tarjetasnfc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:12:0a:97:89:75:a2:7d:0b:f0:4d:d9:c2:b8:a6:f9:f0:9d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tarjetasnfc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:0a:97:89:75:a2:7d:0b:f0:4d:d9:c2:b8:a6:f9:f0:9d
Serial Number (int): 354588305436411465304682432046614900764829
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:d9:11:90:ca:52:99:70:2b:45:27:4f:71:13:97:c1:ad:9a:8d:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:a9:8b:8b:26:8d:53:0f:1d:13:c9:37:d3:7c:47:7c:00:0e:00:09
Fingerprint (sha256): 2b:d6:a6:f6:5d:c5:86:45:e1:89:1c:66:af:53:c8:71:94:7a:f0:c7:15:e6:c9:2a:28:b2:3c:31:de:dd:8c:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tarjetasnfc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tarjetasnfc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tarjetasnfc.com
www.tarjetasnfc.com

Other certificates including the domain name tarjetasnfc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tarjetasnfc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354588305436411465304682432046614900764829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 02:06:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 02:06:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tarjetasnfc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 576311425897762483898293757592247874051580052703648400470917579153150830421620835190991917213460241553929131930282546755181814071389087780922525187844784447316940560643074832423909915374185459968688855502109580622795290694597704903490860987621122673498659798577025814702873643971703247588502878607951675638101900458420322951983775379049561276540461760557733206505197412506328565049348260127314378437752691319451299766628179410962593162469712323960184124274701796154009604887187158288664946297562713634467477403884903976569797722185297952456336412046279687191567571976337597832244360871536634107951774938305788673673566015206161561435710185037351330778073248883997899951863132847003877461375950567444108231374590036666804604524897835835385897326903960698369583943100435785382919052362340582062368481675595934592978899488145122197297097721655383891539573180632178081098079713372654390175204269976893892501833240711161619805965857378344683279434375742310885263242129972197883134463861721132945468418286260613802180256472887582095074438807219600425276684053842437294985509490457892446327376805853904401577005351047721341074800324792934168999817943256211838359485821435693209005832616496379121652523291724107612746964644798523827229695287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ed91190ca5299702b45274f711397c1ad9a8d68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarjetasnfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarjetasnfc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd0f2426600000403004630440220709c0c91adb3fd150d29ffc7b2d8c87410e90d34291b7a5e6ead5c095711a26202201d12de8cffaeb5049f19d897e82bcbd1fc7af5af2b109b21d8d77297f31d966f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd0f24268000004030047304502210087fd1ff80b394296417b7d49068eadab8b9e1f36b4052ef8a7c6fb444f0c81a50220658061dd43c6dbf68760dd896d2fbaca79973be39c6197dc367e49947dcd1654
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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