pastalunga.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1f:1a:d0:de:ae:d7:ff:1d:7a:3f:9a:62:e8:3c:08:ae:85 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pastalunga.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:1a:d0:de:ae:d7:ff:1d:7a:3f:9a:62:e8:3c:08:ae:85
Serial Number (int): 359033541543774541991254577809633699212933
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:c3:ba:25:91:8e:d8:44:a1:75:23:5e:b4:34:4e:51:e3:d5:cf:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:c8:be:71:88:d9:f6:f5:f4:0c:f8:f5:c0:18:bc:05:3c:7a:56:94
Fingerprint (sha256): f2:94:06:3b:04:45:2e:ae:32:9c:f6:a2:2e:5a:82:46:77:ff:6b:cb:c5:78:1d:4d:ee:d0:0b:de:ea:6b:86:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pastalunga.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pastalunga.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pastalunga.com

Other certificates including the domain name pastalunga.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for pastalunga.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8O1uEIBr8dRI0kaKIK7s
wA2g9Tc3+kK4NjGGUADCvBQZhRfy1JZCGN3zNF3V8J8cPBR9jl0aoEyzCxFpe7fj
LjLCVEXZOfah2N8+m2qBqcU3A7YviNi9llkcXV3tJjHrW99IOF45eUtahu6Frzk5
kxxbgBFHglLGU4bu85AbfcTyyYKC2ZNzYoFZMPWqfJOS/HV3+HduLsqTDtEYQ1dC
8/9hophKTCIApvEwAdwiz5OE9s/q8R2ib6kKEYvpaurFKjEZlYTcXz97ZXmZRLwR
2AvI29mVKSBqIe6NErFw59PGkXgnV9SMRLFvqLXN4Q7vnSGUazAdSC61NowXdYUt
p/BubjNNt8f+xivj4/xyC6lF6Gv5pYxIuRNnjk7ut5JQu2Bn8rflfEzUFtW+5C8E
2zpOSKFpb31hgQPtdKUXNrY//LRu3gtj8aym5rUN7D15sCt5eeJg398x6KJmURUc
XfpiF6e+EMY7wE+LQufIY0Jh5sZo8igKcdcmh2UtxNmcbs3ZfciUGbO1ntRwXDB6
ljGfp50LmQ5y9ZvdVAM6+DbHlBOZFwBhO2M4l2WvTtfpzDrRl4KTNXy+134eHdqu
QrCYeQZ8LiY3uNSaXtWDa/19WgmsYTlnmQrLdmr4k439RUVNzTRZFWykA7kRNriQ
tZP1D8Nk2xnuZ2wrMkh+YjcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359033541543774541991254577809633699212933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 23:37:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-24 23:37:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pastalunga.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982898285869423627928284671824722847092476575241746713625711215970167135057814403568839202134605119195216882219983593396643722111228245194920411676443136786047464232494697372234074507293497040296526192540242934313350067419686064913522291516178047556371533378636267468422993188837191452018558693825637234153226129138016310558360458463760624481538872811108355086303932544016324153550802946371242101324997992452275102166401136086385413920088605854621479390711217637127395325441070788450584441303051241129328434914287382896544224216089556625530156334384662402649608281729256971348748764425937757120600873376023523533431663624295489342521723311295155534594444965063604581154247667945672650970299996933235935704472736111670167376197131248484692473878876965826207137388381289864689392111810181660430892808773428641897674952364224029019593571720849214113087331456148040946139625221820280667314827150033498018688099393912961353990284632032934149934145694763209625550849435399082154897926965644284576527413375675384629992161554946192971684478358415954624323737154435050560163896920130246803767860819641664351896843943684845781798625707876619310056536486414154083453648813483061371026411320463565082777444130250860000379512404865449037773300279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17c3ba25918ed844a175235eb4344e51e3d5cf28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastalunga.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017079c6c5800000040300473045022100de1cc6fdeb89eb36243d52ea387d34a0a25095cffd82addb62f3fdb2295b0d7c022051e0d5cc20524b8ff3faf72d83af357e81cfde54c09b7a298af2a42071dd93b8007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017079c6c5730000040300483046022100b5aaed664ce32d191d175082867f773376849726b40a3ae5a4299853cdc3b3c40221009f42457e96754514d7a602fae3ed6f12d3aea007d509408267335cf990f45f7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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