bolivia.jaguar.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:70:d0:b8:93:fd:7d:98:b3:93:6e:f2:e6:68:28:3c:f2 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bolivia.jaguar.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:70:d0:b8:93:fd:7d:98:b3:93:6e:f2:e6:68:28:3c:f2
Serial Number (int): 356085313076264477110430564152219330428146
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:24:e5:57:b8:70:b6:8d:28:c8:8c:5f:09:fe:df:2b:62:83:8c:97
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:f8:79:9d:e1:16:a7:34:8b:41:4d:c5:e2:fb:26:ec:7e:7c:5d:cd
Fingerprint (sha256): 07:cd:dc:3f:97:57:c0:2d:87:7b:a7:9c:6b:a9:3c:71:c6:4d:0c:46:c9:56:e0:e7:8f:2c:03:77:8d:c3:08:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bolivia.jaguar.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bolivia.jaguar.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bolivia.jaguar.com
bolivia.landrover.com
chile.jaguar.com
chile.landrover.com
www.bolivia.jaguar.com
www.bolivia.landrover.com
www.chile.jaguar.com
www.chile.landrover.com

Other certificates including the domain name jaguar.com

(limited to 100 certificates)
tennis.yumpu100.com
approved.ee.jaguar.com
magazine.kueche-co.de
bosnia.jaguar.com
magazin.rollstuhlsport.de
www.landrovertanzania.com
magazine.kueche-co.de
digital.industrielle-automation.net
webkiosk.con-nexi.de
jaguar2go.jaguar.com
magazine.kueche-co.de
epaper.krombacher.de
magazin.peak-muenster.de
magazine.kueche-co.de
gaborone.landrover.co.za
catalogues.meister.com
www.jaguar.com
kiosk.greater.sydney
mediathek.stiftung-liebenau.de
digital.derbetriebsleiter.de
approved.kh.jaguar.com
magazine.landroverusa.com
www.jaguar.com
www.hochseescheinkurs.online
kiosk.miles-magazine.be
www.jaguar.com
kiosk.miles-magazine.be
kiosk.miles-magazine.be
dominicanrepublic.landrover.com
sds.jaguar.com
argentina.jaguar.com
digital.derkonstrukteur.de
online-katalog.baude.com
lemagazine.landrover.com
e-paper.moinmoin.de
www.jaguar.com
kiosk.miles-magazine.be
magazine.kueche-co.de
www.jaguar.com
*.jaguar.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
magazine.kueche-co.de
origin-jdxforms.jaguar.com
journal.flyskywork.com
epaper.immosale24.net
approved.si.jaguar.com
bolivia.jaguar.com
www.jaguar.com
digital.foerdern-und-heben.de
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.jaguar.com
chile.jaguar.com
serbia.jaguar.com
catalog.sogears.com
www.jaguar.com
digital.derbetriebsleiter.de
magazin.rollstuhlsport.de
epaper.krombacher.de
magazine.kueche-co.de
shop.incontrol.jaguar.com
prospekte.intersport.de
webkiosk.dein-typ.de
digital.derbetriebsleiter.de
magazine.kueche-co.de
magazin.landrover.com
catalogues.meister.com
epaper.immosale24.net
digital.derbetriebsleiter.de
epaper.krombacher.de
approved.br.jaguar.com
magazine.kueche-co.de
albania.jaguar.com
argentina.jaguar.com
magazin.rollstuhlsport.de
webkiosk.con-nexi.de
online-katalog.baude.com
magazine.kueche-co.de
magazine.kueche-co.de
www.club.jaguar.com
digital.derbetriebsleiter.de
topixqa2.landrover.jlrext.com
tennis.yumpu100.com
epaper.glasmarte.at
kiosk.storyboard.de
tennis.yumpu100.com
kiosk.miles-magazine.be
magazine.landrover.com.cn
magazine.kueche-co.de
magazine.kueche-co.de
approved.lt.jaguar.com
kataloge.quester.at
magazine.kueche-co.de
magazine.kueche-co.de
bibliothek.bregenzerfestspiele.com
kiosk.miles-magazine.be
kiosk.greater.sydney
shop.jaguar.com
magazine.kueche-co.de

Certificate

The complete raw certificate details for bolivia.jaguar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7khRAzHUCZpWposkI+n6
sURseYCoutcyWaa+RNJLCL1L6ThKD6JC0ytqm+vf80Vlwx16wd+RoxBPfj25xxe2
3OId83Zg4DfyqVU+X+HL/3HBS+/PSblo8reK4WtgSbf6JwBubOt2ccHybIJO8u1/
GF7up10h6EzuNifuBaQeZ4bLX/89nZMh7JTjNhIHs930MWxOBbjDOoKe20AbQfcn
7sTWTNZ9K9VLzvsCDM6peUya7c9vHEI2XWlERsr0sEmihmJwPTfpaVPCp1Q4Jdvt
G0bnpIONhwWdOS5RTFJuQgP09371VXSpe1PJJJqR91s4Jyo+vFwBZePzX5zl6Vxt
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356085313076264477110430564152219330428146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 10:24:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 10:24:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bolivia.jaguar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30080377154968417738133986630972744754191651180845901626455302781818777848415162371578049700700131402943982520165834502736454761587151379089155516281458963817170917007982812425576360258527999934295353745979813130383783458127091407129093782240631895502031344706082686065450722739206352469281628581257769725796342823592703562474803499411943134643927994229248691387598421080066606018524260668992390253619188410495212513976037171121877782498691146490940707216565864960511925354635938670434480959919595823073286037140809806376623233733485173944641683018709728996353555462057187511965131305128111503403437785612816706465111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2924e557b870b68d28c88c5f09fedf2b62838c97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (183 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivia.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivia.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivia.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivia.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.landrover.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae0ae9546000004030047304502205d004021148b79c49a1d3fe2165ec272a6da04ad33dc79f172fd96fda61188810221009b7577425772627938f2440f0ec9a59d7556ff42eb46d7bc1a22fdb77a1d22ff007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae0ae95520000040300473045022013bb3c8993a68a908f69ca5f3d80bd26698e28d60387950a93e137e4faa73f29022100e7e1190c9dbee352ed942ce47a73c3919085c6f58baf524762a0d4b3d6a3d21c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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