bandbtoscana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:16:8a:0f:06:16:59:f8:1f:26:89:90:ab:3b:cf:77:56 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bandbtoscana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:16:8a:0f:06:16:59:f8:1f:26:89:90:ab:3b:cf:77:56
Serial Number (int): 282464324401971101096213716538133119465302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:a8:07:02:a9:76:1d:ec:c6:5d:23:a1:e8:9e:e2:2a:fc:c8:a3:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:d9:52:4c:c0:3d:79:4f:48:8e:64:45:75:10:ba:70:2d:f9:39:06
Fingerprint (sha256): 3d:29:b5:40:89:42:10:93:3c:08:91:5d:f6:48:77:9e:89:8b:d0:b7:64:05:c3:3b:9b:26:e5:73:5d:ba:8c:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bandbtoscana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bandbtoscana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bandbtoscana.com

Other certificates including the domain name bandbtoscana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bandbtoscana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0IFxD9MpX26mhDX8Vu/Z
FaLKD2IcJGXDjBgfgDJ2Qj3iFOa8NRJd2CRZlrJzwAlbSBoWZHDtTrr5SPbPImSy
g1K6sjgjFmRuJdtT86unaTyNkZ4rq+6brYukZmq7TWkTRzMFFbaxl5nVPPFlN5ao
mmwqEqcty1MJ7LpZ0UNfPBhMCF5xRErwsb6ExIOKAZRAS7gbcfkqQDMJ9/ZlBdgE
R6NT4RQSKPoxMfCEJ0T3+ACwB8Mpd0urXJshvF4qeiRhH3EXwf9efC7+PmlIwHz/
4AEBn0ZPdCULceIKsWvY+33pfY1bRuZ+4C7r8/xxdddyc2Apwc4LGfNfHtG8NlKU
bO71jnZa0hElx9fhzPJORwa9Gxm2W8DaldE0M83JGdR4FudAzk0B7UvXTCVRPELT
cy7djKDFcRBzbVxF7ImnnIfwcx5W0J4gqi/gifaEcHLn5oYwgRDuQoDERb4Z9IYA
jV7RZz3azVocc29lzMDNnn2WNpykVk/db1ullHSJ9YDWFHuzSl2ZRppsk445BTHb
WUERCGCDy5NHsCiJq0NQkipmhRUg/zH74aC+NggbCJSFNDVS1uuS8dAj/TeWawI+
p+VdzQ9U1YoGHDkEkx4h4SMNEkJFcL7DK+Qc9YjlJMND8wK1FEddont52+gyjfZ6
EaRMhrj2+zP2ljcqt7YXby0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282464324401971101096213716538133119465302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 13:23:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 13:23:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bandbtoscana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850628762438294571617293185060146239141357331911552768330694246492964187661678356103625755921808107986182220658554155195127188919504970892625302062671045567830187098542912379562765655668947798883374552194235038769728997437681615522628106182908729694046930972165836181776472722305462109356949772753107283716557379545938528645471218059248699910553384148931848600959702674505766609639999801863995720143766159162744459012696229848219785879590339364355760182738287480721775310817692200952663366335186297851337056986654714201290398871173023262175625311307897149104983513960814875168227310256646841417313521787927850813527148868289831789952962294752732058797655118740226286239364565086684308082215279905992002442111789358579076242810275839119995575411845408631440546837881925625131522102557635013411436369540064107893015060309363799534918872298637825157773333247151812473647517858694898543628355085543514792117933834770933289781553867643744069396297861931148002049406401444085317300598034791117524020972482142551853841344632960760936555966202156488109313675799251914518737735329824052034453481393323499572906812577816828943905415629072705167495498595362905530550973235587697476191310796246662525403516862524136546078209545190464678689992493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8a80702a9761decc65d23a1e89ee22afcc8a322
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandbtoscana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eb78be859000004030046304402207aafb771d5229c2d9419c26a5f129d491d8ad828fb70676c4e11ae008b3c4b6c02206998663cb22ccc11a08e6df7fb5ad457aab7f83d778b01c74fdb712cc56a9b92007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eb78be85100000403004730450220135c31cfba6cc3b0bf6adb8f117a69ef5a785e28bdc60ffbf679465cfe8f72a3022100e3d744a6915886b61397e2d84a1ab1162f3e3cfc3a0654aa4082de33b8634938
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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