU8U9SKwn
1st/YlegOCyBJn8jyiJCqXr+nLLbuSh7WQS1dBcvVLE1BxzYmjbXU1TYGB80Fzla
2D2Sayg/8drmRkz4ilSVWd4uByn8yj0PzGMOsOsWp95FwrC9nI0qtFF901VjI1Dx
73Wp8uCSeWAFIfYrSA3WJwg3ogsIYvgqTKVtqmcw0L31N6gwglbgxZaMLbt49RvU
UplaAGOObH+MP0vlzv3z0S31CI8vz6DWjL6eUoR8l11+aO7BeGdFdAhkUeav9oLy
71OWgwOpty7j3zNfAGk7RV7hjDznuTx92KrhH5/TEEaEa7JWqtWBVFxpZaUX+To1
5WtMz0iqzmjWbVMjBd7HB0WK7YGZ1nb2URc7GKwB3GMl+OSPPj1fEKu/RuxfWcRE
nhqVKIz8e84ued3a7vox4Qa6Ig8aKYQ9nJUtlhpXYBPm4UNQZptCJLha8HrJndAq
cNFpFwyEK/Pdqv8KbotrNOsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428696035397060687829816881899064378625337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 13:41:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 13:41:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castiglionemesserraimondo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645609980554633573819092701703642476974408768009391643753831492049092554115475465570149396886049651701625723162961670947061412556211662184737596494683172964463651439615448902390959923206387696541428746515668624634778423813685967122717192397919690618922356137785784116818006221940052006598489491638613081326103266722853525114377481228158864643241642571502530637729870149288562110374525652697009387743437255001020725175015586416715174455784219046537748935644627981846776311118312065730230890708995296321204581270140753926040525812334884382955669633520480390060934424536584703430326952547109170099673734249703656734213668142986267178563247018105019721396331244750167019587576404952987116561840632941627923540151671111279331229859792853827689522741102348471175318358982214249787138345688521775016145042920252945096181205864178851262424368631313779218861902208183181321424867104949180517472120609130735148713586756688278849844215067960285771921488312422375424529706914015215108118434157611139027508357998820613591299152718426470581303741371763872081972616015858593585629255645906062715754963755378813422351241990675196524577363705462677203679771148746947591691407746520211954723048170190366560350734218162955772702983170413897114924561643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0659fc643ffed9e676b56afcbc5cd22d9d4b9a31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castiglionemesserraimondo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017169b03e880000040300473045022100fe4579929a970a69372d8f2ba09fa9bee5812e3f7c1340348798e1c820a34962022042833fccbf07941881d5402a633b7bcefe0f57a92190bb461968d0c0e5ba60f400750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017169b03e8a00000403004630440220724e8d23972faad36ce0004f59b5fc401d7e48e3a957fee078e7a3902468ae6c02201058bea61a78c6e1bb4e3094331fe52e0c136043dec25d5e5da60faad32c81c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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