lazonaurbana.com

Issued by R3

About this certificate

This digital certificate with serial number 03:16:3b:e3:a8:6d:be:63:b7:3c:1e:72:c8:6a:3c:0b:4d:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lazonaurbana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:3b:e3:a8:6d:be:63:b7:3c:1e:72:c8:6a:3c:0b:4d:46
Serial Number (int): 268902676386819189406798647388395400809798
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:e2:72:4d:9d:f9:a0:f9:e3:11:7b:3a:b4:60:05:7c:75:34:e6:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 73:83:c5:49:11:cd:0e:11:e5:34:d3:f8:d6:2c:7f:72:b3:2f:7a:ca
Fingerprint (sha256): 14:61:a6:07:a1:8a:7a:93:1f:48:af:5f:29:c0:cc:eb:ae:b3:16:1e:36:6d:25:fe:9c:3f:f7:e5:99:51:ca:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lazonaurbana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lazonaurbana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lazonaurbana.com

Other certificates including the domain name lazonaurbana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lazonaurbana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268902676386819189406798647388395400809798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 17:21:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 17:21:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lazonaurbana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752839788953719996196886195224946411906742613413450688801998841724233236230447353331715204847976215235312480382246404243436980833643673506781737428807761782865909180546402420807931965438861397579491581468335875624029193941904509450961803561842839814398784928477558877026368866429154666171309787617310536560074535402971044104400637280079820130815186797476540241106102564669851078963072496156631435874658605358527382597149996905812752828972060732166400947622091500824348876038379878055079886980964199774170964763111355790554667421155417595561319319745256949023569825042215925219688908138984101031490821615246322367539261743408950568017075414050757678819464708110221063664134870393937947242264648714879384747387991999098227786043924412491211065535193679119048230917968578855601499340262121288586357461606462072929575910239767182507002259711994905093056042426461013814995323207042341671600358782556395083387966807005025735707875338906051404431432655308904905799374872449737539149926387066391312584340592941239788922173936920566022930236357576352664953789624824363867514788710051353170917303249254567629116328371443128181764208336169273745900475693327494066063698158679399819071926027312370511669620583025664787233431708273640982959126951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82e2724d9df9a0f9e3117b3ab460057c7534e6f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazonaurbana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d22f486640000040300483046022100a80448b455de60dd7041f2006e8585c529f71c606f05e7f4445119abc2eed796022100d831ee00cd70ee79b08fc86b6e5bdda3e9ab6907bcfd0e8587fb0198e3ae0e0500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d22f48750000004030047304502206cd0fe64805558411d9579198d79d472116edb0082a2038380b81b8201772a730221008a5194762c6675e6b713aaf07b9af5bb58f6dfa3eae41507449bebf36d58edd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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