raffaella.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:9e:d3:03:3e:79:d6:17:91:1b:51:0e:dd:2a:9d:5a:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=raffaella.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:9e:d3:03:3e:79:d6:17:91:1b:51:0e:dd:2a:9d:5a:6c
Serial Number (int): 267332771696704942769741844138333298317932
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:ee:77:c6:27:91:8b:96:2f:53:59:22:35:51:f8:ce:89:05:4b:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:b7:5a:77:c8:db:cb:8d:f0:98:e4:2b:94:4a:b7:f2:46:63:ce:36
Fingerprint (sha256): a4:92:1f:cc:44:da:95:e4:cb:5c:bf:0a:b2:fb:9c:cd:06:d5:55:3a:f2:83:57:90:77:20:a2:da:5d:65:e6:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate raffaella.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for raffaella.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

raffaella.co

Other certificates including the domain name raffaella.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for raffaella.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267332771696704942769741844138333298317932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 16:47:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 16:47:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'raffaella.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820739503864008568617968102196308261566314606353925481380199536193634877411110233824179584279353472509487369430528973145004656618488317560057595095763311484074721871866056596650492053025973130135400456741445922984304578663936632735237788021984324027596274138066055796592077271828366885721409772548859554246645184217061227158731106357713179306699245815947600985028151018359347510584269880719397477965061315829341524295311221500433961284330806733448369608738734760250500422683111552747314582751407806128538016639882666377660079588204173021985852533719212622549266255809319431522487870036721853300416350635560815104677695183384954409518778204166038953402585153001936414847748554170708657721598259449053214147278070154773718139443262716948002331227872611195827487839377752102698944393278170005565084652582838201904329871151268045885481322502793695365010030125805939583872645786736514774162763344409441383668894571147849340007398349368980652975904957223576117840169712585944844925921592241508517072438956160971695780376799883004406220257613651428533507971887594213435657282141947310135438088297202035858153343856276858435156446878654267116656269351790973174863003868491705160724931949666817388358537871567713640060196005118386116033888427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0ee77c627918b962f5359223551f8ce89054b13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raffaella.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff8d8321000004030047304502204486c2dda3accb12bf24dd94a5557b9b1d22e37f0014e822d21576efbd1fbd68022100e68b6f1327a7878065a88ac95f38766320d8ec3ed9ac6463a939b81f5030924400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aff8d833e0000040300473045022021bf32e297dfc56fed89428eb0a1e953f78eed0aafc0f3da3bc798d61f3de0b6022100877b15e7b4f284b4dfbf4b7ff95672eae3cd85111ba8f13ef3bb07e23e04bc52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00287cbcebf02b25f1936b408c5629d939139468dd08c4129f50bbe68ba38ff1eeee493574973df39a962db11dfda56a04f9df2c09efd14a0b8766cdd582dcf3289004fdc5fe2e30bfb50fdbe0b18c658db85c8688bfbac0d42aaabed8ed422ecf91060f68f69b82c165042c7bd73108d769322faca009f177086e6b5883bd230455e88ab038f88f6eab8040afb3b17a3a1b5b353382e65551db41b903483d71aa785e3744da6ee8c676d7392aa32ac3ac0832e6453450511f6b839108665dbf3542190f6c8f00088e159b96142d67974f5caf6f4f058ba72f395d6f61ea13ac21ca52dc6c736db0ed3717a22426548fb6a7c0091adedb50f33aa56715fa2ca4cd