www.albergotermeguardia.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:ff:b1:ec:91:e6:91:41:84:8c:7d:1e:0b:94:72:88:67 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.albergotermeguardia.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:ff:b1:ec:91:e6:91:41:84:8c:7d:1e:0b:94:72:88:67
Serial Number (int): 289920171223395853801676728997137798563943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:3f:b6:3f:06:49:4a:7e:31:50:85:2a:fa:21:ae:e0:c3:3f:82:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:57:31:aa:75:4f:81:86:db:de:f3:ba:42:f0:cc:87:46:56:54:33
Fingerprint (sha256): 05:34:e7:fe:8c:32:71:35:99:f9:c5:c5:de:e2:9b:bc:80:ba:43:a7:88:b5:27:24:d5:8b:8e:7a:88:85:c0:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.albergotermeguardia.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.albergotermeguardia.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

albergotermeguardia.it
www.albergotermeguardia.it

Other certificates including the domain name albergotermeguardia.it

(limited to 100 certificates)
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it
www.albergotermeguardia.it

Certificate

The complete raw certificate details for www.albergotermeguardia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgISA1P/seyR5pFBhIx9HguUcohnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTYwMzEwMDRaFw0y
MDA2MTQwMzEwMDRaMCUxIzAhBgNVBAMTGnd3dy5hbGJlcmdvdGVybWVndWFyZGlh
Lml0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAg01LrIIF7m1Ktqmn
Nn9TmlRM2FF9rgmoKubHPROhwwHEC2LMCIMu02cXdFsKm9H0CLKT76ylzbUDe0sK
ClOD8eesDQHudQhraxklzP1aRWpFl5jJbdOC7KFzxfnknu9eCT4dapWGY7tX77IR
HQmxvrRK0amAEskafCAhdxjidgpfu7lXTh5otFwZv/xVMLYu2pZ3PDVHFxUKTn0J
vIEHUe8Dghfwjya6MGc3ZhXb1wFs/glHIaQNz/c1DIAh7IVa+MuRBhvIexAgFPM6
2hN+EEf8Q89BeZrzAmUA+9ln/60nOMcDlhnVqGFrbxsxHdPMJ7ysjkmwDDMlSuoo
BsMuJS5B3ASUA+7OIdmGIGfrCWXNu1hFNFWVIpUpGf1G1KKvw2Zzit7J71iMI3wI
bQ1/5wHJYUyTB45xO3W4Vu/uDGaoxgbDtRDIuUv9EHV4JjafM6IOvELnm7Q6LKmE
5QDjTqYUHipnQquJjv6T+CPsLY8bIV4WShrhOqSxrGPh48n6uJhJY4hTxKpk0TTb
jLzd9jAgjqvvwgvaVQy15kAFdNAWJeXKyGnMeomVh/Azt3KIFCqUliA5YREWps5j
UI7YhPMHK8KI2E8A+Z9OIOWIpW+SrVgjQ1o+VdIks2LpVoj2Wwox9pjcGSSx0ext
IpKb629C0DlO8MqyK7NYZ2s3pv8CAwEAAaOCAoYwggKCMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUjz+2PwZJSn4xUIUq+iGu4MM/gpcwHwYDVR0jBBgwFoAUqEpqYwR9
3brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRw
Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRw
Oi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzA9BgNVHREENjA0ghZhbGJl
cmdvdGVybWVndWFyZGlhLml0ghp3d3cuYWxiZXJnb3Rlcm1lZ3VhcmRpYS5pdDBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE
gfEA7wB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcOGI0WQA
AAQDAEcwRQIhALWoxenR6h5zU+Orw0PBfSkm107GLgFBKljxTQQHwHrsAiAxgxDy
aS8t1oJbKXMgobfmEe7x55j9f4DpNTf6jBgusAB1AG9Tdqwx8DEZ2JkApFEV/3cV
HBHZAsEAKQaNsgiaN9kTAAABcOGI0ZQAAAQDAEYwRAIgSnDeo26M2cDxMivpXxUZ
t5d9car+DQiQ6KXhPKToO7wCIFW34iWJGLO+IYddy8FapORniTetiDKOANvVAKyh
opUYMA0GCSqGSIb3DQEBCwUAA4IBAQBRy1cpGEywPdiowJO6punPP83f+aEI4MOC
mQBX4N2SQieAuvSkUzo8iRLOLUUv0e15nqcd8aUVVSPSGdLLVL97WmB9adEs1n61
/y+0G8TRyKViLrqHTG6qU6x17qdIMXROfeF17P8vo70MSe9wcPMaeHV+SKQEwmDK
RMGWDvv/6wpeUnVXO+rYFpWuWdFO75fRdKt6eCawdQbUmQX8wHzlw8dxG/hNOjAw
YGPSg+b70jpNL92fjIfCfjZ2MydBAIQe1eW9Wer/kzRScSyyRMcp/AwEMu24y8xT
Gt0ishe1qU+pSWuIGbEjMgYsAZjLg7csoTaejbakfZqRITu1vc/s
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289920171223395853801676728997137798563943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 03:10:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 03:10:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.albergotermeguardia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 535665164083103224139956090666182757098044659175260929239062698733976840385279756042449732338606845812291198020348232382889754767105513148811122984709212510796810931105144133205689638442183336776550576206590350907116894656809264777361652752739850329469641570238411498009741695318826491593214708896245745698843266628111644755034080218187256018402702974459094548360935008325305913973605881139841990922266381805612110438025771012335865607362960068107808517413787742617921280120462285380351644530559413106312781559767941202542524674201933486997870367391707470192355035157160290214349296173262117329315006442791990214460089309315233457672824671093717737342478996720852698266306166660505408575380652824691532088896051735094391709574549690713756368118992587161471119254540268347439050056990323494947779870346128055969850121215727358758147539789596762467331672923196640252076095561317822191635175272047441224192112587635808871363802676438375751165943345747427804422392466614118066026210852095272863807353679040041562754776098761860602447564217229290947639712301127429018508694790416377944943021575491551742336144259188735951302788162906248919731198829520068777414764437877956812866199526723985305811715128654876243500638386516528394384418559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f3fb63f06494a7e3150852afa21aee0c33f8297
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albergotermeguardia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albergotermeguardia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e188d1640000040300473045022100b5a8c5e9d1ea1e7353e3abc343c17d2926d74ec62e01412a58f14d0407c07aec0220318310f2692f2dd6825b297320a1b7e611eef1e798fd7f80e93537fa8c182eb00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170e188d194000004030046304402204a70dea36e8cd9c0f1322be95f1519b7977d71aafe0d0890e8a5e13ca4e83bbc022055b7e2258918b3be21875dcbc15aa4e4678937ad88328e00dbd500aca1a29518
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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