mercadocolombia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d3:68:d8:50:49:95:61:2e:27:58:e1:12:e2:fc:b5:ec:47 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mercadocolombia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d3:68:d8:50:49:95:61:2e:27:58:e1:12:e2:fc:b5:ec:47
Serial Number (int): 420388086023464732056714897945878320245831
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:57:01:9a:be:35:7f:8a:0c:e2:ff:0c:fd:ec:bd:00:59:61:85:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:d0:e7:8c:07:cc:90:57:fb:aa:62:f9:04:84:49:de:ef:b8:4c:1c
Fingerprint (sha256): 27:de:fb:66:f3:d7:6d:af:30:f7:28:71:0a:3b:17:98:3a:94:1c:35:85:9e:de:32:cd:73:35:1d:5e:60:c4:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mercadocolombia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mercadocolombia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mercadocolombia.com
www.mercadocolombia.com

Other certificates including the domain name mercadocolombia.com

(limited to 100 certificates)
ultimateloghome.ca
www.gogreenweb.com
mercadocolombia.com
moonexpress.space
lacuchara.com
epik.africa
mercadocolombia.com
www.epik.africa
ray4.me
www.cicindela.com
coinmania.org
www.elementallogic.com
gwl.me
lgbtqia.bible
epik.africa
www.epik.africa
bramptonhomebuyers.ca
mercadocolombia.com
simoleon.org
azulprofundo.yoga
stromfreunden.de
azulprofundo.yoga
lgbtqia.bible
azulprofundo.yoga

Certificate

The complete raw certificate details for mercadocolombia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgISBNNo2FBJlWEuJ1jhEuL8texHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDUxNzA5NDNaFw0yNDAzMDQxNzA5NDJaMB4xHDAaBgNVBAMT
E21lcmNhZG9jb2xvbWJpYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCMsTNgZIAvRNlno/BNwD9VzympKkT7p+oPcbR4OJ6K3bRgo0ZxCWY20FBa
nv9TCdIGFFYGqSPELWjRrLGsy+SrflR1T+hAt6Qy7myvalY7Td+QeglguxYY1U3l
SG0+c4aUzPQxfm06j077j8JRyhIHpDCAPe4Sgvc9cjYOY7ozgL3WRs7c1b7m4McT
shlh9sf2A7dOfZJOa09TP7n1ZDC0xmRdjo1gAK0j2GPMmoLUiDEYk8W+NXrlzEMQ
XyziYGm87vhBj9dxiWW4xwKePrBqkMbA5doKBABimpkpgNxT7CX/GFG3H8925Oqe
OJordJcYJ6tV5a/j0Lp0dZqNqM1+xBqaFYsMCuhoIBrTyFTG5zoOgMTpU3xfj3U1
5Gf7eZFHHIGWxvcNa2GDy+92RtF0VVaD7FShd/KZKL2sO9p5InUt00xI+S8HRAei
I+tEX4HSjjWAisWKFDPxSuOcb5EeiWqL+hBQhxDSRYP3s/2BMYSuizy9FOgXy5R5
Cmhi7HpFlpbq2dJimAqCBxeT4WFkEpcjRm91DzEl2zfzGWJmL6Yf7IeJ7or2M7Kx
VCBHZSdraFP+mKOVLQtO5kaQrKcrcdEgwt5LMLftLBgrOCKGf6paOTmIpZm/JL1C
gaUlnXkZikv9TEtes9SpMNGeSm0RCUpoOYP1nnvF6MTxZyf3aQIDAQABo4ICLjCC
AiowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSzVwGavjV/igzi/wz97L0AWWGF8zAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzA3BgNVHREEMDAughNtZXJjYWRvY29sb21i
aWEuY29tghd3d3cubWVyY2Fkb2NvbG9tYmlhLmNvbTATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ADtTd3U+LbmAToswWwb+QDtn
2E/D9Me9AA0tcm/h+tQXAAABjDsr66AAAAQDAEcwRQIhAPpdhsUFV8t/pW+J17iL
wXsJ9IFXjA5aoiu3V5TIz+gMAiAXMjNUg2ctPpSpx87AuhtKXjXA6kSiGX9Rolii
fHaZhgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjDsr684A
AAQDAEcwRQIgQsiSeAydF6B8VXmfNYNeq8aBDhsucykeGUcq/dXQp8ICIQCOxLlx
2jw8Eh34KhPaNOH2VfpaHIOVuijn6kXNhCm1yTANBgkqhkiG9w0BAQsFAAOCAQEA
XHcuNnqMvy7pZUAxTZtzDmHbZvLjr2CyPu7HHlU8AYumvHgRLigxfCE4VaQh8OtM
HSmrCCKjiGoxh6G2hNsulGjLYxBXqCFssErKOxK3f4FUnRK47SWo6tMd5m6pYv0z
7jpydZ1c6JitDRmVlG9Pv40ZA/BB1JHHa/A6zsb/KYNyJv96ncVV6Haj9zwpB3ko
YOn4UJmpprAelatpLJTKDt8AVmLl+yNs7EpLqMIxavWR4vkIcXKc8g0F0kF/w9gB
oJCJ1+paQpgmAqZmDw7EHO3It8OSWoftBW+XnrYql0sBRuFQ/5BhKSZgTnU40grN
+2HWU8UyGJLnaGMVCOEsZA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjLEzYGSAL0TZZ6PwTcA/
Vc8pqSpE+6fqD3G0eDieit20YKNGcQlmNtBQWp7/UwnSBhRWBqkjxC1o0ayxrMvk
q35UdU/oQLekMu5sr2pWO03fkHoJYLsWGNVN5UhtPnOGlMz0MX5tOo9O+4/CUcoS
B6QwgD3uEoL3PXI2DmO6M4C91kbO3NW+5uDHE7IZYfbH9gO3Tn2STmtPUz+59WQw
tMZkXY6NYACtI9hjzJqC1IgxGJPFvjV65cxDEF8s4mBpvO74QY/XcYlluMcCnj6w
apDGwOXaCgQAYpqZKYDcU+wl/xhRtx/PduTqnjiaK3SXGCerVeWv49C6dHWajajN
fsQamhWLDAroaCAa08hUxuc6DoDE6VN8X491NeRn+3mRRxyBlsb3DWthg8vvdkbR
dFVWg+xUoXfymSi9rDvaeSJ1LdNMSPkvB0QHoiPrRF+B0o41gIrFihQz8UrjnG+R
Holqi/oQUIcQ0kWD97P9gTGEros8vRToF8uUeQpoYux6RZaW6tnSYpgKggcXk+Fh
ZBKXI0ZvdQ8xJds38xliZi+mH+yHie6K9jOysVQgR2Una2hT/pijlS0LTuZGkKyn
K3HRIMLeSzC37SwYKzgihn+qWjk5iKWZvyS9QoGlJZ15GYpL/UxLXrPUqTDRnkpt
EQlKaDmD9Z57xejE8Wcn92kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420388086023464732056714897945878320245831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 17:09:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 17:09:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mercadocolombia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 573974059140437642047893349516578092104151391142060798620181367539024389669441702057660983488940198972086285033676491051988273792762861316185658895208120474213699896453984644797426471045547424524773074511761192010066580321866472593992495325252286627008561946414619689927578170597549098712302571959560382050536655452976501757509435321063829731715170429326478735693991492295596067079074640701123204218757670721984131056524538682811297532109293099985178350366092982810585836065537098258280197045444647514130875296397199043751061896499154506359156358356925997259328968421844697822991237362839726292012763889184656414018112819644459810145272375893399399097274546458541902565743815862931479815266356355078261151177550361475053708006261483961185424590793697494404555753750871581557704610255368431036307826985079990071368731285490266957626726850673383665902236589779623723327034868457615503373365869547545225106293265622315814779291814348182795105421189622736123777741087950478734334505365015604284990108560222513929046535432022118965888248534133918255540873104411659268694175322137409546603293076128291071762283353712294512904318891499833572586317158279675340149703802781878916712352568140255649995857341677246607945670551339057992197207913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b357019abe357f8a0ce2ff0cfdecbd00596185f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadocolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercadocolombia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c3b2beba00000040300473045022100fa5d86c50557cb7fa56f89d7b88bc17b09f481578c0e5aa22bb75794c8cfe80c02201732335483672d3e94a9c7cec0ba1b4a5e35c0ea44a2197f51a258a27c769986007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3b2bebce0000040300473045022042c892780c9d17a07c55799f35835eabc6810e1b2e73291e19472afdd5d0a7c20221008ec4b971da3c3c121df82a13da34e1f655fa5a1c8395ba28e7ea45cd8429b5c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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