www.raffaella.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:ad:27:da:20:47:56:8d:81:0e:52:d9:69:29:67:91:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.raffaella.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:ad:27:da:20:47:56:8d:81:0e:52:d9:69:29:67:91:82
Serial Number (int): 309546834898104009460570139244184132358530
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:64:36:4e:25:77:f3:d9:5f:4f:b6:5b:5d:57:13:cf:2c:60:c2:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:44:0a:39:a6:a2:06:a0:d1:f1:6e:28:ca:40:d5:9d:b3:4b:87:48
Fingerprint (sha256): 43:67:c8:84:df:a5:db:61:35:3a:f0:23:0a:db:5d:0e:5d:fc:d9:75:e7:78:98:14:97:a1:16:da:d6:fb:4b:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.raffaella.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.raffaella.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.raffaella.net

Other certificates including the domain name raffaella.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.raffaella.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309546834898104009460570139244184132358530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 10:43:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 10:43:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.raffaella.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1017990645542896967340579504593046216815121777887618025332584932170246650585209957155726307137295436399058257861178165497809365010670248588408063272964092117561039733794309728793993585850069568814386009139583833557938672768425461206596380857801314363418994739922994997572075521747484183848589624412924124642063963839568001176033978413792632460862405102676206930092754073935781338427176749334663065837464620461882154444516919531053903916860193808504571225554941404490315182474631174767185938402214192667732416229531694368259472686256369520953554184782851585107261588636007655540895116274949443020159062281965313554004484878857351055646243711587456469871880098862560068805459739998968319094426501734463550325353247947385986378729116571304682110667561176465537430593266739374783217746118049584471116030769398259866808211012080700768813989520388329345015508968650639796549677587397438114182588085910386638344782700911820515419697367974238205579022765727996367669055369225594973881506611697904059544547929450512916611872800573035377829120043928117847301697171595474695760079258330752517885062125574496337293807680423380839655916622329143931437009907433354541992745341312538720714802000745897349559736763807927701758991056077876158999117657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc64364e2577f3d95f4fb65b5d5713cf2c60c2ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raffaella.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afe40c49f000004030046304402207e404d8d709813791f1d5a9bcb41960b5e28e5758c61ed8de3f4bc872b49d80c022032225ed733addae32d1bd57ca2f87f69f631d07f040ff862ea0f7af4b944582f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afe40c4bd000004030047304502202a1f21da76f863f85e5cb191624d5d84e005b7e672f7df5a98c57e9017d3a5ce022100bf3a0b0936d8e83b4a6a7e2f8a1dc70fc17e46592eb788ebeb75f23bcf7fc5f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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