bandbtoscana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:11:d5:f4:7b:dd:dd:fa:c1:b4:ef:a8:43:f8:4a:80:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bandbtoscana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:11:d5:f4:7b:dd:dd:fa:c1:b4:ef:a8:43:f8:4a:80:3a
Serial Number (int): 299131908317385792696634150856731543633978
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:ae:b4:5f:d5:2e:f0:0e:7f:cf:98:2f:e3:6d:99:e8:2c:50:90:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:ca:66:99:0b:d8:08:ad:9f:b2:1f:52:73:fd:5b:a6:f8:8b:53:f9
Fingerprint (sha256): c2:dd:8b:db:6e:6d:20:f8:c7:64:b8:31:35:e6:75:7e:5b:ee:4b:e6:c2:1b:7f:2a:46:13:54:ba:4f:4e:2f:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bandbtoscana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bandbtoscana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bandbtoscana.com

Other certificates including the domain name bandbtoscana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bandbtoscana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299131908317385792696634150856731543633978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 13:46:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 13:46:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bandbtoscana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859669691727338761177286664220023568275810160273119374469331120918870403752296737323795032807131826284612176813076695316033414611990198928017827114406432432345230151513634381382526919160021687056789148696831204635532032583125154048490446437119261076010719677789636090821910718915055761572309973409340873866138161130363635588880320754298948011371162662326848480608363065781666120486385928543739766301373207529942819120922429897823796446675815959251848094941631011936234379417501867076923754405756632795892935067970875116509700176724853165470435408820302100329535984157107434657546533379615205888919654540630726656217358719602328885434328072744972140113400691664135258301701178343984705721576574783573931850024757139384244375405758153015047351324475079410995966965080149147142520735532718208814386127273371590327812357744732489494961346647536190173805245890896812830588885526086852422221103790044918071956602664240932915584443048475197641420362300767637326247103004458215322378796362546607988610240359834939185418161263000412255430102765763316294448777701736540011073270427520763766798007477215473601076749563874831515531696320800131552265708920533222542695381987275138641004098790689092556042259993615854423954703873254894213513236051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1faeb45fd52ef00e7fcf982fe36d99e82c50909b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandbtoscana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afee88ea60000040300483046022100fb8b4aa2bf96d0f099c41a61d88a0129898ac9fb061d0ed909f73b2a48d7058c022100d6b9724eb9c8a43a19f12754e4438a3d2166f134c6d761056a1a39a8161ba0d700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afee88e980000040300483046022100c3f9b090e9cf187862de2bd976f8d2b1eb7c724581cdf9983fcd17d1b26942c8022100c41e228e9c468a8e99d89ea3c48c26d5e6e7098181b3486b591775b9dec9d227
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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