raccogli.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:70:f5:4e:14:b6:e6:20:ba:08:22:5b:fb:1a:4a:6d:31 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=raccogli.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:70:f5:4e:14:b6:e6:20:ba:08:22:5b:fb:1a:4a:6d:31
Serial Number (int): 286327617812436616197621245181017866267953
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:ab:7a:da:1e:40:98:12:74:6d:51:48:16:fb:c0:c2:33:66:4e:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:aa:56:fd:53:97:d0:2d:53:cb:64:a9:62:50:18:96:b3:ec:bf:e6
Fingerprint (sha256): c4:f3:42:72:49:10:0b:dd:8b:b8:69:67:8f:fa:40:c1:d9:9e:87:cc:3d:0a:a9:a2:52:fd:a1:b2:e6:bc:9b:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate raccogli.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for raccogli.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

raccogli.com

Other certificates including the domain name raccogli.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for raccogli.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo92Shgqdf7G9OWzeCWdG
7nVAhOracEwyvn4RV5bcPgOqWfIA6Ao1bW8ccJ9oOPnE69EThBpLc80jLaCVnOPh
mkE1sYNpEkItz2pw8q16LzdgiTbjIlc+af4k3LYhPWhV7ACrThSZKRuYYcl5hjg9
6w/brMnv9NR0OdKlrfRktxUsbwAqQ1FALO/vaThNRD4lSilB41XV40lRqYloC5Kj
BbNQpkja1E8KSyaW2kHSdxxC1KdXRahEaWnpvR30ChFT7TE8u4lUDq9T7/3+6GUk
+x+4Vjxu369RkMcefuBJq8oFFz6g7/+n5FnSh8pvqE2Aed5OtLuZ5Cndnh4zgk4I
nUyvrBrKgRoxok3VyHITWyNZpsxbzDHD0ZH4UKvfssWsh1jZ0Kd6NtcSPDKus6KC
6OFUYkhiYfDi+OJbJop9kopfFafq5ZyfotETI7OiMzkRvyGJvSeCXwzhcfwxWiP9
RpaUBOxiq66pFtJ/co/VqXpTFGj9cbBF20Y/fz7OiWgBbqCxOGlAPYA+YWsYRcF4
H4jo2zgTM+cLY1hKs55k51X5bu9gLwzNIJDWl1TkFRIoo3BX3iAeBibd/FjU1Rd7
FKvcu6Wz7wLNs1YLYLZvIZfq0YEZ+8+ap0cxymG2+szi9ObzQGhUt5XEImnr85EK
9ufD/jFHVHxoASQbriu1nsMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286327617812436616197621245181017866267953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 10:47:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 10:47:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'raccogli.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668512984474697263974534887927972215599866867070098207967874707629608198258608904289515815835611888738309728678917258525828124223160300085300666801363840050508568942533925634019059414212181622789587929026001320541459346345000616158670796977553462574870108363092800931180999599466713546562761332505280438440120715825030324544684458975032556494951166325864640722805842853203205133193320156741081936211059649368876558421605878712581295860261549249094983969812742037542209073387579348180545790072092853628904110652484529159295518032068346613338192421006694610106592308631372639097818585648505536413485124551576249662876777689879612400551011882978965439313359192305026499976261902930426740649416913747710400126717909211506028203373929518946870374360597805898517099502428290225559811157073090462932347782087968888378439628027645315127276205823779549873899332857132930780770674859040280544082407686570994284261701905636053993168087854432988843714571135838215228513089416494623178058539496295895942015149552709862126931300721297273710717940735186099510024204054148966471754924322284585294978097695251058967153190203744488339924638041607678711523542814311071790101583168868489904894201126277481277884091852900459770154044871558005861830205123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6ab7ada1e409812746d514816fbc0c233664ef5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raccogli.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d77b2175b0000040300473045022100993f222906d1d3d181d49229f4260826cf019c0878dfde17dd7d6e18a593b3a50220118cdde20fa05dafa6ccc3a376aac20d0de3124e76de111b705e7c19e913634d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d77b2177e0000040300483046022100ee6f58ab6e8ceeed4fb8b62ea18547b73440426db4e42896812f4a0cf1f2a509022100e057dd9f4b67bcd952cb171c974fe2c46fd83076d8615cbdfb583ec719a5e008
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00023a19a275348a341eaeacac52756a018758194d3a8bfbd189c1bba20a831dff8c20965ff7e3fa8ae024633d3cd0b52c27f3475ca398daf5a476a4922f186a5d8edfd5c91eea326ab22e9b13000754bd76d6b37f4a68768298ec9200a1fc015b27ed501696fe042acaa347b3c7bca27b4923c8f4fee18ae7ff67808f406e0379fe6559f7dff6eb1411edfa3334504110b43bea6e3d78827787fea3029e4252cb024f5f1142b5ced4a3b6f4fea355008a1978d7b238dbd992b22d7b99ec587f8d12707efa565715cfcf247c3dd16a4861fe39f624cafe491cb669062478906d1b45c65dbd0be03dabb8f7955f4ae9d01eabfe63c3565a70185f42140e2c3e3f9d