cromatica.com.co

Issued by R3

About this certificate

This digital certificate with serial number 04:43:9f:b9:ec:d0:79:0c:52:b3:f9:fd:d6:71:76:43:1e:92 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cromatica.com.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:9f:b9:ec:d0:79:0c:52:b3:f9:fd:d6:71:76:43:1e:92
Serial Number (int): 371460374940158081054058133146711112228498
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:f5:66:4a:d1:df:21:06:c6:78:27:10:53:ca:24:85:00:cb:f7:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:3d:59:a8:47:22:bb:2f:0c:69:49:42:17:bd:e0:ee:27:38:23:4a
Fingerprint (sha256): 27:d8:9f:28:59:e6:e6:71:a6:53:8a:8a:af:f1:66:1b:9c:ed:08:1b:a8:db:cf:57:ce:35:9b:a4:b4:30:b2:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cromatica.com.co

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cromatica.com.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.areademarketing.co
*.cromatica.co
*.cromatica.com.co
*.greenlatinomd.com
*.santiagogomez.me
areademarketing.co
cromatica.co
cromatica.com.co
cromatica.com.co.greenlatinomd.com
greenlatinomd.com
santiagogomez.me
www.asiabartolina.greenlatinomd.com
www.centro93.greenlatinomd.com
www.cromatica.com.co.greenlatinomd.com
www.cromatica.greenlatinomd.com
www.santarsicio.greenlatinomd.com
www.santiagogomez.greenlatinomd.com

Other certificates including the domain name cromatica.com.co

(limited to 100 certificates)
www.cromatica.com.co
cromatica.com.co
www.cromatica.com.co
cromatica.com.co
cromatica.com.co
cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
www.cromatica.com.co
cromatica.com.co

Certificate

The complete raw certificate details for cromatica.com.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RhRPzHfoJmXND4i3IeQ
NVA/ciJ539LP9wSj7bv/GEdd9XKxUOmxFYHG/SwX8pbRFSzuB6FDV+AnVYD7Y4Oq
eNjpZPMGV1o8dqsykWqhbGX31n8Cm5NQ1VMeO/+5eZJoqzpU+tl9qcFF8bTPUs07
iOJQjNUGDZs/x5rFL1GHDF+Lwwt4IvUNsvJYuBzdISNl6jFbPy4o/AnVENPSbZVG
lm8tD7iiWStqb6/rmAI8o7m/8Iw60E/qBCGlG4Qwg479+DvMfxxr5SzL50kvYoSJ
3hQ3KWaX38fP1nKtLnzorO8wn1Do6W/86gyenTYnK1BuFPPRvPGfGrrHSCjP7EfV
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371460374940158081054058133146711112228498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 12:48:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 12:48:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cromatica.com.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27405703519964740816009295467817219554342242576733652800849227137253077599678732180890512381915100392457472990726696393063533181368600330879105281437023615576522921013061038874208276763904110698804053369126626878991317984297800282290120018354888685820565934303128714182299377494279383840207496706226027632747743355454557147786897994871690871907040944586195748551952791353569189712930584644112056898319822173850917296759852455849616352842260728618025212057520624482945918136588990545842473456882266983498243639577863754688699398568254291601015647954984480156596029656320608815299450741623946738364541545029079711339829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cff5664ad1df2106c678271053ca248500cbf71c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (442 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.areademarketing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cromatica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cromatica.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santiagogomez.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'areademarketing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cromatica.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cromatica.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cromatica.com.co.greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santiagogomez.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiabartolina.greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centro93.greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cromatica.com.co.greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cromatica.greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santarsicio.greenlatinomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santiagogomez.greenlatinomd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7b0523ae00000403004730450221009d0ed4d0aeea6860fe72cec4bfd8b5912fd943db6a90cedf0683a65b5159411902202b4edef88a5d1e1d13d1068ee7fea72a471a11f671decf4b1e99b12a01b2787c007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7b0523c00000040300473045022100858a6346cbd3f3c691624aa66ad1967c169839bf4ee5d0e995e214c679c28b9502201620e48f35c6e40b5feed1c3506370ccad81d795b2b9ab48fb340326807f52d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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