www.portocervo.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:8b:91:a6:f7:85:24:e5:b2:77:e4:66:9b:53:f6:fe:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.portocervo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:8b:91:a6:f7:85:24:e5:b2:77:e4:66:9b:53:f6:fe:e1
Serial Number (int): 319030096765868487581072184213624845696737
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:e0:c7:d0:8b:23:e5:0e:cd:14:a3:58:85:46:65:2b:cc:95:8e:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:ff:95:3c:eb:94:3f:9f:bc:25:07:e0:c5:ce:85:4b:f9:34:4f:dc
Fingerprint (sha256): 27:a9:d7:d5:17:af:9a:33:17:6f:d5:a8:b4:59:21:f4:fe:5a:5b:fd:cc:47:a8:52:d0:1e:00:8a:8f:51:76:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.portocervo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.portocervo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.portocervo.org

Other certificates including the domain name portocervo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.portocervo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319030096765868487581072184213624845696737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 15:51:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 15:51:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.portocervo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923938889277466848854940667614651472732630044345367608489909425252246112401995751966793623874119847234322230631767267243651147212593109134018929021128396140872849889512870337940592497463995586264921332162646592350644309766553872183435180803511273546285136356620901504634099042298718535865544515945687828389567697827249161113457017457071095122417024839537084020385171432237232384515228806496988565308777019512775710066681939715734007404961022028845253384966251662298404876868189717956823931455252391683162561243160375862474045583588166716932205400464003943382115765647763039180512067190114367650120140997108425885856747588476656748841735900574014892657078438796394460007785978824783759494307301795571389242213271826602470380736356066342047321378425487400694124419372672322435379916944342351061004905135723765648704139643595630499202233795171783820947384225336294558391943580800919266043994451693998237140677125545235247391471596687002494477653376406033408935538659553580809530391564724171977427675941406558858895435839828498118902669104809260516261714025220047052962372389362743032827422613309023359889203965663702334797401074399761571628209850290147178319886983085763986269618581645735132459675983910285347829803573565678646011385573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82e0c7d08b23e50ecd14a3588546652bcc958ea9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portocervo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c397ef69200000403004730450221008a3ac708f4b053061739157cf6cc01277391d96115f4c97e0daeeb00ca27b8fd02200c26b2547db758468ac99bc9d5b7b26bf2ed2f361bcd7535f4bf90a28abbcb7f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c397ef6840000040300473045022100ed2e198cad4ddc90afbeb69f55477c92502f436920effaf891ca7aa2d589014802202e753ff47899b8fd5c076072587ea67cfa2e4b553fb5ee19ecfd97e5d2297f30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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