www.prestitibanca.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a5:24:0b:47:8d:ee:af:8a:32:00:11:b5:25:a0:e1:76:89 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.prestitibanca.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a5:24:0b:47:8d:ee:af:8a:32:00:11:b5:25:a0:e1:76:89Serial Number (int): 317531359111645409686601660834820403590793
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 62:3a:78:02:2e:e4:44:31:8f:57:23:5e:e0:ba:6e:28:66:8a:18:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 54:b6:5d:d2:0e:51:71:e7:86:fb:8f:1a:08:91:37:15:09:33:6d:81
Fingerprint (sha256): f8:39:e8:57:16:00:1d:e7:76:ba:cf:bd:be:e3:ff:48:60:61:a6:2a:09:57:0b:25:5a:0d:8a:6d:49:d3:1b:39
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.prestitibanca.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.prestitibanca.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.prestitibanca.com
Other certificates including the domain name prestitibanca.com
(limited to 100 certificates)
www.pax80.com
www.prestitibanca.com
www.prestitibanca.com
www.prestitibanca.com
prestitibanca.com
prestitibanca.com
freshaf.coffee
prestitibanca.com
prestitibanca.com
www.trendys.com
prestitibanca.com
prestitibanca.com
prestitibanca.com
www.prestitibanca.com
www.prestitibanca.com
prestitibanca.com
www.prestitibanca.com
prestitibanca.com
www.prestitibanca.com
www.prestitibanca.com
www.prestitibanca.com
www.prestitibanca.com
prestitibanca.com
prestitibanca.com
freshaf.coffee
prestitibanca.com
prestitibanca.com
www.trendys.com
prestitibanca.com
prestitibanca.com
prestitibanca.com
www.prestitibanca.com
www.prestitibanca.com
prestitibanca.com
www.prestitibanca.com
prestitibanca.com
www.prestitibanca.com
Certificate
The complete raw certificate details for www.prestitibanca.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA6UkC0eN7q+KMgARtSWg4XaJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTQwODA0MzFaFw0y MDA0MTMwODA0MzFaMCAxHjAcBgNVBAMTFXd3dy5wcmVzdGl0aWJhbmNhLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKU500gsnYeenUmMT5qOTWk4 vVa3V3Z6jEngiBidcd97r3l2HtFVnmFYJcn5SFiNvLoOE6Raf0ECEe2ljNK7CV5V /suO8FuBJ6BKh/6GWL7GPFqsxFirLzPBDzmunvmiCR7rRiaFDbmbzkp7K7JsvZ8U EhGyqZrG1Hxd0iDu4HkIayyu+3+NOgTG94nv5RZ2YzN7+Z2lB+OcXQOBHnSZLpbs cm9l1/twoBBWuuEC0MP/I75VaZqfiX7hfHATY0zerUf47YBCzmBh3Y1fjzY3yaID ISV3EkpcIquDf9iXuhJ9pvEhzAYrDm5epA8aj4y4ftv0CXqt5u1XZp+x3Yv6oWbu 2WXxaxwd2v0XhAUfjQbIc/0c0nwRml39E6jd8tD6j1VYlal2Yth5hQ8b01R1wArx L8Q94KNFv18Whij/PWvzll9UZI64eeDcemn6vcZ86JTfhZFAOs5N3gdkpvmgP34S FQKVYOgovNOe8qqOXm7uBUMgX9HdAhS5OrBMIzfSinNwKRyytSF9H5Q7wRr0VKdd UKxqHkSKjqKOQTi2NqhZ4amJ9F++5tXMaN51mBucJeOVPR2DzYWHlhwdBApG34Rr R1Gsi3OBtY2FC6S88z2OA6Y+QVoL7WkJGm8ln29bNZO7y3PlYwmUEWGf+BOlyCqe DrAkoIjEfdPAGFNTfojrAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFGI6eAIu5EQxj1cjXuC6bihmihihMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LnByZXN0 aXRpYmFuY2EuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFvo0wb2AAABAMARzBFAiEA3gjnutUzUu5rAGUE+XfvC4mLG/4IUO0O ScaB4eeasNwCIHGpe5tOCjpuDJFewuoyCQSLHA2lNkTD7bK3FKMA8SvCAHcAsh4F zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvo0wdUAAABAMASDBGAiEA +gbZeb6JLL9uOYemf9WczBFO+gE1gJ5aJkUZLx1PAjACIQCMPuZpiSdC20UGH/AZ GWJRLpzKYd4QRvYHjEeRrrB4iTANBgkqhkiG9w0BAQsFAAOCAQEAK7upAKmo2pqP Emn4B9TTyZUszA0znUQe5NlvRWoLkdavr4rKJE1j+HJHV8h4tJkXXHufLGeaOSH1 tN23kRzu0TFj2ncWWGLZwNjjs0h5gvTYHD3nflqy7aWCib7ethwZlPaumOmBb0Hj 520g/z3tIDxv3cVdwcDbkcLXgymw/4X4rtOtfNDGX8il9DKE9n5hLyMeVgm3viuJ kyvCUESatdJGNOfKVxTYn8VV3AUbh285M+9n4h+meowjjkXIR0wxGx4FmfQAq9PS j1j3m+o7tpavi2IK68QHxfzxVXsiSqi1qaLbP/ctgt5iu2iTzjMgs5yPbX/TR6H9 2DIBdKDoRQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApTnTSCydh56dSYxPmo5N aTi9VrdXdnqMSeCIGJ1x33uveXYe0VWeYVglyflIWI28ug4TpFp/QQIR7aWM0rsJ XlX+y47wW4EnoEqH/oZYvsY8WqzEWKsvM8EPOa6e+aIJHutGJoUNuZvOSnsrsmy9 nxQSEbKpmsbUfF3SIO7geQhrLK77f406BMb3ie/lFnZjM3v5naUH45xdA4EedJku luxyb2XX+3CgEFa64QLQw/8jvlVpmp+JfuF8cBNjTN6tR/jtgELOYGHdjV+PNjfJ ogMhJXcSSlwiq4N/2Je6En2m8SHMBisObl6kDxqPjLh+2/QJeq3m7Vdmn7Hdi/qh Zu7ZZfFrHB3a/ReEBR+NBshz/RzSfBGaXf0TqN3y0PqPVViVqXZi2HmFDxvTVHXA CvEvxD3go0W/XxaGKP89a/OWX1Rkjrh54Nx6afq9xnzolN+FkUA6zk3eB2Sm+aA/ fhIVApVg6Ci8057yqo5ebu4FQyBf0d0CFLk6sEwjN9KKc3ApHLK1IX0flDvBGvRU p11QrGoeRIqOoo5BOLY2qFnhqYn0X77m1cxo3nWYG5wl45U9HYPNhYeWHB0ECkbf hGtHUayLc4G1jYULpLzzPY4Dpj5BWgvtaQkabyWfb1s1k7vLc+VjCZQRYZ/4E6XI Kp4OsCSgiMR908AYU1N+iOsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317531359111645409686601660834820403590793 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 08:04:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 08:04:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.prestitibanca.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674062781863520548071554774050870169118168744772868665778360890535756146751200694040234694125493885139675055733419244695419042795370759791762371311892877642842764619905068642737465860581799434470253357732075603828770277423309042491208657713263592557165239826995212121640040908542955783288490880990105268215818732858547395631906849909047064564889986111617748909761015515943223399458966540651747838171051630991655896920176775995986630096012964261080684868169261706040752311681020545759587728403310562662950673463677415448603960962744628906407387657610737772734450062528107464614882880823764800019033155522237791808717491241440083512835510673312571874699989409512614981092495923672933505059577233946045538945131785548750719431222871137364611406213404550767359062273441634800200648125477776120252445576086093081905555370485708818205179391458055818719277617698832970588738287589267616928183198615538001793402874782442919846884867505997373808659547817842588875151215924060485563441144166448145312967297856158329540065255837060026455873181525434204518153778972638149018871480273472560550292376565797631417998813107627206015398473311305139911951280941296932907916517531506256986310429935459080029745235570943105594390125478879389276358740203 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 623a78022ee444318f57235ee0ba6e28668a18a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestitibanca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fa34c1bd80000040300473045022100de08e7bad53352ee6b006504f977ef0b898b1bfe0850ed0e49c681e1e79ab0dc022071a97b9b4e0a3a6e0c915ec2ea3209048b1c0da53644c3edb2b714a300f12bc2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fa34c1d500000040300483046022100fa06d979be892cbf6e3987a67fd59ccc114efa0135809e5a2645192f1d4f02300221008c3ee669892742db45061ff0191962512e9cca61de1046f6078c4791aeb07889 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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