aranciate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c2:7f:5d:a3:ae:5f:be:8b:1f:5c:60:a0:52:d1:a7:3f:27 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aranciate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:7f:5d:a3:ae:5f:be:8b:1f:5c:60:a0:52:d1:a7:3f:27
Serial Number (int): 414633221068623673654748983772151057694503
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c0:bb:43:c9:f2:e0:e7:28:db:29:e7:ef:38:43:80:52:5e:a9:80:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:da:1b:eb:91:1e:d8:2e:d9:78:9d:c1:1b:81:29:a5:cf:76:f2:f1
Fingerprint (sha256): 43:87:a4:ab:53:d2:bb:36:82:7f:60:6a:0c:28:2b:78:15:bb:65:4b:65:08:3b:3f:5c:1f:75:26:62:ea:27:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aranciate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aranciate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aranciate.com

Other certificates including the domain name aranciate.com

(limited to 100 certificates)
www.aranciate.com
crickbetting.com
bombole.com
www.collettori.com
aranciate.com
aranciate.com
aranciate.com
www.aranciate.com
aranciate.com
www.aranciate.com
aranciate.com
www.aranciate.com
premmiebabies.org
www.aranciate.com
www.aranciate.com
aranciate.com
sanvitodeinormanni.org
colliri.com

Certificate

The complete raw certificate details for aranciate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISBMJ/XaOuX76LH1xgoFLRpz8nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDcwMzQ3MTFaFw0y
MDA2MDUwMzQ3MTFaMBgxFjAUBgNVBAMTDWFyYW5jaWF0ZS5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDNvTHtdT3m6yp8xsyOodimAVyQiFlaEim+
ONdq98v9ZY1HjkTnddk+5CMMcY3/+fala+iYmO/l7jimOKVL+Mn1/2QrLBIvI1KA
WHXpd+kBa9gmvsgghISPe33daVWjG+8Gnvae83N6n43CfEvBq8WH7YDnlUqSE8uD
4ySLF7McFdaR7Uy/VDXbXUWbz3VuHhhp8VXwf2gud3eF9/B6d47I0ixJjoNdOid5
fZzJZ1pK5yuynuo0JlVHfMQ0j9Da/F2GtZ1FPTU7E67lDZd6oAOvnCt3JzM+QOHY
PEpAZ/mP4U1EunL6DciiZnQEFSrWI/IFfD4xkEsV58Q0dHdvFNPnDo/ouWWBZMAV
IvVv7lF7J3h2nhLGCuDFgg21q8BLm+bSIERqecHhHF3bHMG++HnmF0eXt/aPGG48
8LT6HxsFVsJncdLypY+Wlnvy8mT5f1yu9Ew1viTzg8cVVTi3wyiLXSyqMZYIecjr
VVa6bQZuV1nLVbiZlT24LPVdG+MgALFeG2v6gXSTnRRCD8uRoSpgrs9ZjyKUN1QL
OElk1ftSvLKP5BWggG2Bvc5C8U3596mf50nTI/yyz7/OvdUfFMQHff3r83HnalR1
HxRx1V/SovM7Ao5b8C5kDUqNKHFGwjU2is0i5ik/p86IES/ERFldgn4GKMrXRHT7
0nma2kVbkQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTAu0PJ
8uDnKNsp5+84Q4BSXqmADTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWFyYW5jaWF0ZS5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXCzUY58AAAE
AwBHMEUCIQD/h9lQNdZ0YeqspL9xTeGcyL+8s8VnGOLv606vZZKoagIgbQC1vGfJ
/ctvsTDyZMX7q3yF+1xyhHvH2saIxYuA5XgAdQAHt1wb5X1o//Gwxh0jFce65ld8
V5S3au68YToaadOiHAAAAXCzUY6fAAAEAwBGMEQCIEvZlmhmQTCMrRV5gE9NBKpj
4Lax5MyE4S3woO1kqyiUAiA/gZtlB+SqS/JhxsbmVQMSQtAZuYVaSpJotAz3iCGu
aDANBgkqhkiG9w0BAQsFAAOCAQEAGfLPHgARAG1KMHdzyjNwRDRnHT5y/3K6qWUo
ZtsR2g/KNgJtDI5nEHK9sAomSdgESCufjUQikAyLOHkaJ6AzzgFNqPK8C1eHKMPR
UZMDVgWVRPNMdMvUcnMS27m7wGaOCQ7wNoDnG26U4THngjklJjEPJ0bBjNCrJyZH
UCTM4h96c5KGJaRf5Yy9G1K5qRwwtUxCs9XHnuXpU2cdwJlf9cyHIffg52/53lY1
AKfSimqJSSVwq3sT9J3arilfdONjpW2lRp6Wv0+EqS1x04PqCDnMDzeA00SjeVEC
AkhSmxqw/1rqEGWtGRvn2msIP83k9fb223x7r3eeABe/8tqa9Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414633221068623673654748983772151057694503
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 03:47:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 03:47:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aranciate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839342066678848263073718042657646865745859896527386324793505961136810378123824403081361955076344302713843454028629101513449295028921678715826591873877063283499290550586619808540761508805119904767668549747330606611665395135771842316123232009228339193071031292685456973003194406744627952115712971003942762207614246075546276576625596261356132587110556756351420770293457053193092072314068213105163008077224435096976973844385859628703739944355397769110729146333329997536028592855304376425972686541065003840718725660037462133738821388809999388609311830029643695756070027970047574058572110976042601455854640335864430425189539439637832994527823564716979596999254969487942744992039501494457648147849011655497517713713718286808794622874060151514817049414472739582670989798088887861387858092937082372623960028761100205977650506357901040744521215746561508266278462147240641004892105455465199793558341050223135704586051232376912895615996022005117102122293917203936067172684838664244920126063374967596180956828657687984869807309533656723694455926808440013249021712789310816055121770213881617715088118198017512587219858566714104059954033738581759624565753421795383535998050321205485603130805467462364233073481171601730597725413980687568598802455441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0bb43c9f2e0e728db29e7ef384380525ea9800d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aranciate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170b3518e7c0000040300473045022100ff87d95035d67461eaaca4bf714de19cc8bfbcb3c56718e2efeb4eaf6592a86a02206d00b5bc67c9fdcb6fb130f264c5fbab7c85fb5c72847bc7dac688c58b80e57800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170b3518e9f000004030046304402204bd996686641308cad1579804f4d04aa63e0b6b1e4cc84e12df0a0ed64ab289402203f819b6507e4aa4bf261c6c6e655031242d019b9855a4a9268b40cf78821ae68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0019f2cf1e0011006d4a307773ca33704434671d3e72ff72baa9652866db11da0fca36026d0c8e671072bdb00a2649d804482b9f8d4422900c8b38791a27a033ce014da8f2bc0b578728c3d151930356059544f34c74cbd4727312dbb9bbc0668e090ef03680e71b6e94e131e782392526310f2746c18cd0ab2726475024cce21f7a73928625a45fe58cbd1b52b9a91c30b54c42b3d5c79ee5e953671dc0995ff5cc8721f7e0e76ff9de563500a7d28a6a89492570ab7b13f49ddaae295f74e363a56da5469e96bf4f84a92d71d383ea0839cc0f3780d344a37951020248529b1ab0ff5aea1065ad191be7da6b083fcde4f5f6f6db7c7baf779e0017bff2da9af5