ragioniere.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:0c:c3:69:9f:e9:26:d0:c9:61:e7:f1:96:c0:98:3a:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ragioniere.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:0c:c3:69:9f:e9:26:d0:c9:61:e7:f1:96:c0:98:3a:fb
Serial Number (int): 335195096793283662948916419269228538379003
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:1b:34:07:ff:71:cc:d5:63:84:74:ae:dd:50:f4:3b:ce:3e:89:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:bc:2b:cb:9f:ac:00:81:a3:1b:4a:65:54:80:07:db:cc:da:80:fe
Fingerprint (sha256): fd:df:57:1b:ee:a4:83:44:e9:88:6b:cf:53:a4:f7:86:76:4d:1c:c8:ef:9f:7f:37:d8:4a:3f:14:5c:3a:51:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ragioniere.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ragioniere.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ragioniere.co

Other certificates including the domain name ragioniere.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for ragioniere.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA9kMw2mf6SbQyWHn8ZbAmDr7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUwMTUwNDRaFw0x
OTA4MjMwMTUwNDRaMBgxFjAUBgNVBAMTDXJhZ2lvbmllcmUuY28wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQC02ux23F2q4NMFb0Dl7E8PvFJoXmQ/nYrN
sPmD9P9FDnBRkw+z3uaXVwcyq9kNoKW7XuBD6uKjwe47MI+jD/0ATXK+hdWQ5rww
hZQxpKmt948TYhk1dtTIn2EzX7OnmR+ylZchnG5Op9LJFD4nfDaqOa+7+bPUKm6e
4KyWV8P63tsG31CZIIh2nhPpZ+BHj6N+FVs7oa/ajEKwXgEqEJoIGZSoAOOmRtzS
y6SESUPmXprVaKElNHVJi5G8a6lg3DXj6pII4p6Sytn71f6XuvxXvu+Cv6Yq00Aj
tLiVI3+usFoxPghH7z8EIogmzEq09Cb2JBM+yjtLDj9MF/IJYpARPNSLiU3OW1Cs
aSp1MV6SfGF15PKKqh7TDLm5nO/DxWRGTeLEY8vLHHmPAr7dupL6EvlU952fOc7f
9MiuFnhnymXZYpKxZ3plT2dZv7PZ5vMj0F8v+xV4eQVTSG9rmcdW8fS6aBwZ0gJA
9E/Q51Ft696a/V4hf2A6d8K0BhdDvQrQ08rgDnaadVmA26DaNBBdDlQ95/rvTccG
EzJCQ8sb71jfLyZaE/DJeU9tH8xKhiXMiqk8uIQP/RJIGBDEqsPZvi9f4NGwgvls
HM80GAhBLFNudQQfeE9ojK5pzViK6HKo3KeMSxJcq/bjmygAKwEnPtOmsJpC3wz8
iO9wHG1I0wIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQGGzQH
/3HM1WOEdK7dUPQ7zj6J7DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXJhZ2lvbmllcmUuY28wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWrs5czmAAAE
AwBGMEQCIGeTKtPBJdEIqNp9pjVvewSC3IXy2jIOrSJctH7wB2MLAiAMn/Dp3hBq
lTWq677u4lFwy/SltPUR0piQEWamL1QmAAB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ
AsEAKQaNsgiaN9kTAAABauzlzf4AAAQDAEcwRQIhAMfPaeBQAws7E35Oyxr4S1QZ
KdKqlL9Gp18pus6Vy11/AiBYPeC7ERykds+XVt5tHy6xZDTou/rddE6TZSAdT4lv
lTANBgkqhkiG9w0BAQsFAAOCAQEAOj9jbU1NrX2bS2Z2Q73q6wuXPEXInDj+1fHC
I+Xi8yuj41HiR2Gl4q31vfiGnT44tR8olvBGHOfEhgAZaiaScHwqNusfc+WwEUH4
Tl4ndEsJrvKawPvu8VfrH533IcjeZVjcbYyQO6Vw9FNc1FP8MoA9vrRhMX0Ewx6o
C7bUqucUkHy9vyzBywEQaG0OS2C8HGzEHDJGkFPP+uC7fi8KVnsY45qaKOK3H/Wp
VX0zz462mWpnOCxLWT+GAXhX8eCc8VVD1iAavyvO1aeG50ABaBeS6zZLXCH/3/WS
sg04RCwEnNmkwETZUH4+Ylsvuv1lSzfYoiZ/OXpIbpre8s3rmA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335195096793283662948916419269228538379003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 01:50:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 01:50:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ragioniere.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737824724149246155626319575184891327778588812710981235109620346528974327774698614162809125195210431384903601232425172493249265890554755227938852226436635355897929823037492809376270904942981249192497334496701304542701629590242801205998535068934096754579750114503760465883779070671044775218212616306721979105919362634579661388103559504753363543125965945059914225975815818640954059584048742329105277303085354689435637025949284869402289641096525783463722472022998025960190645883649106026440551753715778050784891697582991516785022018571707092481664501318271330560913747511670642546015242398469093127146651087356292212391210144797752078463734148217195136973757964888645353728445851686841256094506616663505863916304960735251641054758952181906243435469730112920898957892330807758904493590611622990613869739253090700491814061934779404589216833556497215551735502871102630585662536572984254868227248038207457557819125487214068024843865322223167752646852569744491222673395922781779943426279511376107562353997528550218424724471484202535107883677030687750766700222646852119096517186020697040890931461701656545813326746049723711247510780941667265563712845860966244692355904789211231029805952025874152642977021334093733739492763791537660468648560851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							061b3407ff71ccd5638474aedd50f43bce3e89ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragioniere.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aece5cce60000040300463044022067932ad3c125d108a8da7da6356f7b0482dc85f2da320ead225cb47ef007630b02200c9ff0e9de106a9535aaebbeeee25170cbf4a5b4f511d298901166a62f5426000076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aece5cdfe0000040300473045022100c7cf69e050030b3b137e4ecb1af84b541929d2aa94bf46a75f29bace95cb5d7f0220583de0bb111ca476cf9756de6d1f2eb16434e8bbfadd744e9365201d4f896f95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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