www.recordati.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:a6:84:40:f1:91:7d:b2:3d:80:1c:46:33:00:5f:34:be was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.recordati.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:a6:84:40:f1:91:7d:b2:3d:80:1c:46:33:00:5f:34:be
Serial Number (int): 303072645107334084198064274637890005185726
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:ab:45:15:08:7c:a0:05:ee:bb:31:db:88:72:07:39:5a:71:50:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:36:fd:9d:0e:f8:78:56:02:ad:75:34:24:33:c0:87:04:23:bb:3e
Fingerprint (sha256): 69:98:88:35:f0:9a:97:41:da:90:a6:7d:70:9a:9f:59:84:5a:57:63:5e:e9:77:d7:51:cc:06:bd:46:c8:ab:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.recordati.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.recordati.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.recordati.com

Other certificates including the domain name recordati.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.recordati.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAxjjde0MKKV5eiyMhI6Iz
M0gRYE1/2adrMEveS+6yUoBDZcWNnVfSGbNFcZ5Unm6+VNjqUhkUebjsmkXY5uPt
RH2Czb58x9N2J/icO/nul3kvoZfOekeM0OB6E80XpbXxsW12YTgVLQSbCIuqcRVf
7CQjwoahbjbNY57AmP9IIpSeSb7bP6NEjZQLRk9PKRsfmASJFVaZzB+a43O1a+9S
Az8HupWmDWBhXz+8CSqGhveOHOCU4tHa+KEJ9ZnMHAVDGa7E7ywCuF9g0ODp3Nab
mXziwmepmxRcJ8XXaGZS4H+hOAh7RteiYLqbdecPmFzKIddYCFgfV+X8KV8f/YVN
b0QD+X94BCAkinR1gjFy9E75bacykIsEdTwzZpf/Ilr49R1q1MO8OS0y3zOiysrQ
cOH1lo0ZE3JXNLU+JTgmRSduC7rvPwPawq7jZ0NkcBTG2q+jF9816Oo3+MDg9VMl
gqf/d7BYio2w9AXCNx03FInMitaXS78B/fEDKXc66QlpAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303072645107334084198064274637890005185726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 05:59:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 05:59:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.recordati.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4498408094480014980453950627400563530272087000049245065843752219125865131024153559676822873308682707901423721046433291989114413324747736350733955417526417026111216844209866811783366573583730782855665089834120952986127278628039610067041038177334703851725895165402795740249334027196400023333640116303258668103287256821218742487372579596116823578506130182195520568749148543284679927319193272966694084620804553648974114589244929421732567595578271236524908637993441608252627192599845839962846332659511556786513761055101501009374712765434212581671073999728571508866401130789384404238869041985360339285714066473034060938496074692988904837729167965489539857560768557411987749385657134045526718302905505103331366114178544059813144681317973536675734432925952627792921823521822522880978917409192799568636842530459728120197118073828066888806548057922787544731258582626670720457780225498985550134141379934031687109559400032556567925164393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6ab4515087ca005eebb31db887207395a71506c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordati.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b1c2324820000040300473045022100fd4388673449d88c17d66dc702d579973bb5c51960228b3af7f0f9a146fb9a8302202c09b898ee572e2f8da242dee1540331325bc1bb444b9b234f9ceafddc21143500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b1c2322a800000403004830460221008a6c14d9df1b9b754b193157eead62c6a137b83aa3bbff55e7f782f200ac7abe022100c8be758e474168c3ae552bbc5c78ca8f5e69e88ccf6d41fe9cbf3f205fda5a0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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