songdohotel.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:7e:b5:33:d9:a4:82:c9:c1:f4:28:da:9a:ac:ac:87:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=songdohotel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:7e:b5:33:d9:a4:82:c9:c1:f4:28:da:9a:ac:ac:87:cf
Serial Number (int): 345555026009599149325683151840174886651855
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:71:55:33:ad:b1:34:d7:7a:39:56:6a:b0:d3:86:d7:d1:1c:71:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:f3:eb:f2:2c:27:24:c4:cf:c9:5e:1d:41:66:41:92:48:80:ec:5c
Fingerprint (sha256): a5:3d:6d:30:77:8a:24:47:da:43:e1:18:2d:ea:08:fb:cc:36:17:ce:a1:b1:b1:6a:ab:30:40:a9:68:df:bc:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate songdohotel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for songdohotel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

songdohotel.com

Other certificates including the domain name songdohotel.com

(limited to 100 certificates)
songdohotel.com
songdohotel.com
www.onegranddomain.com
www.dailyirado.com
songdohotel.com
songdohotel.com
www.songdohotel.com
songdohotel.com
www.songdohotel.com
songdohotel.com
www.songdohotel.com

Certificate

The complete raw certificate details for songdohotel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2VLpuahgkMOYaj+bVEKb
JejY/l5vENDIgtCPc+ceYXMSeHOm/fhBCTzCtRa/QAZFHljpyVXPPgL2CKzsP67e
pBkNuuLZ47ejovqce6nOlcU5sMYinQCxe83rxHv7JwNt7+1NwMhwnexo+kyNbYnb
1u8Xsb6lpav6b+bR4e8bAHgtm/7uDysTorhqIdNSRqqYLmHaiOyyg4PTVDBJyuRY
0m5zfAP6rKexAS/LdyfesF7bFL8g29rUnsxDsrJ07U0Z/Umx9vQWQefCzmclmshe
oeGlllnCX7FtsSdI5hzlbnWhMvgJA+xnUw9MhqNcF22KeldtTIqR5IVVeHp2SrGs
A1OvRdJUgRkj5Pk2AbzrKV3KCcmSTHx3XhE6fkThvom15IttioGLPWxGopGtqj2y
wKvh3YcBvlX3vFy0I7Es2ib0I11jdyR1gNGA/bz5R9M1jkPoPbdVvNbbmNTyjW1i
TPwBZk4rrbdOoJ+raLzHzn5gnmzV1PIitaHiMUYBNnn6uarMHQKaIgi9lS4twmUK
xGwW3VQv+SH+BzRZml5MkYbP3txEsU1gk8ZoWxZBSrkzJvTPBag3jbAgBSICKSSZ
o1RTuedvBMfPom3Ru77TTlgyn8jLmUKefpX2CSqaNJrj5mZJCc3YGUEzFUaPw4pL
37rZYrc7RuD3y72KT+cRD+sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345555026009599149325683151840174886651855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 03:55:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 03:55:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'songdohotel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886604073246292299588461621296702612419688412846441851555794930620168311490836082587282882539187586134386911910044252684026638170546634665773689866756151279817635552233762502772529124659241827091574324734061197519110388718550615305995520318816297001773278603950815782979052818142938604265447019991623101679413164350448790985736059591578457413687836596776633846304055957605206709364429824155633989835093093498769339675874427354466453694198326041057979192295953417503083304546067507149533344096238519237673760741137702730866253935852272704990298960822130874934678552253352642233657326185891135973161337823560054799805808647006264782918630225076020960721627946195353614551261000022980364510740107489468310943968215506855923685798327278168897803590130463083122875068917080866029910407401331638296114338092648708416696471084265664777541559675510045672799436412782816997386330567107815771597079748282733239212100808701720218129572880586287486095353328871374355251515631760327475250443407115627630744814555501560652907261084228646405348766075307525167503257245420661799982026785505276292601477866544984516560527314169011688064952415973581628647919626745463034147169631795676677634326460845862237668463334540054410931355411040910494942695403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e715533adb134d77a39566ab0d386d7d11c716a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songdohotel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f311c59d40000040300483046022100d88cc556f54a883d57e247c8af480aab98af64b0abe29653bb99c69afd72724d022100f6399e53a487aa49329296b08611d72f06c28804b9667676605d596cd056780e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f311c59d0000004030046304402205deca3c536daf075639067c384537cb921839c207abdaab6d0a30b5999174dc2022033edde8985bd2a86a596caaccbed67f225964d5137f1cbf4c8ca910055912503
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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