www.albergotermeguardia.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b9:5c:e1:a9:19:c4:2a:c4:dd:0e:49:30:5c:39:2f:42:43 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.albergotermeguardia.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:5c:e1:a9:19:c4:2a:c4:dd:0e:49:30:5c:39:2f:42:43
Serial Number (int): 411524842279588622770203378020949852897859
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 95:21:2e:cc:7d:26:e0:d0:dc:29:19:86:8c:39:8a:d1:ad:f1:3d:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:21:cf:d8:80:8e:b9:5a:3a:c7:b0:f0:06:59:e8:61:60:72:ab:46
Fingerprint (sha256): 00:00:45:b0:fc:6d:6d:80:03:e5:61:0a:60:f5:e6:a3:6e:81:ea:33:37:d1:21:43:63:37:8b:71:66:ff:07:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.albergotermeguardia.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.albergotermeguardia.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.albergotermeguardia.it

Other certificates including the domain name albergotermeguardia.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.albergotermeguardia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411524842279588622770203378020949852897859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-30 04:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-28 04:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.albergotermeguardia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730958852152702313570689128893731940388857032442200282012671193287523308558317731664651644483880144225903212589090812191436736010120139315387124041403340008056616488091520364060922770982226724457394762681650585873161679580831771408457264305816077751361148687519192648247123694829689060342398966393048475990061738815342521754383732857600297061888039368368796321471294345538644782197606411030240014694659903012191406021389444030365689300774052076290311957524635526952697643686430818521998198818160697160493675524716254259989499345419389974425779053250970054945990029695460503291438365208147385276765526991481826335540188274947448799771134937966950695489761606557161318511696701015961862455395939544755027039774478109414213930838196001989479966294731650263233952205416926418452732039618704041259377085723669611920959154022366185167069703983399599177788419031410034603730431958467419810944055401259716621612618836515127705455797686270341906739529944700431824539868652190149149094791334277174631508684529769119654393831920909982153748619549532531441721709902549110191711947022460694664489425696476558903704169443267918771383558611041660019455065312614446372584405615302389498258392061119327680014128933132345237592652653993687528428250453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95212ecc7d26e0d0dc2919868c398ad1adf13d97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albergotermeguardia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00221f3703ce53d1715def502cd4dd9fd9e6aad927231e05934d902ff847fd8b412af7c002370e4c67d949dd7c1b3e5e45c4d897737166d838bc61d69c1c365560932527bff0e32302f35a7063532d97f1105c9ecb68d95e1ba3993e01477d97d6d599d4ee1c2c8ef32d0c9f2662893b471d984f0437327a5473a6cb9e8c3e6ada5c5f9b79dbabb8e3b3ebb5c96623b402688a7c2f8cde72173f283d152d4299ed90f8170fa1205deff3295c9fb8cbef126ffe03d296f7ab02f48de4ced9243e2674b12392c25c627a0560090e1b1a8f97c4b2d81d3462a4b573cbca2ed2d44c5a638d0131f45b8f4d44f35dc60c1a0695d6b4ad3146fbe3c0679c0655eb26cd76