www.raccogli.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:41:37:13:80:99:c5:69:da:34:24:c1:f5:58:72:de:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.raccogli.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:41:37:13:80:99:c5:69:da:34:24:c1:f5:58:72:de:cf
Serial Number (int): 328799452237234371788848518810368189062863
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:55:b0:63:58:f4:f7:ec:42:0d:a1:c8:97:19:90:e2:94:c0:d5:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:38:47:53:98:77:6c:a8:9c:4b:4e:02:18:05:ca:0e:d4:27:42:93
Fingerprint (sha256): 82:bc:29:a7:96:43:2c:da:59:a8:b6:a7:77:2f:76:a1:33:59:9a:5c:62:a2:ef:94:f3:57:76:aa:fd:10:fd:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.raccogli.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.raccogli.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.raccogli.com

Other certificates including the domain name raccogli.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.raccogli.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328799452237234371788848518810368189062863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 12:11:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 12:11:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.raccogli.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855341456728002248089779364271081891781264525687807163041308941740606381056438528965500416199616374474580489394857172515671455159840212803867758990482274323493942387276222786936643354890036198292095970107764014352934257095706829899461998697514467358624590743388361299956442666681297308714726734158446447249043193148563740726910504011723789410618093367477253812068594799662280542510132627959623197809815808217715380203699438093659897266676155874993925743858897623669219096789090612628696480029574835307012518620531626917773098339328753734861682037659643215335192972436432841180235559330288858831455120260339276297058822198098611338790597889730574004744015307687091204942170210528111644294529830757279258226722693258794027800027199445340581273620492165721768882222826405784265280566557829101433911545561610821970344526370448483245383342878533273091442142678755472382747777971851401616745451459046878394013272633617575066167234990459356539454320811640204782363411762495578312331071697167274847387747157708378132736603720655878351051059217707301668636227943827768533099331030376553002139014167800867913143271290926629647130469841213231773797625500052384166839817518558343971362919964869845484514823944753511347726965336426485672420968457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9455b06358f4f7ec420da1c8971990e294c0d5dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raccogli.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c338f36660000040300483046022100b9b2a8925906f9e0b1a1292f5fed6a05a8685b1185ce2a65998db27805b50846022100a6e9839be414bd8b38874994d8b18b3dbba82101c05def9da8d3503bcbb46e63007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c338f367e0000040300473045022100856106f1976e5ce7f2037c44a0f1dbfa63372f37140bf0170291079435860c2f0220671bf96e238f1d9d24a9bb7c54b32ea699be367d1efdaa7a9f4c35cf883e69ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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