thinkabit.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:86:66:ae:72:2a:83:e3:b0:c1:5d:3d:c6:6c:75:40:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thinkabit.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:86:66:ae:72:2a:83:e3:b0:c1:5d:3d:c6:6c:75:40:7c
Serial Number (int): 267300307736835882475085693281562185252988
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:93:cf:65:e6:38:eb:e7:c5:5c:86:d1:85:81:23:fb:e0:9f:da:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:70:dc:5e:88:44:6d:18:d7:90:36:85:7f:e6:01:9d:18:14:56:38
Fingerprint (sha256): 31:12:a3:66:ea:3c:38:e6:e1:2c:cd:63:22:6c:26:1f:ff:e6:7b:f5:86:16:c4:83:2c:30:0b:62:21:fc:83:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thinkabit.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thinkabit.es

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thinkabit.es
www.thinkabit.es

Other certificates including the domain name thinkabit.es

(limited to 100 certificates)
*.gke.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
srdanstanic.com
thinkabit.es
jenkins.gke.dev.thinkabit.es
storage.gce.dev.thinkabit.es
cnccuyo.com
tls.automattic.com
tls.automattic.com
gitlab.gce.dev.thinkabit.es
tls.automattic.com
thinkabit.es
www.thinkabit.es
mentoro.app
metalparts.hu
visa-cms-dev.hicity.world
tls.automattic.com
clubpropagas.com
thinkabit.es
controlroom.iotdataroom.com
tls.automattic.com
epidemicrpmtest.ward.technology
schoonheidsinstituutlaurence.be
tls.automattic.com
*.gke.dev.thinkabit.es
thinkabit.es
thinkabit.es
merterim.dev
tls.automattic.com
storage.gce.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
tls.automattic.com
storage.gce.dev.thinkabit.es
pwa-builder.swandoola.com
tls.automattic.com
epidemicrpmtest.ward.technology
tls.automattic.com
thinkabit.es
thinkabit.es
evening.makers.kg
static.gcs.dev.thinkabit.es
*.gke.dev.thinkabit.es
kajimotomusic.paris
youtube2text.com
tls.automattic.com
*.gke.dev.thinkabit.es
tls.automattic.com
tls.automattic.com
chicken-dinner.com
static.gcs.dev.thinkabit.es
thingyoucollect.com
*.gke.dev.thinkabit.es
tls.automattic.com
fanlife.tech
tls.automattic.com
apps.gce.dev.thinkabit.es
admin.thebestweddingapp.com
www.standzero.com
storage.gce.dev.thinkabit.es
rossblufordenterprises.com
tls.automattic.com
a-c.app
*.gke.dev.thinkabit.es
tls.automattic.com
www.standzero.com
storage.gce.dev.thinkabit.es
thinkabit.es

Certificate

The complete raw certificate details for thinkabit.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267300307736835882475085693281562185252988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 09:00:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 09:00:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinkabit.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3798816463412027696754231932156198215726745405776229869805922441046458115549147371614201446340665587974656397313984401390566826677369214049617681138054770507386366376108455305581229593578706589200392572287104517747041029254831332829493302842668902317550672180286814699302802456561946117267443811318735388961993660176290793487152036974996631263937618685307987422341023740271993142211125307098943923696189766723999277950078790125243175481204378716018287441579476459318723081124727021208579922010684829109733083853969734415315647761741428451130903021437052373903140314055937124110459993209936324211618721229641173448102209407146695207846817723154615429862394480332793189524959641744120967686829640570692524282002516856797818997000465976094471712807781694025946589732143929707662405072586670156857809927565286912348921556439540650684430288841471421393017138489980142218685077800411099039588483483118384942328911654461794022516741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a93cf65e638ebe7c55c86d1858123fbe09fdaa5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkabit.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkabit.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f9e596219000004030047304502203cb2c306f23dd44dad0b301dfef21511d81d38df915fec7c37d20be05b3991ba022100b695106b8387bdea08fa49eaa2b99384d11aab6c066bf66cd72e57c66a907202007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f9e59620c000004030047304502207fee8637709f3f47a7ba6462b41df8783fdab755e1ea80545ddafece2e67302d022100f56af695c57853a113ddfbfe59374b75b073a2c84cbc3b0d1fa276076f97be1b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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