vivienda.app
Issued by R3
About this certificate
This digital certificate with serial number 03:6c:d0:99:10:68:7b:70:65:29:bf:ab:99:64:de:30:ea:2f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=vivienda.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6c:d0:99:10:68:7b:70:65:29:bf:ab:99:64:de:30:ea:2fSerial Number (int): 298364627600081197417646495897707965639215
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 78:56:e5:e8:2e:40:df:c2:e2:b9:1b:ed:0d:cf:b7:1d:7c:e3:05:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f2:09:6a:c9:6e:4a:3d:cb:3d:1f:ef:1c:6e:72:52:b5:96:95:9a:96
Fingerprint (sha256): 03:57:1b:b2:6d:05:8d:6e:3c:1a:d1:a4:94:09:99:b3:4a:72:74:c1:66:9a:bb:61:53:4f:e0:3a:d3:30:77:e8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate vivienda.app
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vivienda.app
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vivienda.app
Other certificates including the domain name vivienda.app
(limited to 100 certificates)
Certificate
The complete raw certificate details for vivienda.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISA2zQmRBoe3BlKb+rmWTeMOovMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTQxMDI1MThaFw0yNDAzMTMxMDI1MTdaMBcxFTATBgNVBAMT DHZpdmllbmRhLmFwcDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMQ9 Jpa8Hc+EDOLGifI/F1/3fuVj+QB3VYy8OAzEiOpBLfuWkwc75G1JAvverlKT+qCe 1YRLaUVthE8zu+SZXN5ES3PDlUwQDhfLiclIwZNZIrcgt3cN8HGABYL6OGnwsQuf asNGhKbtkEu26p1uA0sA33wopxh8+N6tAcDnWZE81x2fHqWWPEjvMjh2GLrbYdOl Px+icWQqndmNMjMIWY8TZRq1M2UuWczSr8lQJ5weoHnwE2zqDAieRg2l31m6X5XC g8pA1WC9NtwZ1AWWxn/i/3tXGEFG5mbfCWvfgzHu5Blub6MVkDeYOwBO3CTQ/dMm s5oGz6B7A7Lt46DbAwnlQtB13xRG0yRymiapwBC4B+KgBFAdI5WerwPiUV7FDCGN Yl3Vu2UBvt1KRZQcFH59vx2CJ0d0oo0BAGFvx5ATVJliNBEWgyg/eGciNm4Uw18Y 6qansBECcdIWYhoc/hzjW1r4ovd0bUwvtNjpeEM5rKNOOB6Zmp9mGgdzGjLysj8E 8OZLF661jl8tg6mmFuUUUlWI23fV/GdOK8Tw0rofgNxPixbTZ7Og6/BR/iUa6leZ xqXPxa6hdEGRrtWak0s6kM8s6lS2vQw4LoisRBvg5z64pBC/3gotfhMLjHeMN0bv BV38KX7NYrLWZerwDDFj9aOodBcyCtGqeoOI3MT1AgMBAAGjggIOMIICCjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFHhW5eguQN/C4rkb7Q3Ptx184wWwMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDHZpdmllbmRhLmFwcDATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjGgS6EkAAAQDAEcwRQIhAKx24whn lnEkdf2qdKJD8vH+xLUi0W25nFTXMdi0fkmdAiAMUWFROiMlPpH2pqqLNhaI64iT l2DOwPPSoPKz8nBZ2QB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX AAABjGgS6EkAAAQDAEcwRQIhAP56AcMy3NQAK4b+zAW0ECXbGZkrINRXqfTyATiy 0VgwAiBks2Iam+zmF4l2lh0g4cRABxPzxuvybnVvbZEfoVJ/sDANBgkqhkiG9w0B AQsFAAOCAQEASLut/uge3Z6zvSNwSeKRcyZZcO7DIwTqOFq83adlHGESCKzm8QUz cCbkjif5tIbqX7SxnlL1q2GGXZ1nOzuYQSMV9uK2RpEhxrzqgz3ymYNj0JEvbz1X +KgFkFEmS/NozH1s3W9N74kH7fTl3guZ17fJFd1v9ZDs6//oDrUJCBrIpz4UMgyo LZ61/eJjFE2qdmDyDGbK025K0U9vvX3nGXrMHdlSHNJ8YxGPYC9v+uRkXEDdWy0a eOjvAk7xe8x8E4krh1Z02p7ziRXhL3QmuvAjlYYzZQT/D0gwsGm7b19F6WBfB+vN mSAgs/X81wBoE3DvfFZNcuBoksE9jcb92A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxD0mlrwdz4QM4saJ8j8X X/d+5WP5AHdVjLw4DMSI6kEt+5aTBzvkbUkC+96uUpP6oJ7VhEtpRW2ETzO75Jlc 3kRLc8OVTBAOF8uJyUjBk1kityC3dw3wcYAFgvo4afCxC59qw0aEpu2QS7bqnW4D SwDffCinGHz43q0BwOdZkTzXHZ8epZY8SO8yOHYYutth06U/H6JxZCqd2Y0yMwhZ jxNlGrUzZS5ZzNKvyVAnnB6gefATbOoMCJ5GDaXfWbpflcKDykDVYL023BnUBZbG f+L/e1cYQUbmZt8Ja9+DMe7kGW5voxWQN5g7AE7cJND90yazmgbPoHsDsu3joNsD CeVC0HXfFEbTJHKaJqnAELgH4qAEUB0jlZ6vA+JRXsUMIY1iXdW7ZQG+3UpFlBwU fn2/HYInR3SijQEAYW/HkBNUmWI0ERaDKD94ZyI2bhTDXxjqpqewEQJx0hZiGhz+ HONbWvii93RtTC+02Ol4Qzmso044Hpman2YaB3MaMvKyPwTw5ksXrrWOXy2DqaYW 5RRSVYjbd9X8Z04rxPDSuh+A3E+LFtNns6Dr8FH+JRrqV5nGpc/FrqF0QZGu1ZqT SzqQzyzqVLa9DDguiKxEG+DnPrikEL/eCi1+EwuMd4w3Ru8FXfwpfs1istZl6vAM MWP1o6h0FzIK0ap6g4jcxPUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298364627600081197417646495897707965639215 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 10:25:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 10:25:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vivienda.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800584742189848370132723095533170060967410920240930246961238047188196177558929503204597476480694799151786590442437933764856597004975478795467271965086192043858616253699354074827866289727990569262049476900696392134902933727472619276450095076266672350350470589478106532049005125429693791497944951342334483629106765294311606977778661971889738044913897497814118755631356403249060205415186128567757756816943920191008912042493514228080086459913868136345624770481654603164021672016628812064010252217443498868970318196312183922135403688912761365918714105577873890739936444251341816453664812480561079087523324677077294826197329172878375556849939873377720118681439620896649914830784387184541154067726531743707019014433233577287433614948379804470183739456384379828053910287476513627028425454448464955479175057020366775433867240194337335447633573274919775335373875496681905424238425818214821081877251838741373976878670648761782858318240778649610604944155805810069033339871891735318829588679547520070721792642827471752085016027933613636267122932102447493854923218086812665996413504284603353455793775397071404907215265273075999701440675698820514884244448705322895140086189638566206187182042052898660724936546470129654631205082349727398357437826293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7856e5e82e40dfc2e2b91bed0dcfb71d7ce305b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivienda.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c6812e8490000040300473045022100ac76e3086796712475fdaa74a243f2f1fec4b522d16db99c54d731d8b47e499d02200c5161513a23253e91f6a6aa8b361688eb88939760cec0f3d2a0f2b3f27059d90076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c6812e8490000040300473045022100fe7a01c332dcd4002b86fecc05b41025db19992b20d457a9f4f20138b2d15830022064b3621a9bece6178976961d20e1c4400713f3c6ebf26e756f6d911fa1527fb0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0048bbadfee81edd9eb3bd237049e29173265970eec32304ea385abcdda7651c611208ace6f105337026e48e27f9b486ea5fb4b19e52f5ab61865d9d673b3b98412315f6e2b6469121c6bcea833df2998363d0912f6f3d57f8a8059051264bf368cc7d6cdd6f4def8907edf4e5de0b99d7b7c915dd6ff590ecebffe80eb509081ac8a73e14320ca82d9eb5fde263144daa7660f20c66cad36e4ad14f6fbd7de7197acc1dd9521cd27c63118f602f6ffae4645c40dd5b2d1a78e8ef024ef17bcc7c13892b875674da9ef38915e12f7426baf0239586336504ff0f4830b069bb6f5f45e9605f07ebcd992020b3f5fcd700681370ef7c564d72e06892c13d8dc6fdd8