www.mantovane.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:10:c9:60:27:2e:a1:2d:93:aa:f1:a0:a0:8c:50:cf:40 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mantovane.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:10:c9:60:27:2e:a1:2d:93:aa:f1:a0:a0:8c:50:cf:40
Serial Number (int): 319887738155498931261247817133168165703488
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:5e:c3:0c:b2:b2:fa:08:c4:ac:1a:2a:5d:b7:a9:dc:82:de:15:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:62:d6:e5:48:4d:07:1e:47:8f:59:6f:0a:2f:a5:89:ee:ae:7a:86
Fingerprint (sha256): f2:37:64:57:54:04:eb:89:f3:41:db:99:3c:52:34:18:78:f8:f9:cc:ec:95:70:1d:d4:9d:c0:2f:15:1f:50:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mantovane.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mantovane.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mantovane.com

Other certificates including the domain name mantovane.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mantovane.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319887738155498931261247817133168165703488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 00:10:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 00:10:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mantovane.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880604596749606587522443619205825759735825991379553458813891018736007264642344736924064434103187999805206197134207757973008490037130535866645830953834955566416065679456626982613220904364289186345041441159709441407917226003301600546008363070139331737945377807076612094690721769122583092379167404366925030193633940341079840198538999782711093564200609510076553327366423329319979064449095533453102872002961765176083933781686952115806926695012415315197858047444666815829002957465006587484978706303269317604434764267983815658531053470516008323688003024894929078277040554799881418993083416963690280093968117185721889515284534237828902293593000293502620785554601933763792829444877719676781989608451251152820722191651483487611951092048628071124551114112216016311247573861547593293206157453274264324455825964501848613789165221930556417313487319123986902080475372686101239527348308432642111222777982760800171190838847110037232565868815264727845901905761598240493480162381614005210241562450977520534165383104114726678038338852433745721818721745142427423509841637016554193915232116783554656439501742997258019374014209514965705981986011842097703079192106618839239265973422321051460383943266433086832940120701126422426951554503223208697102378586101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							805ec30cb2b2fa08c4ac1a2a5db7a9dc82de1548
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mantovane.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f3574711d0000040300473045022100ea4c7f2f73174e2ea5510b95598b8fa81095f8422815b5cd9f8d47ba4397063f0220706d26344ac1da9668708a03cdb27b0652d7a7e0d4cba397c49e27f89aae90d700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f357471690000040300473045022100dfd1b78f056a7f68c6871d32073362cc8a16ec4ec7a1772831578b472b19669b022035236a10bd879411ede188386d8a6ae564196b75537a43c7d3103c4b6922ba63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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