www.traversetolo.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:54:8c:09:36:c1:eb:4d:d5:2e:30:9b:67:43:72:70:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.traversetolo.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:54:8c:09:36:c1:eb:4d:d5:2e:30:9b:67:43:72:70:d0
Serial Number (int): 318616677698084551891563687700036517523664
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:47:12:54:88:12:87:b6:bb:60:ab:59:20:5b:c7:10:a8:e2:4c:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:01:bd:1b:ed:81:96:a6:a6:d4:fd:7c:d7:95:b4:c2:5b:85:80:a7
Fingerprint (sha256): f4:00:56:4a:63:b8:01:30:0d:e2:57:da:6b:37:3f:b4:26:d8:ad:5e:27:ba:19:a9:10:95:8d:52:f8:0d:2e:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.traversetolo.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.traversetolo.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.traversetolo.net

Other certificates including the domain name traversetolo.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.traversetolo.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318616677698084551891563687700036517523664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 08:50:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 08:50:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.traversetolo.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933954460904539714396100643261319873260112646717945752009862868976823948104541297836774956851850061522894449003661470821347081731302465331998896217356866206049650347444859425756403269651002869717931147872186635102514252758655325324015475328602960985998399609996642278949744781004728199518460259119000409076944315892404639642946501823533354773516561784928060735913249617408292911149205010498211272879210662032412315006563131017414785413999255541150867936802824608420138775102746448257294148980096379612086999875406592605775108547809313575077839992315919840106581968638087457011554468462685179466693448649676145753933712066315544551942822531572308470501546247132699360336272269450688057988718521675062105217661392004745123411947552209326504586898640897636247043532838270441544609702598814248260450546120615819749610892895402900190369578480449745644864146876678690336301803342760607848749153221120527066841091214735483418429090473596113035174173750679806366656574906622679051998325598269199150813352078006684717872552835126246511780224260826835919909494963864099579056103200526118983420989071575791146846427062983349776364461059809463568931197479803023329622186471244402018367346975309284632684592143296644039422867342225642333154340501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31471254881287b6bb60ab59205bc710a8e24cc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traversetolo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016af8b25f2d000004030047304502207cb0318706138cb80c89978b88c660e83dbaed12377018f6b7c31f3696f870de022100cd0764a9e2496e833a9e13e744fad911ba1e30ce9ad13caedc9afaa5090f377b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af8b25f4e0000040300473045022100d61053e8c3bf2f2e293b853c977ac53b534451cbe45bb4abda54aaa96937b93a0220142b6f6ff115628eb58aed0bd549b78e324a3965f8ccc5af76ea200fa49b9d83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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