gedesk.cl.somosplane.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ca:47:3f:ce:dc:77:4c:9e:65:73:7c:14:45:fb:15:6d:47 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gedesk.cl.somosplane.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ca:47:3f:ce:dc:77:4c:9e:65:73:7c:14:45:fb:15:6d:47
Serial Number (int): 330168602411356621728508776303423651147079
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:03:3c:fc:e7:75:b4:fb:2a:04:24:7d:87:9d:b8:a8:37:3b:7e:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8e:4a:ae:2d:7c:0e:dc:9c:6a:84:2a:6d:e6:3d:41:e1:9b:2a:75:f7
Fingerprint (sha256): 2f:09:19:fe:b9:eb:b5:4d:4e:0b:75:b0:80:4c:a7:44:47:4b:1d:7c:03:6a:d3:e8:02:d1:f4:89:aa:97:59:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gedesk.cl.somosplane.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gedesk.cl.somosplane.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gedesk.cl
gedesk.cl
gedesk.cl.somosplane.com
www.gedesk.cl.somosplane.com

Other certificates including the domain name somosplane.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gedesk.cl.somosplane.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wuvb0U/w0Qb+/wYtoEg
14zp5SDQGKOMfw5fUIJJ6/77UG/nlvJ0S8zTtu7MMT61p4C5+fRUof4/0hD98G5i
d8WxhfcjcuuzZLW1PjW3VzcaLwA/vdDJX2ICR1hV54IgWHK7ehqTmTJeBdsCHvSg
x7YeVE3bvJayz0qqqFEjBH9bvSTyoojTD3LpzyuQZ/M8urh/PHvoinZEXuXJBnZ8
iFEPIINIMcAciDbpl9vL+6wRwLjuLrp6jbSqTM8S+A8tK/Kz4PNWOBI7Xh0PRTjv
nC68laF5ZLKcI41OKfAGfKIl5lMDahYBnTB4oV6gtiZlYsflzYK9n3Nw/8hxFmQ1
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330168602411356621728508776303423651147079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 16:53:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 16:53:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gedesk.cl.somosplane.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29671763899074620258663164610331804547623274781303112159012167357930207632014500724072287160691954823821015983431943750039427169491147021647232093162995269862542016954099637140191089453446989656038353360291845872407195950105906587876421739182814504087240594062333943051152126637788081393233480633910478251566373907689851876151627497686874933143059925631472399438628355403431779368724663350342861048653237884064628666119413438594627740368938681421502877373375781410243598656098921801508473545982096410935499482157258774138275995853486003696503238631838921870485151187652977939339369601783924827985117777894580058076547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b033cfce775b4fb2a04247d879db8a8373b7e19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gedesk.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedesk.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedesk.cl.somosplane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gedesk.cl.somosplane.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f8cd63b170000040300483046022100c7d402496529cd0a23a359fb5f9b919a268e7db7cdab8aab618664f90403dccb022100b84c08e4bd730ce3c568271714681521a6a0c9de8b70e399c3ee373f99a60cf3007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f8cd63b12000004030046304402202d5fa2e9136aa19f847c27a89d057bf962946b5c0aabef4c4e41f728c7111e7002201ef5cad8d325399f6ea34bb30026d7d8ff8b53159cae374b89d16281ba9f5680
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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