recordati.com

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 55:92:43:e8:d6:10:8e:b7:ff:ce:4a:54:55:d0:6c:c9 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=recordati.com

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 55:92:43:e8:d6:10:8e:b7:ff:ce:4a:54:55:d0:6c:c9
Serial Number (int): 113743832351690890886942942559246249161
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: da:b8:90:fe:53:45:bf:ff:e2:de:a4:ec:53:1b:57:69:48:f9:35:1e
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 94:3a:9e:ab:f0:00:08:be:76:ac:01:ea:df:83:ff:5a:ce:07:b3:f2
Fingerprint (sha256): 3f:31:78:a2:fe:61:23:07:3b:85:f3:bc:78:d3:75:e2:a9:85:09:f2:5d:5a:79:32:5f:5a:63:12:aa:2a:f6:49

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate recordati.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recordati.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recordati.com
www.recordati.com

Other certificates including the domain name recordati.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for recordati.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfDCCBGSgAwIBAgIQVZJD6NYQjrf/zkpUVdBsyTANBgkqhkiG9w0BAQwFADBL
MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT
TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTIzMTIxMTAwMDAwMFoXDTI0
MDMxMDIzNTk1OVowGDEWMBQGA1UEAxMNcmVjb3JkYXRpLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAKYGiZUTlpAqAxmU/msskYhHd5D4YhtNymIK
iWUKe5knqG4u82VtAFDgi7Ta6HDX722ZtKeWuzZ0H5A/sM4QT+L6vvrHbK6cCFtT
HAZ5ubMWFskbZ+PqgkAXhzr3TJW4FvPtf0cJViW6umNBbTUp4XvrNxmUOjOpF3eV
5XuHs3MF9CjgZzJCI86iPQpIfO3xGX+EF0yYrft61UCGjbBphduiyGU1WkXHZ5OZ
SsCJEfDBPDIxTI/eJ2JhUXp12NWKqKmJ+8NwA4AfYC+7KHrnRyVdtBe5LMAQ7Oo8
wwPFzYgcwBWI98OhOGADM8SonUwqkrXSKhEN4xBZX36f1vNwyAUCAwEAAaOCAo0w
ggKJMB8GA1UdIwQYMBaAFMjZeGii2Rlo1T1y3l8KPty1hoamMB0GA1UdDgQWBBTa
uJD+U0W//+LepOxTG1dpSPk1HjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0Bgsr
BgEEAbIxAQICTjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQ
UzAIBgZngQwBAgEwgYgGCCsGAQUFBwEBBHwwejBLBggrBgEFBQcwAoY/aHR0cDov
L3plcm9zc2wuY3J0LnNlY3RpZ28uY29tL1plcm9TU0xSU0FEb21haW5TZWN1cmVT
aXRlQ0EuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vemVyb3NzbC5vY3NwLnNlY3Rp
Z28uY29tMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAdv+IPwq2+5VRwmHM9Ye6
NLSkzbsp3GhCCp/mZ0xaOnQAAAGMWhs1WAAABAMARzBFAiAzq73oNUTUWbBFoR2r
2ZO2UCZN/J5O3lpExJ1EE5tO6QIhAOgnA3WIKGrLwkmWdYRdH0IlHDMFXOEMuyOy
IElI/zCAAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMWhs2
IAAABAMASDBGAiEAovB7KGdXWofGyTXAD+Z2AUQld2whNaFLh7SmcVcaEx8CIQDx
K25wYS3QZh3FEj3yUkEbznWzRvl0EsxIomz8JoDS1TArBgNVHREEJDAigg1yZWNv
cmRhdGkuY29tghF3d3cucmVjb3JkYXRpLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEA
Ofp7No1sGU/qkGTmTRy1/HLo8KUUDPqyEr9p7alqCPiQ4uqpV/cyfXbRsI71l/yb
V1LTgshMdY9gZaEQiKWFhiZaLBkWMgTSLmCkkDghnU8dALytRvvp42jroe68U9SM
zPC/fu33wzc70kpSykckZH1OmKsdjUp3EAqcJxMiQtTRPg/QTItpvz+nP9cn3cVF
H4JlVJD5YFsowVOeqw9RZg4dRpBV7fjQS6LS2znylah7CoTYVRPpVzw5596vJceh
FT2iZFbpr0YzgsmWtkn2dPxcMMo9IondXuutM4pFkaAdu9I0Y3Bb40C7BfH0U2sR
bgDUSOrNXIDQcPUlgXWjOqvo167py2rZ9r89A2pQo3M+ysJd1AfQIZaaXurSrePy
l/rwYjmh5y/q+wY7PxTZGwDkSIrbietxcmScl+hI3MJOQMJRYOyEVsCXpg7H5E00
w8Fp3KcwiQqBGRDiPQ9FwJZtc1mb9L+ZrUhHdMjuce92152IaVNqfI/Q/NPzMSsU
wKr0PhxzbjBaa8Io60cvLqg6js8562gLm86K+zpYSL+3d+XySxyhimO0O7HNI31j
NuvjsQLuLpY0PU8uA7sq36QZ9NYLpztnxo0X2WOb0r+0aUWWIyOjVjii84Ndm51K
U5U2YnfQ/aepam5AjDtuxS3xOhvD6K7C2nvkTw+yPEU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgaJlROWkCoDGZT+ayyR
iEd3kPhiG03KYgqJZQp7mSeobi7zZW0AUOCLtNrocNfvbZm0p5a7NnQfkD+wzhBP
4vq++sdsrpwIW1McBnm5sxYWyRtn4+qCQBeHOvdMlbgW8+1/RwlWJbq6Y0FtNSnh
e+s3GZQ6M6kXd5Xle4ezcwX0KOBnMkIjzqI9Ckh87fEZf4QXTJit+3rVQIaNsGmF
26LIZTVaRcdnk5lKwIkR8ME8MjFMj94nYmFRenXY1YqoqYn7w3ADgB9gL7soeudH
JV20F7kswBDs6jzDA8XNiBzAFYj3w6E4YAMzxKidTCqStdIqEQ3jEFlffp/W83DI
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113743832351690890886942942559246249161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recordati.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20958782351730510634893290401466129671304002350092480397526702362512738483162420469619592441845787481190903341307644718793554607171008708879520606668699937357620968351192476557122244512834047070676611474463246019696026488456214973995348142600557673544668714969969534144994004567236281304740789802263451954387344023529761040064551163836263325843971999111926046911302643462004316109767465361689353562924544855361885493021361002949218111251448579303112997094391760221197714354192870483558274348567802323164971738889275680341487766184846982003651662321105507381041521509485174360393975462706784603098523428411853172164613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dab890fe5345bfffe2dea4ec531b576948f9351e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c5a1b35580000040300473045022033abbde83544d459b045a11dabd993b650264dfc9e4ede5a44c49d44139b4ee9022100e827037588286acbc2499675845d1f42251c33055ce10cbb23b2204948ff30800077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5a1b36200000040300483046022100a2f07b2867575a87c6c935c00fe676014425776c2135a14b87b4a671571a131f022100f12b6e70612dd0661dc5123df252411bce75b346f97412cc48a26cfc2680d2d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordati.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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