bodegabayhotel.com

Issued by R3

About this certificate

This digital certificate with serial number 04:25:36:47:9c:ed:1f:54:44:e1:c3:83:04:5c:ef:1a:3e:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bodegabayhotel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:36:47:9c:ed:1f:54:44:e1:c3:83:04:5c:ef:1a:3e:e9
Serial Number (int): 361111741450807719760438959563599909633769
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:70:64:d9:0a:80:bf:c9:09:a0:dd:78:5b:31:4c:40:76:1d:f1:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:92:67:57:3f:2d:2c:0d:06:5c:88:c2:4a:4a:31:8a:3a:79:bb:5b
Fingerprint (sha256): 31:23:50:2c:88:3b:97:17:1f:03:87:e4:58:f4:c5:69:d1:a2:55:3c:38:a7:90:84:60:5d:86:21:76:bc:21:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bodegabayhotel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bodegabayhotel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bodegabayhotel.com

Other certificates including the domain name bodegabayhotel.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bodegabayhotel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361111741450807719760438959563599909633769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 20:27:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 20:27:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bodegabayhotel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899345853837977333291412557721775594009125207656473075398813269803953117833020956267358847213306835679439947051946007989162169084237084593367100049918633043070433690206123047140900602745581442108568249423606418891774999650545591709099365618861902907105612926741961588623287456717708111768141442797074773387041343237294481870595506978218664891462094503204294152468183232787060812756401548229813544659012526919496304255396903471929868307520322450866901293066503747627242788472559089642480636183048503172303628612873879213974052087540839448994826358006059740269182400160695821337256001980217233231881312272253053903592192601363442539444688855793031223468504354699084155194154583277178291448407245197769147145620759424135933883293343823955028692876006271838938234355663195704770978443923448972273556922695119594391055669581319007855280727696256013431851743962543905772173632330781635657570073721719478359761496763715522529690384696466049609881302784735938738975098853038694163665297368965263404058930477319912283241354670123711107728400854519215532378573349672716590731410884047950234118267809028812820637323387336689414922082322514082489568363613169365624735136200312519341599380292592534231775010928273095427874616919693624011680690917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							067064d90a80bfc909a0dd785b314c40761df15a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodegabayhotel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be4549b780000040300473045022026f15f6ffdb6ccc41d722761bfa7d0438c75f4fc1fe4d7cbce3f251a2cbf1417022100faad5abb391286d1e5828d9b40142bb1515689f6fcce324a5b22ea0636a4454c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be4549bb40000040300473045022100ae0cd9a2597e46cfd1710e456f4331c23fbb5600e25f5c57d896405416adfd380220705cf773f07afd09867a20e41d4d22f7c3f3ecd2b54fd896e601fd34a8632b15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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