hoteldiplomatico.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ab:aa:e8:93:56:22:47:e3:9e:a8:d5:1c:a6:6f:68:4b:ab was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hoteldiplomatico.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ab:aa:e8:93:56:22:47:e3:9e:a8:d5:1c:a6:6f:68:4b:abSerial Number (int): 319752318899254276082505569214650296847275
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d7:40:2c:af:c3:b5:39:6b:65:74:f5:e5:a1:fb:3c:2d:15:be:7f:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 11:32:a6:96:16:00:f9:76:56:d4:8a:01:29:3f:f6:96:7d:8c:b4:56
Fingerprint (sha256): 1f:a7:b2:5d:45:3c:59:8d:d4:26:43:c0:2d:80:4a:d7:0c:4b:36:eb:d1:dd:3e:ea:bb:3c:f1:b9:c4:f0:c1:cc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate hoteldiplomatico.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hoteldiplomatico.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hoteldiplomatico.com
Other certificates including the domain name hoteldiplomatico.com
(limited to 100 certificates)
www.hoteldiplomatico.com
hoteldiplomatico.com
www.hoteldiplomatico.com
www.hoteldiplomatico.com
hoteldiplomatico.com
hoteldiplomatico.com
petiliapolicastro.com
www.hoteldiplomatico.com
hoteldiplomatico.com
linjun.com
www.hoteldiplomatico.com
www.hoteldiplomatico.com
www.hoteldiplomatico.com
hoteldiplomatico.com
hoteldiplomatico.com
hoteldiplomatico.com
www.hoteldiplomatico.com
www.hoteldiplomatico.com
hoteldiplomatico.com
hoteldiplomatico.com
petiliapolicastro.com
www.hoteldiplomatico.com
hoteldiplomatico.com
linjun.com
www.hoteldiplomatico.com
www.hoteldiplomatico.com
www.hoteldiplomatico.com
hoteldiplomatico.com
hoteldiplomatico.com
Certificate
The complete raw certificate details for hoteldiplomatico.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISA6uq6JNWIkfjnqjVHKZvaEurMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjQwODA3MTZaFw0y MDA1MjQwODA3MTZaMB8xHTAbBgNVBAMTFGhvdGVsZGlwbG9tYXRpY28uY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3zM+tODrDA9Rlca26M+V3pah FAOU5D+sVIpTNB2qV7RePOoJ5xu8K+LD0WkQQAb5QuJzYIOk4qyXTGZy4fKvxfq0 44lyo3oHfLKS76HPYWlhV8zgmi7bBH9BS8LF5o00nHRV0gFUPkm/GhhEi27q/8fU iUCeVgHhc1udnk+efhsuJpmR9smYVb5i5+ifWHvkMJTAYHi1+rDTgGJ4eYRR76zC Zhuq8uu4RAKBcRdX8x8GN7QtWpSZfFE8bAygkMh41LWHoEhBjivuWohvTFj88N67 8SPVS9aSlzUH2pTaTctOhU1Gb2M2jhY23hIN+NDiWLbKpvHq6Z7MntaJf6WXwdFP 1/7DiVL7di41MVzjDV76Ac4ovbjJhoaAWdckFtf9D3j2lWNoM3L668cRep/WIN9g xCviK8cYmsj7z1l6863SeNUWshPVATzL7Ya8scAvAcDnk9FZVWyNvlpobZkeXRxi sOTHg3taPeu0X/JA0N3/BpBdJta/+5D34G7JhcpC5Fg7TgKZp7Jp9KpgYQJZtEsJ RHonc5BU9FbVyHHNRlrS/OuDXrbQY9tjjnPRgSIRUhwJsZe8LoPisZjkvdB2co10 uvY2ZCsCrRIeA6HS0PJ3qDAAREDP3EM99KoliwLWRlSRaP0qawL4azY7ArTCw2Sg n4P1n4usfD1S1LOSwc0CAwEAAaOCAmkwggJlMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU10Asr8O1OWtldPXlofs8LRW+f2cwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRob3RlbGRpcGxv bWF0aWNvLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB3AOcS8rA3fhpi+47JDGGE8ep7N8tWHREmW/Pg80vy QVRuAAABcHZzW3sAAAQDAEgwRgIhAPsGj9tbzUpua3KteKcLU94Trx3ddTcFFtWx h2h5YxlLAiEAwpO7fAliEYBYEuuq2/hsIhJfoB/TrJ+mYdLyTuZjR7YAdQAHt1wb 5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXB2c1urAAAEAwBGMEQCIBfb Yy44ZOEEO6nll/4aApq8oHJ3nfyxfltmf85oi3ydAiAfkKfN6Lv9R6XZ3EDy4uY5 57IQVpe4hSS2jfkSTPmcoTANBgkqhkiG9w0BAQsFAAOCAQEAdDPzLhjEn39w3T2E WBevxiOrL8fH/ZCa4aIegHHHk5/PquaT9+ZqEMOXpUf7jGMdp1pWWS+s0NMdYzD3 5PHDK7S7JnEN8pljWIBlBCEmkcv/6qCmlK6JwatL32XFUQUg8TlVFHVy/qS9vZBx 56UilbS1COkZfMrJBqlGtiP58Iu9h+Cd6aIKjppHZ3TTOXAtOqC1qeW6Fv2vmDZs yzB8kjqphMWpx3KAM7gx1ksm4jPgN9h2fhQ/SXaFaXJ/oF+VdkD5pF8I7oOiW4yT trk19ZAvARZeYVTs0IxLUbXVnvOPOVVapumaLKOTf2PcgBj5aYn/VweStztEEpVf ROmkHQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3zM+tODrDA9Rlca26M+V 3pahFAOU5D+sVIpTNB2qV7RePOoJ5xu8K+LD0WkQQAb5QuJzYIOk4qyXTGZy4fKv xfq044lyo3oHfLKS76HPYWlhV8zgmi7bBH9BS8LF5o00nHRV0gFUPkm/GhhEi27q /8fUiUCeVgHhc1udnk+efhsuJpmR9smYVb5i5+ifWHvkMJTAYHi1+rDTgGJ4eYRR 76zCZhuq8uu4RAKBcRdX8x8GN7QtWpSZfFE8bAygkMh41LWHoEhBjivuWohvTFj8 8N678SPVS9aSlzUH2pTaTctOhU1Gb2M2jhY23hIN+NDiWLbKpvHq6Z7MntaJf6WX wdFP1/7DiVL7di41MVzjDV76Ac4ovbjJhoaAWdckFtf9D3j2lWNoM3L668cRep/W IN9gxCviK8cYmsj7z1l6863SeNUWshPVATzL7Ya8scAvAcDnk9FZVWyNvlpobZke XRxisOTHg3taPeu0X/JA0N3/BpBdJta/+5D34G7JhcpC5Fg7TgKZp7Jp9KpgYQJZ tEsJRHonc5BU9FbVyHHNRlrS/OuDXrbQY9tjjnPRgSIRUhwJsZe8LoPisZjkvdB2 co10uvY2ZCsCrRIeA6HS0PJ3qDAAREDP3EM99KoliwLWRlSRaP0qawL4azY7ArTC w2Sgn4P1n4usfD1S1LOSwc0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319752318899254276082505569214650296847275 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 08:07:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-24 08:07:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hoteldiplomatico.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910577272270192336930413802869492911884928469377429459209170736895442597916277143750622002160318233700076426723891498120956041079497119365739241061998803260936105020055304382403058784614362234794006537157768011371617609126710882504855874593171842644575482130290360198842739276903596499206206565268876485909660852043459889004475492841684132593348164818390370499817777847891734400927877143263203235288516881496728282501969160683600210057658962813485335151510352596218315396404204156645306538457864759439789554162440215288943099955359602787590633919776827520600118007435905084972588057643958089474559069565821173222504270909867908230531919953060184134791060127399702285059849220007726060512559052171681483494844986228084849785983348454895460010312777007846327093463281550374954755842519221589052011273323849115457126329924028516723002747648847530618929483669287650128181789132864215426776414729832241839716921837827394779277581886668375759553179851118967158812579735180090458943611730841742555594444891123908592721049297782646229227205140470026366576935578806051963484025180809397599376159348757408655166741814278645526528022299537304933540807900188061507274931654471773978444863038273038625109440119301598494101258501260144623108669901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d7402cafc3b5396b6574f5e5a1fb3c2d15be7f67 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteldiplomatico.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017076735b7b0000040300483046022100fb068fdb5bcd4a6e6b72ad78a70b53de13af1ddd75370516d5b187687963194b022100c293bb7c096211805812ebaadbf86c22125fa01fd3ac9fa661d2f24ee66347b600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017076735bab0000040300463044022017db632e3864e1043ba9e597fe1a029abca072779dfcb17e5b667fce688b7c9d02201f90a7cde8bbfd47a5d9dc40f2e2e639e7b2105697b88524b68df9124cf99ca1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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