santangelolodigiano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:5c:39:fc:bd:cd:a0:61:b5:fb:b6:d7:9e:52:cd:ff:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=santangelolodigiano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:5c:39:fc:bd:cd:a0:61:b5:fb:b6:d7:9e:52:cd:ff:c0
Serial Number (int): 266563683361832946789292262263876020469696
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:24:bb:b3:eb:74:ef:2f:2b:79:f9:d6:24:41:55:d0:22:81:32:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:6f:7c:3e:7e:29:bc:ae:a9:38:7b:de:c6:21:39:f0:56:e9:13:20
Fingerprint (sha256): f9:5e:40:22:b6:8b:42:98:d9:6c:5a:23:c9:91:d2:31:ba:9e:00:a9:ec:50:fa:08:e5:06:31:e0:11:7b:10:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate santangelolodigiano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santangelolodigiano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

santangelolodigiano.org

Other certificates including the domain name santangelolodigiano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for santangelolodigiano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266563683361832946789292262263876020469696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:57:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:57:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santangelolodigiano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939046568409865460050963449797241136175244163763003253291769996249883350042470634623668202730571733788830047696802659636686618311115207684650492719505859592577704372429465479864914539090653068484319670106804052708016148359017627391409193070986769636160399622438788214090080637420838686456163684682785803135549255086996395641497538856365249697016858958005133319130433157726352734857641545666643555456930816155120055071174291396800846129108593559731755908633323395848224403544870743936329589864717923820353453528676560858815571603587967315605752944256427630463398946869403102059600399504141559182671051604972115398961557614587507537105997005097051589212976934002155612413275448014322811558327447196382223342395239810010832388900728181495084609420094054420294367570922037781524950351943630840216683225931482401337804459674340413258116061650657658606802699466877480809203135456261543661717868781982260641714154555694925309868223937134544849489373226957976470474072301188000073565321262042149430791118429631163210351999394104755021088794716171827156506734808635920055289412786019650077313507410249596640389483300718921194069063766183889108627073864382561486777815187264782336573947029615087730539687392841022682122525404288518348900005987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5124bbb3eb74ef2f2b79f9d6244155d022813262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santangelolodigiano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3b3b4e730000040300473045022077978e753f55cbbcdfd056c66a902c61e35c457d68a44819b04ee360eee3864e022100b3bd2d02b98c1ce0d6e871492b1d442268e434906c846c7620fe9ea7d0257802007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b3b4e920000040300473045022100965bd167d6fc308fc8b0487adeb90de6be7429e6d3f7e3f2201b6e8af65282ea0220483d4dd404a3d7e4e32d596e5d0f3d64351a5fe9d7131f04f4d4115bcb892cce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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