www.luoghidellacultura.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:64:d7:ca:63:de:d8:32:ca:b5:18:c0:2f:6c:b3:aa:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.luoghidellacultura.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:64:d7:ca:63:de:d8:32:ca:b5:18:c0:2f:6c:b3:aa:70
Serial Number (int): 294138008268053204074150761845652616096368
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:dd:0e:29:ab:5f:fc:bb:aa:8c:48:72:02:dc:b4:4d:08:33:7e:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:cb:ec:11:00:d8:c0:85:6a:9f:39:3f:7c:c4:91:b3:ef:fa:9c:56
Fingerprint (sha256): f4:b9:d8:f0:fd:06:1d:de:dc:ee:cd:13:08:d8:0e:c5:d0:da:42:1d:23:1f:b8:8e:fb:27:4a:0b:2e:e8:88:c4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.luoghidellacultura.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.luoghidellacultura.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.luoghidellacultura.com

Other certificates including the domain name luoghidellacultura.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.luoghidellacultura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294138008268053204074150761845652616096368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 18:43:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 18:43:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luoghidellacultura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791429326429135879768709597877089066571063602841524014291775377129403097354529095721049975590186001291622368549402789888733402005565863091139678807731855640073983572458801640175348285213023729590194981628362604398124781772870276385368967313129021521107420154990695314815145369053943906750099137421451847207061037623706211118533139388815108327312260114195549083034150522618776834533566736929802812908252816016873147010384450094473493160555655037944426211056923273122270174206449101582116718529426569117139809360522679115817252070467798052546292966658390349103030718089682949646983667013872796028845283150395017670193676278104962814200576951625096002321589925910030577031058639223416170770670591104942830962373725034480314369943669567998305943646627404067639594882582515773000438137979854231969889786431844934583284692776051861091224887265107177083289152703649081665968724247658542162209869098559268306477793181739607405591476624038078906682609477317740699853519197830657822754302523220249045117147198689269097311916648214661453885465235379254611841524888723815130716990690609162409099963228321222852457443826972528245463060623126871605214767546497843088040971805222278257529613589639748229712355289148554007409151223778619106904952271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47dd0e29ab5ffcbbaa8c487202dcb44d08337e77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luoghidellacultura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db20bd1680000040300463044022023f1e85e2c9ae0b944ecfe1112f7ca32c4ee3196a4ce4a28a3e01a06ddcc8fb2022006de8ea08ea8939749b4f6ad503725b20d7c443b2c8b072978f3121686d550540077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016db20bd2170000040300483046022100f91418b3b3951663d0b5abe5bbbbc39200f7f5caa80b6250601a7fce975c2ae1022100c132b6c343a4d5a92b37c3ae88154d36f7d7f5d4119540d8c6bc48958c154979
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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