cristoreysandiego.org

Issued by R3

About this certificate

This digital certificate with serial number 03:e9:82:de:8d:de:e9:c3:23:90:56:9c:27:7f:a5:62:f4:46 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cristoreysandiego.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:82:de:8d:de:e9:c3:23:90:56:9c:27:7f:a5:62:f4:46
Serial Number (int): 340796604494694787830869820656917216949318
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:ea:13:4c:1f:52:6c:7c:d5:db:d6:a3:b7:ce:5b:d7:49:b3:24:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:94:81:48:1a:70:b9:ce:42:6a:a6:e2:a2:61:6d:99:4c:6a:3e:ae
Fingerprint (sha256): 19:1c:94:a7:78:1c:d4:69:2a:bb:d0:ff:95:75:0d:ec:83:86:44:dd:23:96:48:ef:d4:30:31:bd:98:40:2d:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cristoreysandiego.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cristoreysandiego.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cristoreysandiego.org
www.cristoreysandiego.org

Other certificates including the domain name cristoreysandiego.org

(limited to 100 certificates)
www.cristoreysandiego.org
admin.churchill.edu.mx
cristoreysandiego.org
cristoreysandiego.org
admin.angloarts.mx
cristoreysandiego.org
colegiocipres.edu.mx
cristoreysandiego.org
admin.aghseagles.org
cristoreysandiego.org
calhanschool.org
admin.angloarts.mx
admin.icsjschool.org
carnegie-schools.com
admin.aghseagles.org
admin.aghseagles.org
cristoreysandiego.org
www.angloarts.mx
admin.aghseagles.org
en.angloarts.mx
churchill.edu.mx
www.aghseagles.org
admin.angloarts.mx
admin.aghseagles.org
admin.aghseagles.org
usj.dcsedu.com
admin.aghseagles.org
admin.aghseagles.org
cristoreysandiego.org
admin.aghseagles.org
www.admin.colegiocipres.edu.mx
www.mchdurham.org
www.dormanhigh.org
cristoreysandiego.org
admin.aghseagles.org
www.colegioguadalupe.edu.mx
admin.angloarts.mx
admin.colegioguadalupedetulpetlac.edu.mx
www.mwschool.org
cristoreysandiego.org
admin.slcd.org
admin.aghseagles.org
admin.aghseagles.org
admin.aghseagles.org
admin.angloarts.mx
admin.tabc.org
ms127.org

Certificate

The complete raw certificate details for cristoreysandiego.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop8x7idgmR1HOAG37Kae
El3G6g+ebOk1JefE69Hu9S53phe93BvmYJXjKqRjSas5jl9rKfZ0wDf2cflrOsU4
Q5yL/mexaXvxHHFMgoW7opIIpvnSTd8H/gFQFm9HFCcKWd+ptuZ7ebpx3RudFnqq
BKuabkCn11mCa8ScC53GJ6Hx4Le9r281v5DnOFTUpyV9cTtjkcEoxv5AsPlvsNmG
zOstQYV6u8F71TOs+Ouk86bBuLtSS45CBVj/kNyM0Xa2fOADl8Nrv0QkDXCHxx2x
eh46aXWDbXPh3n9qeX/ktrr+U8WfPUgpT9yXmzHInFAz7NIrhQMlwWVgdPf69zmb
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340796604494694787830869820656917216949318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 14:19:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 14:19:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cristoreysandiego.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20529107404628240580634493092141585330987007874441330335370163987129613185038793724614320363819520646112504752912429059846661674830629844275217742396314511890002213750359964564013610339656177083466472666595518666703892474007825711519977853299706801275587565456177250970787022967156913514182543959707014791841798557721191073468963187886064258085221448538733346721037706837881016996578468058481427931216690575836265677919727506503024850274469802563075091294922282393262524887347387088101345957011825756667198062329770078120924465511278311718931218187182122923565185195892068732189806209855912148758108229688588244720603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83ea134c1f526c7cd5dbd6a3b7ce5bd749b324dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreysandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysandiego.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b0ab9185a0000040300473045022100fc248b36b93362a32cb114e2f3637994571b498acdd96ba2caf6266088374ce9022074043aebf6a83103132969ba1c253b258fd441a9def6345ebcd4891a4752588a0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b0ab918500000040300483046022100887c14ad918b2a0adb4bd08b518ceaa2b301c96f27bd30c1ae3726e7c9f854a3022100decaf8feb0b4b08281528abd336e53c70508c43ea8a50af331f60a10cd0bce3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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