visitnagano.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cb:5d:cc:8f:19:7a:ca:12:7d:d2:88:1e:ad:4b:ca:a9:37 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=visitnagano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cb:5d:cc:8f:19:7a:ca:12:7d:d2:88:1e:ad:4b:ca:a9:37
Serial Number (int): 417651144546561911797159773024351830059319
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:ed:91:a7:42:74:e5:a2:60:d4:1e:cc:2b:ba:ec:24:fa:2f:89:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 99:de:f5:87:d1:b1:20:cb:28:3c:fe:5b:a2:9f:6d:49:dd:ac:4a:31
Fingerprint (sha256): a8:41:d6:63:fe:3e:a5:3c:cb:b0:76:97:90:52:5c:29:9d:cf:5f:4d:82:55:72:a3:8c:9d:f9:0a:8d:95:34:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate visitnagano.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for visitnagano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

visitnagano.com

Other certificates including the domain name visitnagano.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for visitnagano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417651144546561911797159773024351830059319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 11:11:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 11:11:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitnagano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703395696443259155018472856147391555456499543406960972130441686089669432180569172346222333597814718779486837337808297223674804346638404679383391152898444026685147481471115579381585519102318591815364877784950732166850261706895099341240068868933584793238593906126932201880777203201276660098483317401148571636737542281194266082365607389631303136505902909877164180237534731533864406323507623286581291269418388090988671873271263453508515646775046677407810801435825254107108445194135548987058509700373049741263155982190666178954274609556401147042981129275511494663931262128523843387780275304666250243774313127120582299107699425702760652850039919612805332097100321899977289778064669890743056564359609031793259161499164289948051117908387987473873101766549022658526016327848375506555533962530540449801387545305948801374200072235171639872876399581881830449460089916940159506696579083929647639726403028802073202883538441883297195908030822229910447522132256007271605850245189946035090293099171416953429944371855236491681041112221558957019016121311648308027362312322020726268224608082147982804230390124989099476162958192679410203824660828536116526939545261526350856665355821887137840065676649815924502425223738960395658279629877750050357123743777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bed91a74274e5a260d41ecc2bbaec24fa2f898d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnagano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170c45b16050000040300473045022100b677e075c71d46d51efb5744151e653af5582d736b48bd9b4bdf590968e1198002205412a28d4edfd01687976f7246290edad885c4e1457f7625106eb5877dac43ff007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c45b16010000040300483046022100efe6f49a67b5a3849b9216f8c4b9c46022169557297ac5a6a4110469c5082efa022100d6c2d60393f4edfed7ffa624e86a1647da1c64727fd43d092e9ace3199292c2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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