www.songdohotel.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:48:8a:2d:0a:8c:21:2b:12:cb:0e:43:da:be:d6:b5:1e:7c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.songdohotel.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:48:8a:2d:0a:8c:21:2b:12:cb:0e:43:da:be:d6:b5:1e:7cSerial Number (int): 373133141476051812279958951955032362524284
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 71:e7:64:c4:91:c1:17:ed:70:49:f2:6d:3c:ba:a4:6c:08:75:30:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dc:af:00:5d:7b:dd:93:b3:d4:31:10:ae:77:80:f7:69:c5:da:bb:4a
Fingerprint (sha256): 58:86:99:f7:37:20:fd:98:e2:78:c8:59:68:bf:5a:ee:75:75:7d:2c:d4:04:a7:f1:0e:4e:06:b1:62:a8:70:5f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.songdohotel.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.songdohotel.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.songdohotel.com
Other certificates including the domain name songdohotel.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.songdohotel.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgISBEiKLQqMISsSyw5D2r7WtR58MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjMwMzAzNDNaFw0y MDA1MjMwMzAzNDNaMB4xHDAaBgNVBAMTE3d3dy5zb25nZG9ob3RlbC5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDunKa4kDnKikAHZahuJjIYtUsi wr4mrhDCzQ5Bj4QloFr0Wd6ybXZHgintk5NpzOB+jQse+OhnF/TJKwGEu7cyC86z lioPG23Ga4rybMPSoQ2PDOok+pMbjQSNbAMIu43/kFxczJi9wBeox6U7pdjV0Ric ewgp3Xa9bSahqq6HbFNpTqgMD+ZcxfCdxxX+RjZSmClJ3jGbmuNDDhV/0fQj3Z9p 7nAT2BgyVLwDsB+0nKyJU3BL66YuqEQtHgK7vecxpXvyH0z5JewyHyLV4/ZmeosT QWU9RVyRnktZv/J8pJcrAyaTRensciU/YnY8fclfL+y/fq1xoNLe4tux9qWnUQk0 ZvF+lTVuRn3JHviliExuAPoANN6U6+b6sMq/QUtnIWf5qRHXe1CgEpHDBnZwo+YF qzlmXnQLx5JdyitPHdJ843yZOBd+Ws28Rz8TxDXbUGbGQmXY++f/JWgyQY5ltSAt lw7h6Z1ffv5NiqIt2a+IK+3JZFz+GnMtKFZieAVgk/z2VIVCohUwDhnYE7+yazSV JGdQwsvJx2Uybr0MAapo+h6MmJfcPPbXuFBMnNuFCE7Oz1G3UKc233kQ+tzUXKwq YWYjl0PUig9oaiiFhXDujAzXoyhIq3jLUDaNsBqc/CIKlVZNRZLihQMbbxHLNMJl ZUkjiLYsGGpM0C3nTQIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRx52TEkcEX7XBJ8m08uqRsCHUwyTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5zb25nZG9o b3RlbC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFF WAAAAXBwNxj9AAAEAwBIMEYCIQDWv5nCBm/rPqqkHUh2KIHCa0gT4zsChcaCuWe4 A23B0QIhANdPTxsaUvN3+i9DjCNruj3wZBwBXd8+rid7l2i8A3gwAHUAB7dcG+V9 aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwcDcZHgAABAMARjBEAiB3/tCe KuS7mmdEZvUVtuWPWXtb4tTn9t+SGSNmFhUgGAIgHo8gz0zvnnrQqBNG/rRDgtQk AvpJWGCL6+4QxsOa4T0wDQYJKoZIhvcNAQELBQADggEBAA/kv2e5IMegwBZgJ5gv KEafTXnUMghQxOUCsDDXnATeaKsE3D2Lao/Wg11PPI6A24AP7p4VRX0rCMLxglwK qrOM3TlZsJ8ohM26HOOYWuv850jfRTi6kTP/x79GbfqnrodXRBBIaQM5RCp9BePW 3Vla20s727pZ2yKLdeaBJGr8StcmpH/vNcZa82TpSv6m0enatP9MpprFFJ+q/PI1 k84Im1BY/hvOXX2iJGFDs0MoTJ0SGhfO+MSockdu3qObqaESrEwa0XVTPFk5iG8f 4jAkjdY3pJb05/HauLujfFDtlPfeGT45bZYqD7ZGt9ZTqigfJTex5tCIgEsz0/RE mR0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7pymuJA5yopAB2WobiYy GLVLIsK+Jq4Qws0OQY+EJaBa9Fnesm12R4Ip7ZOTaczgfo0LHvjoZxf0ySsBhLu3 MgvOs5YqDxttxmuK8mzD0qENjwzqJPqTG40EjWwDCLuN/5BcXMyYvcAXqMelO6XY 1dEYnHsIKd12vW0moaquh2xTaU6oDA/mXMXwnccV/kY2UpgpSd4xm5rjQw4Vf9H0 I92fae5wE9gYMlS8A7AftJysiVNwS+umLqhELR4Cu73nMaV78h9M+SXsMh8i1eP2 ZnqLE0FlPUVckZ5LWb/yfKSXKwMmk0Xp7HIlP2J2PH3JXy/sv36tcaDS3uLbsfal p1EJNGbxfpU1bkZ9yR74pYhMbgD6ADTelOvm+rDKv0FLZyFn+akR13tQoBKRwwZ2 cKPmBas5Zl50C8eSXcorTx3SfON8mTgXflrNvEc/E8Q121BmxkJl2Pvn/yVoMkGO ZbUgLZcO4emdX37+TYqiLdmviCvtyWRc/hpzLShWYngFYJP89lSFQqIVMA4Z2BO/ sms0lSRnUMLLycdlMm69DAGqaPoejJiX3Dz217hQTJzbhQhOzs9Rt1CnNt95EPrc 1FysKmFmI5dD1IoPaGoohYVw7owM16MoSKt4y1A2jbAanPwiCpVWTUWS4oUDG28R yzTCZWVJI4i2LBhqTNAt500CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 373133141476051812279958951955032362524284 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 03:03:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 03:03:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.songdohotel.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973451699743325614243326486097930326945359769755080492168344703635687953985076054272079406846311106221947065598301704612768843499581253549015049352339501254930564833751046922934823932689446030956240855654461101887955040428210187652774684857745216361790365142143933565315443211038332119883159612866954119920261726034911543921773326103103079900489262550263242980719861192986934840996503352696793486555537534799168049738319634589533438550088894495880724386906746346253558141239867197290445648623616067327433036481051667498331017138850244167948527001458735254510716256999455288747782707674158131048006504669075813986395786958967117734830243392978229635101678707777912527645792451973757576820317270552427826865349057985346453682316968572741664865414047451461745922277500121866083663668476789473193034362164524979920943355439199179367133425955657599328443502257263819388576136116977962353566314722964459121169653237735499058918248604876238949394691427068752208105220500715943302449006474431544408438211476376293126682441926086348600711469375870336562318502185466574844767437111302465182581397803618184343041556137874345212277132914706765496057431581335412282503504026141617188539402195417093667992842105487855792205966051444322763340113741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 71e764c491c117ed7049f26d3cbaa46c087530c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.songdohotel.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170703718fd0000040300483046022100d6bf99c2066feb3eaaa41d48762881c26b4813e33b0285c682b967b8036dc1d1022100d74f4f1b1a52f377fa2f438c236bba3df0641c015ddf3eae277b9768bc03783000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707037191e0000040300463044022077fed09e2ae4bb9a674466f515b6e58f597b5be2d4e7f6df921923661615201802201e8f20cf4cef9e7ad0a81346feb44382d42402fa4958608bebee10c6c39ae13d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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