grandevitoria.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:48:34:e2:ea:19:54:53:f4:77:c5:f2:67:d8:54:ee:dd:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grandevitoria.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:34:e2:ea:19:54:53:f4:77:c5:f2:67:d8:54:ee:dd:e1
Serial Number (int): 373019772208310050005775972190126263426529
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:72:16:91:b6:7a:de:fd:40:29:43:8a:d8:d5:f1:25:96:04:68:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:65:7e:33:4b:4e:e3:ae:42:0f:d3:f6:4f:b6:70:58:cd:c8:5a:38
Fingerprint (sha256): cb:8e:a6:7d:e5:dc:06:7c:64:02:21:3b:1a:c2:5d:28:05:0b:66:52:3d:4e:4e:d3:ba:9d:71:ce:1f:2f:96:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grandevitoria.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandevitoria.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grandevitoria.com

Other certificates including the domain name grandevitoria.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for grandevitoria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISBEg04uoZVFP0d8XyZ9hU7t3hMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTIxNzAzMjBaFw0x
OTA1MTMxNzAzMjBaMBwxGjAYBgNVBAMTEWdyYW5kZXZpdG9yaWEuY29tMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArEqRu5GC/JIOYGZzQ7XCal4Xkn0Q
buEblvvjrM+5kyJBrSe63QW8Ah4yrwnJkwKisb3VkhBybEZnL5IJvGv+LFzRrDxn
LFIqyt174Pa/VEWAuRXbGcOisSlc4ejdWVyj5uWI5ZnqRzhLvlAXp85W0/qxtyoO
XagD2nUbGMBJBx4+HceY0238w3O5jZhDTTEZ0hTEGOIpg76bZX8Rj0NY0GKifQmu
FdTZFo0C04Nfj1Hfqa3qc6W6lZPzFQjhecQVQGq9hvXZOh2LdddT20g3tSfKI0Ed
UrZKYe4ChjCAkm+DCYOeMfubdv5qH180pyeLIX9LFFYqHV5nxddtnRQqXtiueII1
Fl4tIsb1JzFXWwydupFF9hejDSCaZtqMUG09DLHPBVdKTXKn+A9ClrT7y2paOMs1
1dVpHQproMXkFVxt7htrj0zhe5LI4S1iFEIhNWlFg6ioXEcb9VMGs/GqAegbgPbm
DheI3EvxGGjuv34iNS+jP8LRAhEFaHHZg/ZiBSBYpwPFJC3/f2FShjJV8S+Eckal
qgTYn1tNyPiS4hsZcybWMoIv8ie77z6LpKRf3sfTHFkSqvcABXdO/P0oqHxFr83C
7npPXLN5lpiIEGkT3XX16Zcgq2mapdYSZPZ/ah3HlIO4L2/0yGZfibboWk49yW2d
tHT348QJeY4LQwsCAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
dnIWkbZ63v1AKUOK2NXxJZYEaGMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFncmFuZGV2aXRvcmlh
LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
aOLgppwAAAQDAEcwRQIhAKuoyMaqLUJgByAwlEDkXrpUGC53taH8vPhlAxvwzW1H
AiA82E/K5kCDlQ3rgm53PIVFNb66r9lIxTF5qnR5tgXDagB3AGPy283oO8wszwty
hCdXazOkjWF3j711pjixx2hUS9iNAAABaOLgpqgAAAQDAEgwRgIhAOYN79vBQR/L
hD8d62u4E2mAaLcrXkRcPeYem1LSHthqAiEA7xKhYgt8boJRCPlXQI+28U1d5Gy+
Ly6PhP9kT56h7t4wDQYJKoZIhvcNAQELBQADggEBAHG5iwcEzyrXkuPARrtabMSm
IEBCej5hPCm+f38lvcGMJ+UQVEy1zKpGU/1sQW8gXK2MOgH9Rj0wJuXwwiPwY/5C
+hYRq2y6Euzx4GVENgVXwBx0bufRvnva83gGrujbZNyURhyOAZKTXAFBbfoSnjjL
2nKqD0goXPcEmkhYMRS5l0i6hcl12YWJUpu4aWWjSsSHo2Y/j6nZ9kKyfpKAyEzI
ic3YtwipO5HCx2WzTrv7p81H67E0des2eN65pKsBK5vr2BgZS9lQoNqWaG0Qya85
PaC4lWOG2Fr+JGuDTOE/J6THnus6ImYN59hJUP9Z2wr9VuVF+BIVXMNJNWwMqBA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373019772208310050005775972190126263426529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 17:03:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 17:03:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandevitoria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702887123735184230730104077264558522681027522098934378004309848235667202123084627420208586086173489692413031309279377203260371565940452017136799050956149506906406462164152345066528715398574845304385755859562166033696050582259135031017198544581568261373127095370943543088322721856761164476642327048882146293253088270319923296426961009315227940598962764319457724311617515841936059729658584611844623959579484309302369596154918330663858667638014498873475779125605235973450501489254114120274949205598393393675836727213593392372198157138719253784445136059229479870602926271899019496677992055498350016983443665295916566514366472944681877019711611218650002973956708011767959478405189512074462884450513694676265989404542394421987574248956434132482449273499695089077950037440039356141061906029364584563220381414865085877384221757595304589350738262629503083124248638230798981352458036181034513654589818525035251648019090923963764909456763958035305360024020361117265114221331034676175654768389732278864176749139150308041975089805660891833477578626229389862161498152062019572174051433025066217963622972519691978646699005230405708781277837934512453015682503113249429374145016345541912097381164629339534951703069056291380083746018077830591512527627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76721691b67adefd4029438ad8d5f12596046863
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandevitoria.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168e2e0a69c0000040300473045022100aba8c8c6aa2d42600720309440e45eba54182e77b5a1fcbcf865031bf0cd6d4702203cd84fcae64083950deb826e773c854535bebaafd948c53179aa7479b605c36a00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168e2e0a6a80000040300483046022100e60defdbc1411fcb843f1deb6bb813698068b72b5e445c3de61e9b52d21ed86a022100ef12a1620b7c6e825108f957408fb6f14d5de46cbe2f2e8f84ff644f9ea1eede
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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