correzzola.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:28:a1:c8:4d:51:c0:93:85:bc:02:54:e3:ee:83:44:be:ad was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=correzzola.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:28:a1:c8:4d:51:c0:93:85:bc:02:54:e3:ee:83:44:be:adSerial Number (int): 275163198207033977009828015550758815841965
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 06:86:83:ef:2b:ab:cf:93:f2:f6:a6:f4:9b:6e:31:e2:a0:a5:5d:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b4:27:ae:1a:83:ae:71:99:ab:f3:1b:30:be:2f:eb:8a:d0:b6:ec:98
Fingerprint (sha256): f6:06:71:ff:e3:30:eb:23:72:64:85:53:30:c8:b7:3e:49:d4:8e:24:34:9b:d4:86:8b:b8:5d:4f:aa:20:39:c0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate correzzola.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for correzzola.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
correzzola.net
Other certificates including the domain name correzzola.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for correzzola.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISAyihyE1RwJOFvAJU4+6DRL6tMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjcwNjU1MjFaFw0x OTA4MjUwNjU1MjFaMBkxFzAVBgNVBAMTDmNvcnJlenpvbGEubmV0MIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2v/XLs0VM4+depezF6Wd+5H2ttZpiBLG OOGpmB7eU8OFBrOp5VBlpJ9qIKzY7p4S3Ucdz0prOEp8G+biLftDLewxF8pyVFUK Sl9Q3sFmCJBsX3S5NiUMFGlikrWth9GxguMNb59jbYlTusg8g4rZPzeBqwyy/+Qn U4h+0OMK8sNQwO446N57jKfzF4esGdfpizM5m/k/kmvDLocf1z3Kxj4L1KVMgWZy 3OQ76KyvYGU6NAzzDUa9805/qYDUsimZE1okdtgCcahB1RsmKL6Ptc1WQujLU1pi BqsOrXorqKpmuPJ21VwQGRUN8qbGwnG3KycE+Ju0KU/W/peQvds09TYr3zo06+nm tCt19Q/1qfDGsTY/aYwWEQak/TJdMMp1TxVM0ssrutehnR/vMmoqD1Pj4XPWzvXX MH1Q6Fc/IJN8loqeCG7faGpZZLXQzch8CepzJG1s6d9GXpkjbfymT/q0EdWKcNKR KOhsyHD88BiT4HdhX9QvUHMrj3eTTSeYsNoTpMCt7HZKsfyZxhKPLzpdPuroM3Xt u6I4qCczLNBvCBMykM0q4ElmfqvHBya/V8GS8srWSXnzqGNgA+6v44EyAjc/CMDq 7fEvs3/50Y9TuE9K5M7/KqIa+zwuV4ZffVpsA/C8SJoSsAweOTojCn+DibPQLAOF xbHBR4BcVe8CAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBoaD 7yurz5Py9qb0m24x4qClXaYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5jb3JyZXp6b2xhLm5ldDBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABavhJZ9wA AAQDAEcwRQIhAK78MypazT4L8PViWzXSsAU4UUKejvluxU9uCd4pkG3LAiBHxehi Ah7kYS8b0/HEcxZCkB3+KucEp5y6F7jmQcmOxAB2AGPy283oO8wszwtyhCdXazOk jWF3j711pjixx2hUS9iNAAABavhJZ/0AAAQDAEcwRQIgJ0f5YB36vJNLK/TUdPHK M8aqr58HJxVZvAaHU6EYEKoCIQD1wH0fOLUgabUejRQ/UxGPjMYL6xbERuqaadax 3bgFmjANBgkqhkiG9w0BAQsFAAOCAQEAlLu7xQ9QLqWajz8eW/pTocv2rKtyIPlV FRvZRXM8xfIe/Moh42oMvlGqwDNMY0fdetxYVjbj9SzIhMiUa9EkOhbFN0opmU2H qve/HuGf1GhfYo8wxQZxSAmL3aXVvlobd9G3r136X28YOEVKB2QW7Rn1/IHFNZr6 /9HJPyjs0NobjDRIvDe9uOCR4aeGXy+eGxNuYde+n683zPCF8yY2EiPVmrvT0TvO GpIp6oWkffSpyoT7J9rMajlvMYuS3wa2cq5ezMNbAvPGwvnWlg5oj34njv+IZlpx Me07RzgkpuIII7p7is94KDYdmr1yGHhcrNjyBEGG02z/2mFYCBDt5w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2v/XLs0VM4+depezF6Wd +5H2ttZpiBLGOOGpmB7eU8OFBrOp5VBlpJ9qIKzY7p4S3Ucdz0prOEp8G+biLftD LewxF8pyVFUKSl9Q3sFmCJBsX3S5NiUMFGlikrWth9GxguMNb59jbYlTusg8g4rZ PzeBqwyy/+QnU4h+0OMK8sNQwO446N57jKfzF4esGdfpizM5m/k/kmvDLocf1z3K xj4L1KVMgWZy3OQ76KyvYGU6NAzzDUa9805/qYDUsimZE1okdtgCcahB1RsmKL6P tc1WQujLU1piBqsOrXorqKpmuPJ21VwQGRUN8qbGwnG3KycE+Ju0KU/W/peQvds0 9TYr3zo06+nmtCt19Q/1qfDGsTY/aYwWEQak/TJdMMp1TxVM0ssrutehnR/vMmoq D1Pj4XPWzvXXMH1Q6Fc/IJN8loqeCG7faGpZZLXQzch8CepzJG1s6d9GXpkjbfym T/q0EdWKcNKRKOhsyHD88BiT4HdhX9QvUHMrj3eTTSeYsNoTpMCt7HZKsfyZxhKP LzpdPuroM3Xtu6I4qCczLNBvCBMykM0q4ElmfqvHBya/V8GS8srWSXnzqGNgA+6v 44EyAjc/CMDq7fEvs3/50Y9TuE9K5M7/KqIa+zwuV4ZffVpsA/C8SJoSsAweOToj Cn+DibPQLAOFxbHBR4BcVe8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275163198207033977009828015550758815841965 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 06:55:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 06:55:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'correzzola.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893439510009273224442098092568937692358341237393861050848411090679854756113976676248747834979562447854647757635586464309174608748945777021445839340633924521831319274956266684882171610482833895749463818402788583119234847926283844177864086179795330118599743241059498462573353395224428556050097886762442335835821152451857110859616739904193280458701073640887150284249736526272921389341187515149193969668260703688421399642159289008453090857552738559352843780813924934598186114358814846364805529961336862106811113833620596019674845820622968213036792959482276017984443293364450730504795288275553526033491219081732793705215881626138322735997197492449135708744063590520142127410581785987836143895382459603432395652380328815977992590672124329854337406621276346522526703948815574033581420225323386571987034211674679132471868250522224933366075566798263949606969487765088343812942778352206297883268417849235635729999994906355524903764862964015146673327079310339355898166842959187405637790154431916738891932447512068644351658527408121884164521519857392669499793406265346132737267531120857552910050727748606899733938872099208157497936676292676486631179715377594171007807108045067417253226066826238361528037533037612274695445096105526629275379979759 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 068683ef2babcf93f2f6a6f49b6e31e2a0a55da6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correzzola.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af84967dc0000040300473045022100aefc332a5acd3e0bf0f5625b35d2b0053851429e8ef96ec54f6e09de29906dcb022047c5e862021ee4612f1bd3f1c4731642901dfe2ae704a79cba17b8e641c98ec400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af84967fd000004030047304502202747f9601dfabc934b2bf4d474f1ca33c6aaaf9f07271559bc068753a11810aa022100f5c07d1f38b52069b51e8d143f53118f8cc60beb16c446ea9a69d6b1ddb8059a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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