bandbtoscana.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6f:11:d5:f4:7b:dd:dd:fa:c1:b4:ef:a8:43:f8:4a:80:3a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bandbtoscana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6f:11:d5:f4:7b:dd:dd:fa:c1:b4:ef:a8:43:f8:4a:80:3aSerial Number (int): 299131908317385792696634150856731543633978
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1f:ae:b4:5f:d5:2e:f0:0e:7f:cf:98:2f:e3:6d:99:e8:2c:50:90:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 36:ca:66:99:0b:d8:08:ad:9f:b2:1f:52:73:fd:5b:a6:f8:8b:53:f9
Fingerprint (sha256): c2:dd:8b:db:6e:6d:20:f8:c7:64:b8:31:35:e6:75:7e:5b:ee:4b:e6:c2:1b:7f:2a:46:13:54:ba:4f:4e:2f:d7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bandbtoscana.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bandbtoscana.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bandbtoscana.com
Other certificates including the domain name bandbtoscana.com
(limited to 100 certificates)
africa.exposed
hiephoa.com
www.bandbtoscana.com
bandbtoscana.com
casaldiprincipe.org
bandbtoscana.com
www.spaindating.org
bandbtoscana.com
681.me
www.bandbtoscana.com
newyorkrealestate.mobi
www.bandbtoscana.com
www.bandbtoscana.com
www.bandbtoscana.com
bandbtoscana.com
petfood.organic
bandbtoscana.com
bandbtoscana.com
bandbtoscana.com
hiephoa.com
www.bandbtoscana.com
bandbtoscana.com
casaldiprincipe.org
bandbtoscana.com
www.spaindating.org
bandbtoscana.com
681.me
www.bandbtoscana.com
newyorkrealestate.mobi
www.bandbtoscana.com
www.bandbtoscana.com
www.bandbtoscana.com
bandbtoscana.com
petfood.organic
bandbtoscana.com
bandbtoscana.com
bandbtoscana.com
Certificate
The complete raw certificate details for bandbtoscana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgISA28R1fR73d36wbTvqEP4SoA6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxMzQ2NTRaFw0x OTA4MjYxMzQ2NTRaMBsxGTAXBgNVBAMTEGJhbmRidG9zY2FuYS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDSuMPf3NGYMvEVenC1iF8AUaU7C5h4 bD08YxZyvhMh1fe1yKK0p+U1Vo1GSmUbQlHCgjSWBztIhpAwahmsh9dX+Jzm63Bu puLxGQzYuUKc07KfWxqZNBzxZdCSL1+biJgX+ruDgvjSfO2VPAOjApZdrlJHkdlj ougXTZputBBqUCIWUDNQnHNKbD9UH7CzxxsE6kCfSkmYo1k8BZlyQlRBFcZ4zBg4 2WS1c0Zbv24hijIiiserIDbzK0M5d1150fkp4imBgiO7h0m8yOZvGkZGvqC4bSaL ISmy3274PafrFOv6gWF1soMXCAUwuIk7m/ADrFetjfekvL7bxmgKl4K4NYw7XUqG GYvPj4WT/3EzE6KzoNmwwlrDtNWIWDhL9jURjXC6xnrw1qCwkXJ8uefLUacY+qTd 7W5S3Hl7El3w7ENZHBgHx6XtMDMnacv2hFqpmuNFVQ2HybJS6M/4bEMDViFY9Nlq jLszHJUgP6GQdN1CuCvKyyMUfVdSn1YobrxxGDZB7mpujSdi7GnhVFLIE7/aNz7B hUBHSmfzBEmlLNzWyWa5wPYydjCcNPuSHCGaM4z435bPsdkfSMLgz3x2HA09dxya EDCJuZA6VEHg0dXEe75P7EomVeLhT5+8rxcg9KW3ohYtL+RKc0F4mbgYD/dENCkE Au1DfSkoyyZOUwIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQf rrRf1S7wDn/PmC/jbZnoLFCQmzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGJhbmRidG9zY2FuYS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC BIH3BIH0APIAdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWr+ 6I6mAAAEAwBIMEYCIQD7i0qiv5bQ8JnEGmHYigEpiYrJ+wYdDtkJ9zsqSNcFjAIh ANa5ck65yKQ6GfEnVORDij0hZvE0xtdhBWoaOagWG6DXAHcAY/Lbzeg7zCzPC3KE J1drM6SNYXePvXWmOLHHaFRL2I0AAAFq/uiOmAAABAMASDBGAiEAw/mwkOnPGHhi 3ivZdvjSset8ckWBzfmYP80X0bJpQsgCIQDEHiKOnEaKjpnYnqPEjCbV5ucJgYGz SGtZF3W53snSJzANBgkqhkiG9w0BAQsFAAOCAQEATxh6geuszm52qtV+kKSFsfoU kcpE3cLuIE8EVZxgM6nMtfk/x2wFQ9JpHB1wt382QQ02ctsl3FT1FKEBU/2suXcl P6Q5gpq+ukSqS5N6c5TNEP7WSpp66RCka67rE8qVZT4SvQgUxrDTO7P9i41viOGX FLZPToP5IGvrJWZPj4yR7xbbyrk6kFAgajt/ZzEDcyY+AnLWU7z0qcIc/kRDHczX WgZS4TojaL8dT74guEdAUdcUFQy/R6u7rO/SVbCNJV9TzwQP+p2qgBVQmwGh9mQ6 G6j5pr7CzTv5pTbq+v3vbE46ZOW8sV8QWmnag+uhiBRtpJoo/+pSbpQEcdkm0A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0rjD39zRmDLxFXpwtYhf AFGlOwuYeGw9PGMWcr4TIdX3tciitKflNVaNRkplG0JRwoI0lgc7SIaQMGoZrIfX V/ic5utwbqbi8RkM2LlCnNOyn1samTQc8WXQki9fm4iYF/q7g4L40nztlTwDowKW Xa5SR5HZY6LoF02abrQQalAiFlAzUJxzSmw/VB+ws8cbBOpAn0pJmKNZPAWZckJU QRXGeMwYONlktXNGW79uIYoyIorHqyA28ytDOXddedH5KeIpgYIju4dJvMjmbxpG Rr6guG0miyEpst9u+D2n6xTr+oFhdbKDFwgFMLiJO5vwA6xXrY33pLy+28ZoCpeC uDWMO11KhhmLz4+Fk/9xMxOis6DZsMJaw7TViFg4S/Y1EY1wusZ68NagsJFyfLnn y1GnGPqk3e1uUtx5exJd8OxDWRwYB8el7TAzJ2nL9oRaqZrjRVUNh8myUujP+GxD A1YhWPTZaoy7MxyVID+hkHTdQrgryssjFH1XUp9WKG68cRg2Qe5qbo0nYuxp4VRS yBO/2jc+wYVAR0pn8wRJpSzc1slmucD2MnYwnDT7khwhmjOM+N+Wz7HZH0jC4M98 dhwNPXccmhAwibmQOlRB4NHVxHu+T+xKJlXi4U+fvK8XIPSlt6IWLS/kSnNBeJm4 GA/3RDQpBALtQ30pKMsmTlMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 299131908317385792696634150856731543633978 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 13:46:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 13:46:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bandbtoscana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859669691727338761177286664220023568275810160273119374469331120918870403752296737323795032807131826284612176813076695316033414611990198928017827114406432432345230151513634381382526919160021687056789148696831204635532032583125154048490446437119261076010719677789636090821910718915055761572309973409340873866138161130363635588880320754298948011371162662326848480608363065781666120486385928543739766301373207529942819120922429897823796446675815959251848094941631011936234379417501867076923754405756632795892935067970875116509700176724853165470435408820302100329535984157107434657546533379615205888919654540630726656217358719602328885434328072744972140113400691664135258301701178343984705721576574783573931850024757139384244375405758153015047351324475079410995966965080149147142520735532718208814386127273371590327812357744732489494961346647536190173805245890896812830588885526086852422221103790044918071956602664240932915584443048475197641420362300767637326247103004458215322378796362546607988610240359834939185418161263000412255430102765763316294448777701736540011073270427520763766798007477215473601076749563874831515531696320800131552265708920533222542695381987275138641004098790689092556042259993615854423954703873254894213513236051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1faeb45fd52ef00e7fcf982fe36d99e82c50909b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandbtoscana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afee88ea60000040300483046022100fb8b4aa2bf96d0f099c41a61d88a0129898ac9fb061d0ed909f73b2a48d7058c022100d6b9724eb9c8a43a19f12754e4438a3d2166f134c6d761056a1a39a8161ba0d700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afee88e980000040300483046022100c3f9b090e9cf187862de2bd976f8d2b1eb7c724581cdf9983fcd17d1b26942c8022100c41e228e9c468a8e99d89ea3c48c26d5e6e7098181b3486b591775b9dec9d227 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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