www.raffaella.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:46:68:21:7c:c2:19:e8:09:6b:33:70:33:73:1f:7c:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.raffaella.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:46:68:21:7c:c2:19:e8:09:6b:33:70:33:73:1f:7c:e3
Serial Number (int): 314174211305808313992958898849853862804707
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:75:3d:39:93:f6:0a:a1:d8:9c:18:79:02:0b:80:2a:82:18:81:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:ed:61:fe:11:dd:af:e7:36:22:bc:38:7f:d4:99:35:93:d7:b4:16
Fingerprint (sha256): a0:59:96:77:c5:aa:1c:85:ad:c8:2c:80:85:9e:fd:29:42:cb:fd:e6:5a:2e:af:07:0c:b8:c7:67:07:ea:c8:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.raffaella.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.raffaella.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.raffaella.co

Other certificates including the domain name raffaella.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.raffaella.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISA5tGaCF8whnoCWszcDNzH3zjMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMjIwNDRaFw0x
OTEwMjYyMjIwNDRaMBsxGTAXBgNVBAMTEHd3dy5yYWZmYWVsbGEuY28wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQiYaV7p3+wmsnmBIz7NbJWadDa6vI
fwfUn2ENvWbiSQkLRMmy6ug0+SamLSRDa3m7zEEOrPamBpm0rgnTwE2WtRHPwycn
WlzwJw7Xc/8Wn10fXWF1aO/EzFRkPrV/fNQoDWDmMfGjbqTCUd38M56qk2Y2KyAE
qO5OGbpazMGmnszeaDpXpnkTvrIWE8YXkgkofgmqU/DrY6jkeS2KASS1M+ia6Kry
XlSFZ1E7VWeHTCgaiHBlJVsSi/y0aAMD6maiH76b6usAFryIPYc3tfT2dDgrQmy5
mhj1HX5xyPD0DhDFb5PorqJPXBZo/ME2hJXCaXczqANuGsxhmC5eSxBqOFewr0Qc
KwrhwiTsw3JKi4zOJK7LBPvFbk46EFN/XKrR6GV91CDdIP57hezrMiy3OjInqNVg
jx3RHlJ2g87pEOVx0DwtYnVq2y9v6k2OPsjfNWT/trAWQxKwImoC3IogivJajGsc
sV6iLXJncAtVhtfKDpblCM2UHuV5PazOnBK+DvgvyGvWL1HWlkVWskayNigidFQ8
zkXEzitTrs+VBCMhRbEVPUf6CccwcQzxe5VurSDCS7+icBcbABv+b1OPg410AC8s
79vztN/eXyoMVVpQ4L+Gyco5b5HwLyT+5QgG67ug7+KN3Nbu+LRUlRYudWtUXpoz
OnlBQnGY9O5ZDwIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQR
dT05k/YKodicGHkCC4AqghiBSTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5yYWZmYWVsbGEu
Y28wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWw6
4uXjAAAEAwBHMEUCIQCAn0KfPbBXxuhTN4n+AqRNsrWNSmEE4ROKNCMwzhPPWwIg
XfpRhlaTUZIPWvIrXxLa5968Zi0wLEULXVP26iWO8YwAdQApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWw64uXXAAAEAwBGMEQCIEYVBl9k5g3miso2
l4SAOXV0ZuhnMiW/roAIHxCFq5UWAiBT2zh4+WY4Q0Rr/hknaOxKVD8Pnle4InWk
RxYmTho7qzANBgkqhkiG9w0BAQsFAAOCAQEAkhuGXFmsPrWBy7ttWIAeJmODUPTc
04/TJ3zv2GPNx6ZsXLP3sxvcqsWVNgwZQn4ScIqvMI4d4oy2PifmvxDGhZc1IyZB
EvYW5t0s1RXn+36ENTMdW9rFJZj5Jy1ZHq5tMLrWhuR/7VcGwFJy9hl7DfQMBYfX
1bF21cCcU5wIG8QDypCeIXGaWTy9CyLJOb2J3Fl8qBJHlAUtQD3qYzQPmvMw7WYk
BAPwENAXjMiQAhxgipvq0v5DbfgJih2TSZPDcvJ5sr7uRCAZ0ln1ZBKdZA6oAD2E
yXEPDJexiLv7/LSIVeisYBMT63z4Z4AX+8A80Z++9kndbCRrgWJV0MzuCg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314174211305808313992958898849853862804707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 22:20:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 22:20:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.raffaella.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850757591184701822983297186432421331272830066650629246480484250184177302399467748196381143525722063244770197354407496828492124288843214250192653435813638873797003213182335632101100822867247375506566593284970904417940302757907403863706119113653880241807299754637800979565136586028024808091015451243463819487903961532803332707189438575935752134069760188161477137976287255783526783727901275183849953899623675718260190577032839952837466655692183326638141201431559452036286871857646017227389891200331546829800319314358344092885488225785691081028846199026672747709212608195390283914560380820768157172059596097678036862069543854512691723099967003234109859362829510857410297239606788950011630856398225981524633110523738882830574610752182224974537195865611030651904398025020133871269544981916520472875867500577453172453336882668155694893286073279129196840147152554736806550315132446919626575937218149175713268749846896166081328184417818575233781571848478317679385753902513912206930813360868476317119783386129695621999106912211948188696483649191653079422646215314788699584079800827688188002945948285594064557542588747251713817285948918892732687965444900829820655694450398024469779515697404389886469900458808234917556575684738774542452825938191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11753d3993f60aa1d89c1879020b802a82188149
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raffaella.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3ae2e5e30000040300473045022100809f429f3db057c6e8533789fe02a44db2b58d4a6104e1138a342330ce13cf5b02205dfa5186569351920f5af22b5f12dae7debc662d302c450b5d53f6ea258ef18c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3ae2e5d7000004030046304402204615065f64e60de68aca3697848039757466e8673225bfae80081f1085ab9516022053db3878f9663843446bfe192768ec4a543f0f9e57b82275a44716264e1a3bab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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