www.raccogli.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:2a:3f:a8:75:7e:31:b8:8d:08:54:28:3d:d2:9c:ef:c9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.raccogli.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:2a:3f:a8:75:7e:31:b8:8d:08:54:28:3d:d2:9c:ef:c9
Serial Number (int): 288615605256234434825513457648315804741577
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:70:9d:a6:0b:34:98:26:5b:9a:59:97:ee:2a:00:55:97:74:b9:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:81:8a:ff:a3:2e:2b:ee:2c:79:ba:1a:b8:97:91:05:32:7f:0c:20
Fingerprint (sha256): 54:38:b6:49:98:63:dc:e1:65:e2:bf:84:4b:90:3c:8d:00:d4:3a:c1:04:9a:c3:02:78:cc:9e:8a:96:16:75:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.raccogli.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.raccogli.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.raccogli.com

Other certificates including the domain name raccogli.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.raccogli.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4m/MaOtvI+wf2g1++MVk
8HkmY1L+Fe2BOhrLL+nJ7ZQOQdC/SuMTDyudVXt2tk+VSodq9kfwKioJdErnhiWU
t8Jh0sEa+KIRimuj/ugvy5vOVbNhKKPDz2Be4BoFxdpPUgZ+Gd23loveYWGp5tUt
ppJXOjDx0nMIN28t9uwD7AtpOjACV59BLZdtkUFG7eoWK7wqcED/N+zjG75xjArG
fPXkenl3qvJlu4SbtKVzLnuMaUELa0MHZiz9TuP0zjlWypL6V0GF3+NGY7wBuaHQ
sPDaE361HLN0Fjh8yUY1FvlcEivWNa0ictwwHjmxVSg4/9Fy65AjsNBAeZAeFnLp
Sh4YrsYzpZKMXrg7nVdw9c1HFMUeHdBT2BuYuWCRKf4HoEvQjxc8rrJ5awSP55Vs
kuu7/94H89Vw2ZKZ6IpUYLswDn9WTW/YNRFtPwW9RM5+ZvRUdclZHwO4O7A+bVmx
9DxITYhoO+oZgciMtz5fIQpDScPeS8hrgTcqgvVUnvPQJMJyElA3QxmHMwix23bS
aGGfiwsedF/it9QeCHSxzuhAGbUp9R+BWbo3DcURRvvFxTiGdlZrhGukxrRD7HW6
PglOlRAmh84nf8yZDqGmXDMLhlu2x5Z/5c9E6/VQGSZ5hhzEKCcsHw9rSRMTdSCv
eB2SFkDC6/vX7tFNXwfUKb8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288615605256234434825513457648315804741577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 11:43:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 11:43:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.raccogli.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923781192142904148243629674782798472030354262400856237645656638505898623766976010011121573740106724640294722824423018603157396812933686758527205795200107355073747294291733520098596732202557356897084099851792523972320267202952540667867607529524882188498364513741260486344129185152800104772736114030238723227142299157230332576155132628299106152242006624069933964032530229442884778569981948342988674880613918749542120387438419924203178968931311094380232907935175098423871248232905654259340995096324361537919800951557203284885752709096204126664146841949764844200658678227120376445504199006671195132497726279307666684728279124466540400851847427476976523635032699308723203176722827525730561307136321454833215014702887603229341872403224962554230083984450446339954658507058454572619708041702952624440904328245072128832712047220714827146079950534959574093603217126332726475611986060073695571205511623834978530715419165943123907026728813782509558729818561882529114290152599609778188089006660934401557979502625722931614223742317665690197618181585770002180143131765915590286064420476657716210538680591562840868884688012167518665548759587278184154380536355529100477163349954105764530671612511560873749993377914353379030257966246033691430937176511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de709da60b3498265b9a5997ee2a00559774b924
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raccogli.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d77e62c9e0000040300473045022100ca1658e7bff9bc499027b403d18c03affd83f2c99d712e3e9f906a63d294893902201ba2b0b6cbee3f8ba85e9f425940e8253d2a94e45890b5cde26bc0c68127d213007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d77e62c04000004030047304502203f71fa9eea9cb33a90e2560cd1bda386f64fea457136fbdd41a1a6cdeba8baac022100ff8e35acf8cddb858a2bab201ffeeb346673325d4010e9ebc8fa8b57f1c9cbe8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065d5e27d957f82f6ba50365406c123700b1f3341a8b85f02732362354d32ae011e9227ebddcc36663b4bf3fce46a808330ae1e1677472a5e0ca1706dd51e717e53090d79de9863ddef3f908ea3dcca2a85d77502a7e6028e84cc021ccd93498e014ebdc862a06c56661be3ca05d71f1cbd2331e49d579c8241a2df5f7d7196e0e633e3c98e118d314eca3fcfb8afde82e0fac227292eb5546a761f672e118fef8c3d62d2bd0e80b515d126a9bd38aee5c31ef2edeb0a500a41077e871a3fa040c1c6d73b122552c1f12b17d4e894e5bf6de66dd43bdeb1709042afd7533fd492ab44d5a1e57413f97fc79b054ecec385af75f29e8e2ffed05404be07200504b2