correzzola.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:a1:c8:4d:51:c0:93:85:bc:02:54:e3:ee:83:44:be:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=correzzola.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:a1:c8:4d:51:c0:93:85:bc:02:54:e3:ee:83:44:be:ad
Serial Number (int): 275163198207033977009828015550758815841965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:86:83:ef:2b:ab:cf:93:f2:f6:a6:f4:9b:6e:31:e2:a0:a5:5d:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:27:ae:1a:83:ae:71:99:ab:f3:1b:30:be:2f:eb:8a:d0:b6:ec:98
Fingerprint (sha256): f6:06:71:ff:e3:30:eb:23:72:64:85:53:30:c8:b7:3e:49:d4:8e:24:34:9b:d4:86:8b:b8:5d:4f:aa:20:39:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate correzzola.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for correzzola.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

correzzola.net

Other certificates including the domain name correzzola.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for correzzola.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275163198207033977009828015550758815841965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 06:55:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 06:55:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'correzzola.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893439510009273224442098092568937692358341237393861050848411090679854756113976676248747834979562447854647757635586464309174608748945777021445839340633924521831319274956266684882171610482833895749463818402788583119234847926283844177864086179795330118599743241059498462573353395224428556050097886762442335835821152451857110859616739904193280458701073640887150284249736526272921389341187515149193969668260703688421399642159289008453090857552738559352843780813924934598186114358814846364805529961336862106811113833620596019674845820622968213036792959482276017984443293364450730504795288275553526033491219081732793705215881626138322735997197492449135708744063590520142127410581785987836143895382459603432395652380328815977992590672124329854337406621276346522526703948815574033581420225323386571987034211674679132471868250522224933366075566798263949606969487765088343812942778352206297883268417849235635729999994906355524903764862964015146673327079310339355898166842959187405637790154431916738891932447512068644351658527408121884164521519857392669499793406265346132737267531120857552910050727748606899733938872099208157497936676292676486631179715377594171007807108045067417253226066826238361528037533037612274695445096105526629275379979759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							068683ef2babcf93f2f6a6f49b6e31e2a0a55da6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correzzola.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af84967dc0000040300473045022100aefc332a5acd3e0bf0f5625b35d2b0053851429e8ef96ec54f6e09de29906dcb022047c5e862021ee4612f1bd3f1c4731642901dfe2ae704a79cba17b8e641c98ec400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af84967fd000004030047304502202747f9601dfabc934b2bf4d474f1ca33c6aaaf9f07271559bc068753a11810aa022100f5c07d1f38b52069b51e8d143f53118f8cc60beb16c446ea9a69d6b1ddb8059a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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