ragioniere.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a4:9b:26:9e:6d:d8:47:c3:55:ce:40:9a:53:48:b9:36:36 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ragioniere.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a4:9b:26:9e:6d:d8:47:c3:55:ce:40:9a:53:48:b9:36:36Serial Number (int): 317349396830265456840932750788788831729206
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 61:cb:19:8b:88:44:63:d1:c3:6d:f2:55:05:f3:f1:07:7f:0a:5f:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c0:46:3b:46:63:aa:d8:f1:40:6b:d0:1e:eb:db:4c:df:c8:b0:43:d6
Fingerprint (sha256): 68:d4:09:41:5f:9f:5b:a3:ff:5c:02:41:7b:e3:a9:95:f3:75:4b:1e:d4:52:f8:aa:cd:1c:d9:b3:92:45:70:c5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ragioniere.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ragioniere.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ragioniere.co
Other certificates including the domain name ragioniere.co
(limited to 100 certificates)
dubaidoctor.co
www.coingiftcard.co
hopfy.com
danele.info
www.ragioniere.co
secretlivesofinterns.com
www.charlottepetsitters.com
www.aucklandflowerdelivery.com
presenceasjoy.com
apnet.co
zanyare.co
ragioniere.co
www.soimarketingstrategy.com
freeroofgiveaway.com
woodstocklawyer.com
pryor2002.com
aslan.mobi
speedyway.com
www.ragioniere.co
iitbyn.top
thedayistheway.com
xkxnom.top
ragioniere.co
vptco.com
www.coingiftcard.co
hopfy.com
danele.info
www.ragioniere.co
secretlivesofinterns.com
www.charlottepetsitters.com
www.aucklandflowerdelivery.com
presenceasjoy.com
apnet.co
zanyare.co
ragioniere.co
www.soimarketingstrategy.com
freeroofgiveaway.com
woodstocklawyer.com
pryor2002.com
aslan.mobi
speedyway.com
www.ragioniere.co
iitbyn.top
thedayistheway.com
xkxnom.top
ragioniere.co
vptco.com
Certificate
The complete raw certificate details for ragioniere.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA6SbJp5t2EfDVc5AmlNIuTY2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjYwOTEyMzNaFw0x OTEwMjQwOTEyMzNaMBgxFjAUBgNVBAMTDXJhZ2lvbmllcmUuY28wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC1x5W3vAS8qe4QOAzOZbb6XxZC3snKIvaD tI5dMBIBCzqqQE3JTogev+12x7v5SyPRsSVoZMn14/ABvnw6x5m0OPelijJ565Ca DBt61gg32fBhFI2BVl6h4KLdYkrDT6c63PLTrZX9EsHLOLws/2QiG1mONrbkzkBd p78T2lxBVGbuLc0UfSHbJFoV2Ma22NFqReqRMKL2TY12ZoKUvOiia83nvkaBUcuL YO/WFSOz5ZlMCtFXDcsUV+X8nBiOuhrb8tjwOBr1fb3vPiUkn9UdNL3TFBBrHWQJ wo9W3UN19QZ//Yosp0hvrDkBeNP9LcAslDYpHS/mmld1KceARWia1brZJwfTA1S6 Tf45AN5UsrWKBUxsHWjf2HQKNaAbb+ayaeiku2XgrPxjjdR0VdWlYaVtpAEJjrjw PoRAmXGBPuRwmO6QLx8/jo3KrimokAsx/01yrQypMWteUzWqrp1INPVuMdBcofTM 7/azWjx64ht3afe7jjE052LEvefKL5BerQo3J/VNkIcQ8hUQTBzJYc/thHRR5X2a foh4mU10qRqSrOiF8ZmPEnWtylJHfFcfVjVaQcQRcZT8neYoi+nAKPk6EZXC6Ta9 VopFpvR69Qlp2Nv6QZhUwXsDeIVf9XnCloIsMurmReJjVpL3k3cPYPphdrrXb19M AcV+PcsobQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRhyxmL iERj0cNt8lUF8/EHfwpf5TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXJhZ2lvbmllcmUuY28wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWwtxJSCAAAE AwBHMEUCIQCPDiQsOczaYBnNGc7zdExodE1lrsp2zkf8ES/+su4x0gIgR6uI/Blk foPJBV3hoR9M7/qHJAOYV/F4XBV8yRyFv1UAdQApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAWwtxJR0AAAEAwBGMEQCIGz/vkYtCkxadJS8rJHsOKna jSfOFLYgMMBg0CFp+FP3AiBvPJMLmwXn5JMmwCu4xOUkWe53T++y2EaA84aybB9k HTANBgkqhkiG9w0BAQsFAAOCAQEADdEx33dbb0edutkaermR2W82YddpKZR/I4lu Qi/yjimYHx/xUeGMl1x/Ae/tN/2qCoLF9004KKNiR8QSurAirPGNblSnYlZ7Irqc vWasqigWNdRn5oaq6bRdO+MXX4m0g51VrHn4yzFgFxuQBfbH26fdBgAY0AELhM9r LiiSpTI3W72DuMtZDi0OMSQr5+5e6iSiGyoRF+YoSi7EviFfSQQatTD3GGLeTH3Z KsguSVZwbVpPHzhs5J3/0Zh81b2xcVdogiFpnxn2kzRx2P/Z7JRQv9beZgOe4Xpq EcAza1p2pAAG77N89sHU7AHhMBc7d+mJZuPiCgqlp/gYqM6uKA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtceVt7wEvKnuEDgMzmW2 +l8WQt7JyiL2g7SOXTASAQs6qkBNyU6IHr/tdse7+Usj0bElaGTJ9ePwAb58OseZ tDj3pYoyeeuQmgwbetYIN9nwYRSNgVZeoeCi3WJKw0+nOtzy062V/RLByzi8LP9k IhtZjja25M5AXae/E9pcQVRm7i3NFH0h2yRaFdjGttjRakXqkTCi9k2NdmaClLzo omvN575GgVHLi2Dv1hUjs+WZTArRVw3LFFfl/JwYjroa2/LY8Dga9X297z4lJJ/V HTS90xQQax1kCcKPVt1DdfUGf/2KLKdIb6w5AXjT/S3ALJQ2KR0v5ppXdSnHgEVo mtW62ScH0wNUuk3+OQDeVLK1igVMbB1o39h0CjWgG2/msmnopLtl4Kz8Y43UdFXV pWGlbaQBCY648D6EQJlxgT7kcJjukC8fP46Nyq4pqJALMf9Ncq0MqTFrXlM1qq6d SDT1bjHQXKH0zO/2s1o8euIbd2n3u44xNOdixL3nyi+QXq0KNyf1TZCHEPIVEEwc yWHP7YR0UeV9mn6IeJlNdKkakqzohfGZjxJ1rcpSR3xXH1Y1WkHEEXGU/J3mKIvp wCj5OhGVwuk2vVaKRab0evUJadjb+kGYVMF7A3iFX/V5wpaCLDLq5kXiY1aS95N3 D2D6YXa6129fTAHFfj3LKG0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317349396830265456840932750788788831729206 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 09:12:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 09:12:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ragioniere.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741596182121879326359015601010452261598848679496147871094377275287012798444273449278232491392316365208147842124980596408035967764963144371670946290788246129200316809298273613138481186704229546042487907757615800855748826301828211639426857493864679927009290408390898256562011122039402889548854527594179892449774396884974063076716390933686794815211903317511326231065421049196169379832251696384886618722883043833899656677072272228842971345646619139347057396934361713397933182266951081800361088987062627303587447576988003179321437688709298743219177048447730956586298171715173578545578496020644154054346394859968917857207788694092111199221447703748144668936925190166996315130184953485195521327163416969944815491039170987937004347025488276482704553251850050328853499437650122773299348825540584947959770218705566505004880364651855413174839550850166442161552200394576878788986539921921165747407253344180952144873297617483354333454245356291559715288685828986460395579715313609917542648634097477566635247969596543214718863225144417877602360208515721020802693137578935098504471419188872076084490215070820726802573612510569735732983640691604516283045553825598595431940289879355742622791813879994934402962540615758091850516752579420382229657495661 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 61cb198b884463d1c36df25505f3f1077f0a5fe5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragioniere.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2dc4948200000403004730450221008f0e242c39ccda6019cd19cef3744c68744d65aeca76ce47fc112ffeb2ee31d2022047ab88fc19647e83c9055de1a11f4ceffa8724039857f1785c157cc91c85bf55007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2dc49474000004030046304402206cffbe462d0a4c5a7494bcac91ec38a9da8d27ce14b62030c060d02169f853f702206f3c930b9b05e7e49326c02bb8c4e52459ee774fefb2d84680f386b26c1f641d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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