ragioniere.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:9b:26:9e:6d:d8:47:c3:55:ce:40:9a:53:48:b9:36:36 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ragioniere.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:9b:26:9e:6d:d8:47:c3:55:ce:40:9a:53:48:b9:36:36
Serial Number (int): 317349396830265456840932750788788831729206
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:cb:19:8b:88:44:63:d1:c3:6d:f2:55:05:f3:f1:07:7f:0a:5f:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:46:3b:46:63:aa:d8:f1:40:6b:d0:1e:eb:db:4c:df:c8:b0:43:d6
Fingerprint (sha256): 68:d4:09:41:5f:9f:5b:a3:ff:5c:02:41:7b:e3:a9:95:f3:75:4b:1e:d4:52:f8:aa:cd:1c:d9:b3:92:45:70:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ragioniere.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ragioniere.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ragioniere.co

Other certificates including the domain name ragioniere.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for ragioniere.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317349396830265456840932750788788831729206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 09:12:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 09:12:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ragioniere.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741596182121879326359015601010452261598848679496147871094377275287012798444273449278232491392316365208147842124980596408035967764963144371670946290788246129200316809298273613138481186704229546042487907757615800855748826301828211639426857493864679927009290408390898256562011122039402889548854527594179892449774396884974063076716390933686794815211903317511326231065421049196169379832251696384886618722883043833899656677072272228842971345646619139347057396934361713397933182266951081800361088987062627303587447576988003179321437688709298743219177048447730956586298171715173578545578496020644154054346394859968917857207788694092111199221447703748144668936925190166996315130184953485195521327163416969944815491039170987937004347025488276482704553251850050328853499437650122773299348825540584947959770218705566505004880364651855413174839550850166442161552200394576878788986539921921165747407253344180952144873297617483354333454245356291559715288685828986460395579715313609917542648634097477566635247969596543214718863225144417877602360208515721020802693137578935098504471419188872076084490215070820726802573612510569735732983640691604516283045553825598595431940289879355742622791813879994934402962540615758091850516752579420382229657495661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61cb198b884463d1c36df25505f3f1077f0a5fe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragioniere.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2dc4948200000403004730450221008f0e242c39ccda6019cd19cef3744c68744d65aeca76ce47fc112ffeb2ee31d2022047ab88fc19647e83c9055de1a11f4ceffa8724039857f1785c157cc91c85bf55007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2dc49474000004030046304402206cffbe462d0a4c5a7494bcac91ec38a9da8d27ce14b62030c060d02169f853f702206f3c930b9b05e7e49326c02bb8c4e52459ee774fefb2d84680f386b26c1f641d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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