lomazzo.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:16:66:f7:22:34:c4:47:a6:f1:ba:54:bf:72:df:fc:92 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lomazzo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:16:66:f7:22:34:c4:47:a6:f1:ba:54:bf:72:df:fc:92
Serial Number (int): 271234824078640054217718090720785152867474
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:d8:b6:fc:64:d0:7d:54:78:1a:5d:be:3d:62:d2:1e:7b:20:80:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:1b:43:f2:27:c1:9c:99:9b:c4:29:0e:79:4e:28:8c:ab:42:4b:9e
Fingerprint (sha256): f2:5d:45:7f:15:a7:ff:48:08:ab:4f:73:b2:7c:f9:89:77:dd:38:21:ef:e7:bc:47:1c:71:dc:84:d5:55:d8:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lomazzo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lomazzo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lomazzo.org

Other certificates including the domain name lomazzo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lomazzo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271234824078640054217718090720785152867474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 06:44:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 06:44:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lomazzo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889345102089320136660441891527812311591593856667073629540490547174280066862947598347542792469480662173113802073172576157446084453346369001629738342781483357577296819763404131012415490491766265912454026282336394054623303534000081687653144536700249253921179965594542627280625762038333564829569156792745794468135293689540028087807558774387804076462731910308280797093183415850341045907839636721038559451473547566790631165012611330786207052156540993667902360191934322874076154853078274498193655909795866928124040043125323934676575541438953587795366085325682513448173809302678869367874976936437709210223465713467910769521963439937078015512670509125380762701117117002042074818221118336753453437422466681772169658845377756926772899019556966292407890956258559543095537230077042428639468514907737438045638101913474506179297282268030637163581391745922938823283614593329021621533225888931432367790581817962055796681187437017168371817287631295382006302854878434781386731990335177608694632336229266705508535750219070645776324716290361452468798555970314240636528657608928421377232639752169654494514198402390380111106777153150531831890393327742073597111398421062258059182133533256606614333445661180143971051763185588885193671931503922267687676858011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4d8b6fc64d07d54781a5dbe3d62d21e7b208068
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lomazzo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017004dbb9df0000040300463044022064b2fbbef4456dd2655e1e6344e7ef792844c34136fc205befb28dea2f79fa82022006e40274a7fef926e221cc4991c58d2d1440f9c7f3ffca16f2b8dd3a4d4758d40077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017004dbba190000040300483046022100f6476bf3c71a0bcbe2a186629032480064a1633c8d187a9e7c211c48f0e68d63022100e62cc3cc16106c9db81118eaa8511d9115a15f48b9769a68d6817efe85d8340b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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