DV SSL/TLS Certificate for jca.com.co

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the jca.com.co DV SSL/TLS Certificate

This certificate with serial number 06:31:9d:c3:20:23:de:db:fe:07:13:71:18:e4:35:fb:22:c1 for jca.com.co was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for jca.com.co provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:31:9d:c3:20:23:de:db:fe:07:13:71:18:e4:35:fb:22:c1
Serial Number (int): 539557253514792175304281368311466445972161
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 86:80:39:e6:a1:cf:f3:d4:8c:50:2a:d7:5c:ff:71:48:00:a1:39:ae
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): cc:32:68:97:4e:74:82:0f:ce:b4:5a:da:f9:d1:a2:a9:13:d3:df:2d
Fingerprint (SHA-256): f7:68:36:d0:0c:f0:a8:0d:f8:53:af:47:7a:88:37:eb:cb:0d:13:bc:e2:51:08:9e:65:3c:b3:d5:18:a8:92:c5

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/66.crl

Check the revocation status for certificate jca.com.co
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for jca.com.co

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for jca.com.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CVTBTMlTtJGuYtbSQOo
PilNMmSb1AINc7NDw1aBQtKuxQ2qX5Kfeab3t83TRfruCJb9RLOrgXi7QjQsFIPz
Lm+K3TRyW3KLPbvFCWT5R8hFNqHPYVqclrI2fCutMezZ2da4IKqUzh2ChGWPEz0+
RswfjxiYUnLMIap+MJ3HyXtpd/KxN7Si3guPCPhTmhOGV+/eIcX4FvEHhPAJsfP6
3G/o5Ax/c9stTRc4NlVN6zbN4uVZ+SG1/AJKE4BIOsjgJKHFwDEH9PLhbceBPPi6
RyrBQqKu18xN+wD+V3SUDEIlqWJK4ayLQqWGdpEYKGYJGANiJzMfJNhtVwiOTLFo
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 539557253514792175304281368311466445972161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 22:58:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-26 22:58:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jca.com.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30315598489218292521914521738464865813199892323983785178541676222274950425871740552441639968763211795089491982641181678108713189146898203868346501368587073498438390626920261811768745055625165148656430528475540698985372954413969177321367315689698967728465730896783064664037139493230906005996651984648339220138113759623298540623520063201118830243209244912316814646300137462248886873153964411222484193217097983802048501668889981740266988245607598680531222401220802692992490873040177255027729467816872598237536759982756690556655950826726156251777980387988682914978274538433104685851247185658667251895551820168792554694677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							868039e6a1cff3d48c502ad75cff714800a139ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jca.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jca.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/66.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001971953ed880000040300483046022100f727cc425f144bbba763d46ea47ccfc33bceb7ef16550ace77208a9dda16255a022100e693e9fd763b7139d19c52a49aa03ae5b206cbf48143f44520f9052bf5dd241d007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001971953edcf00000403004630440220600b9cc82f02d1767b98d4a5097993e542c481ffa6c124ec59eacc2fbd64284002200334ff289cd6f90f64a930ff243e48f7816bf590bab4215f28b4e8e17a0da5a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00567acf07b3b9b763dfd5e460e9437d760ccca2389c09ea22c960a1d483dd4eaef536135080294c44ea2c07a2fcfcfd30cb5ccd486ced37bd32127ff361d188cc64c5efd7c266a5ae2a2da502e0d70547226d337a62bb25986df3c4d55a5f51b28375e94ba998e76344970d6d7accb38f737eda901bc90a8377928d829319ea880c846274e6028da26203183f70bfe1bb11a0658365fdfb86648d152a87cf9b923ca18249aa247fc19a415fe2303716082bc0d03e3afbc5e55800ead4625621ab730b6fbb643dcff9574b1cf913d431ac1ea00b58161a49e4fe96b3cf46aa8fa2ded893b68d4aad51e39b435f069c1b3aa0295eea5431e18bac625f85acc2d020