www.visitnagasaki.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:57:b2:c9:72:6f:f1:ae:d8:bf:de:ab:19:9b:f9:8e:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.visitnagasaki.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:57:b2:c9:72:6f:f1:ae:d8:bf:de:ab:19:9b:f9:8e:97
Serial Number (int): 312155501616805663749689701200115598462615
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:85:67:34:db:3c:be:b1:9f:a4:19:9d:b9:db:61:bc:4b:f1:ef:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:f7:52:54:6e:e1:f4:51:f4:9a:36:85:44:2c:6c:fa:16:d8:96:59
Fingerprint (sha256): e6:b8:e1:29:b6:ac:0e:d7:7e:76:48:fe:af:e6:45:b1:a2:2d:39:01:d4:5d:12:0f:9a:b3:f3:24:8f:78:cf:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.visitnagasaki.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.visitnagasaki.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.visitnagasaki.com

Other certificates including the domain name visitnagasaki.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.visitnagasaki.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312155501616805663749689701200115598462615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 11:19:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 11:19:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.visitnagasaki.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938323692632752125658263850662442567700701369856523501972997456969676690452735176860258551731658705383690444933716695541334046098430530937137161709318936554338559764780652315247851147541661237196459650442985276360217655536098621550972074688149187755430065875471961699146062639452461846531469596096810449194234497754417727713711631988163518145387410946982250015101698941895853098494074311296219724113213126472996365949222638177481666640857341853785159727550811558960071745450165594504553679448780133106245570203531928061338681749864781073460190642464762488771195606737327474669819964013692991768842215279394114564837613388358331462620242395832249200382132652466772904143925486962104266921728819156123187650799004285796075421187464463539253317098538354498330903874640537763902446915392722737969025341012044480475406336990487853859169849617386689555695736584358466652820988943235922118617064417907969275678605867315479840671124079469833869974206907444518843729534807960256455407501877146550105424807409015899967196381531028188234569422990734918711674797738305603467362213076634248958974793321746298091003555409374831358194973338822474437960142202734076503101048898441205984646813657931347537103353937089700090933739748252139033573172411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18856734db3cbeb19fa4199db9db61bc4bf1ef8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnagasaki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170c4629d9f0000040300473045022100c57458bec24683dc7ff3952345d1c2e1364ea6ea57ab0ec837b86aca05efbba3022073f3acc5eb66b8b860ae4815cb5009006ea7685541e11460d2767f7d2c724f0900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170c4629df4000004030047304502205caf71659ec08a8dd55eb7acc72ba43aa01ee599b5a107baa4f171ed49536354022100f37de882c24b8c152015cd6cc731af997fa58c8747fab770141c9cf466843aa8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e1eaf4760e366244c10f5299887c724f616c9a0d0f023a88799833029a5ca2de2a3b729dd19c6eca12a87bd250d48c9f38df247050552caff86077f69102ee6adfab25b2fab93cad4df9fbde39ed264cbb3a8ded1e6cd4d6c76a572bad6aead742fd6b202e0200f5904db584f10d6e7ba1efc9d693b39cdca7415894d774371cafa57053d26637988483ff0b9109009d5178be563f8e90ddb3fb3d9a12f40b79214c25bd4438ac64f6f2eb93f0cf45261689c29f2d8e57795e28fedb3bb574d67277eb7ac2ae919d52076ed760c6b2a9ce86e6e4b877919bf29b4c462a979dfbc97391d0c13552ad6f70c127f81339bb59376ebaf18b337c0a43ccdacd8aabd