bandbtoscana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:dc:51:54:94:10:00:74:25:b8:fe:e3:08:5d:fa:f1:02 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bandbtoscana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:dc:51:54:94:10:00:74:25:b8:fe:e3:08:5d:fa:f1:02
Serial Number (int): 329686183630039782513122319499107417911554
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:97:dc:df:50:fb:42:bb:d8:3d:df:ce:8c:ea:dc:62:40:f2:eb:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:b5:28:f2:63:25:fa:fe:5a:98:98:eb:a6:f6:da:e6:bd:d7:7e:a9
Fingerprint (sha256): bb:43:22:e0:04:25:a1:08:29:12:1f:f6:30:50:a2:a5:f7:53:b7:a3:4b:77:35:d1:29:21:a5:5f:6a:b8:a5:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bandbtoscana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bandbtoscana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bandbtoscana.com

Other certificates including the domain name bandbtoscana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bandbtoscana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqxUN9qFXWd4/DkIlTLmi
MCQ46Vy03thLfJla7lniPKRfjJ+BRN1+lUQmDLyHfI9M6SlIKhMYQ+25ne33tm+a
GfxcpYbs7LPsK3tutvznUQqOqYzAp6YhnoXq3qxSb1m9JQpvfgBsh0n6S9Xu+LHv
sXLmF7RNhXVGxstGdzRmBLOXo4kFW02I2IqysfkMN/ASKTHcWZnQiHz2t0hU7koH
5Wg2iZ2mB7kWE74Y8iTAMoWJvRABZi7sqprbzwwyGFukddrCvtFQeoVmo96KYyUa
BjhzyUaoFk81ISnriicirTtzVeQ1QYATgBpJf8H1S1a+E3GZBIBvIqGhtwMjGb8+
o9Rsv+kSe57zsOPhdK/3z2AHLucehaYvCU1sPdIi1iYs/q+jsaAAV7Aa1dqE9O8c
DzYnMyWUsib6/ieWByvKiTYYHrtdl7/yr6xyDO8mRpW4U7kTBrXDzxwZiq+hroQy
hmtLDXR6JGVpmMPrnzZVWQS+CM2Nhl3f+mGfWw66KJR1WwlN50lG099a2jwAH5ZX
NQETAVZFdybfWYP8JGsf0pM4oeVbZusKYFf9OnTdP7jm9u3n7jXbpAyzKJTDGtXP
Rxek8+ppSiIzANVOGGQUYX4CV/E1NliJCr7lhTVIv0ytghZOQKYLEjzSmcZFki7r
9SEroD/+tX5Fz2qBDbwPxikCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329686183630039782513122319499107417911554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 10:57:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-27 10:57:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bandbtoscana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697954663161487670070568764575192056106643243655385558777650783533401564776407210116667820394249135032542839939892405721929899135931927124330726623278848956138356094010281731520156529065181074740761196618286093330315633891697980110832883366352842752936648254781873669944113638245106343118610375251560440948346540328978350337854557234600875989803187316396823716964848865430690201712155316768991278925614773928003510441898147977709322372619350173571425381063983275724409712817152864316229158655329871814972514525144237202138594757401347659832853282582996891307254584776444845238803284735601529996909886257524396396835729384951223934253426836315698875516339518447763653013354941116487079987604501933152230488005951917751692419241081242420090588146252283265768608401217733647348439946647863017009059955547441664064992463569369758574145271747593304525509362435397933292914294680226420455467907228686647182495912159824077133824913646686285509681001877493006504578866723085162242149916899419756748312719445708695504801742940803270251839151451836933237725417280712113218771812715887953876708695313464279042311966110408882591915204129148780185500972063602826145748865207217864986029610590971230360187485251434980736512266893049145453228049961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3197dcdf50fb42bbd83ddfce8ceadc6240f2eb6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandbtoscana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001712626fd4900000403004830460221009f27125229ed559c5c47509135bd4be2f4bb7a0e0859695b45150081a0cd738e022100fe31bf07f1b03cf243de016363f0c73d1a1e27328db5e21c041240e12bf26c0200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712626fd700000040300483046022100d5e048dc22298c7b6970005a4302a846b71aa221264c0f7ae13547be2469f2dd022100ed3361a6d7104405a23d9cc326bdd153a4954998989c9c1e8e62113adad7f974
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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