grupo2s.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:4e:9c:53:75:ff:b1:0d:55:83:2b:8a:c9:61:03:ed:72 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grupo2s.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:4e:9c:53:75:ff:b1:0d:55:83:2b:8a:c9:61:03:ed:72
Serial Number (int): 274712361579967319723740132697932600438130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:3c:e7:f9:ac:bf:a1:ff:9a:37:37:38:c2:c6:4c:f5:56:9f:9b:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:d0:b2:fd:bb:43:a8:d8:df:59:dc:e3:fe:d0:31:80:31:cf:2e:7f
Fingerprint (sha256): 31:95:21:eb:b0:2f:c3:90:31:49:fa:c3:39:85:b2:81:a3:de:12:20:c6:41:dd:5e:ba:40:1d:02:71:f5:4a:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grupo2s.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grupo2s.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bookiando.com
bookiando.maximanet.net
chooselatam.com
chooselatam.maximanet.net
grupo2s.com
grupo2s.maximanet.net
mail.bookiando.com
mail.chooselatam.com
mail.grupo2s.com
mail.meetyourway.com
meetyourway.com
meetyourway.maximanet.net
mentemining.maximanet.net
www.bookiando.com
www.bookiando.maximanet.net
www.chooselatam.com
www.chooselatam.maximanet.net
www.grupo2s.com
www.grupo2s.maximanet.net
www.meetyourway.com
www.meetyourway.maximanet.net
www.mentemining.maximanet.net

Other certificates including the domain name grupo2s.com

(limited to 100 certificates)
grupo2s.com
maximanet.net
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
*.grupo2s.com

Certificate

The complete raw certificate details for grupo2s.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnofnOnShTm5xChcKbTd
stvaqv3FOvGFEv8pely6BbOLCK4wT7tr5zJlyWt9BgmooDpn9ZB+7KxkLCqL+UOu
fBPTnmMSBQIbsOUewffVHD4LhIGNpRRj6cViykt+lQ3R+GwKvo81VTCCJ92yh269
gkbfUspvbB4P6QpLWodg+oKQ7UxMUQnZsG2+TMXfU7gmaSQnIfWDk3mFLXL5txP0
qmoi6RCH6OtDX/W0AifyfrQ6rpbDncVzTc+71mzWhroONWQQkC+Jn/yqQzEKR7C3
OP1uSG/y3WP8bZ+CPIuZrA4Mghr0Vj/LX5A+L/mCO+DvD8fYlaTeZ19AxWeiT12N
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274712361579967319723740132697932600438130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 15:21:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 15:21:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grupo2s.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24045499279992480262430535993792057140804387526378950030470752432370719043586541511079131876670346000493680283042979810825182143030778671944574583394489919442389883411477483008422217497704804127669342364872643073296175969525123816207080992981834940858605431969843663525211101726827898646511339421443609235052298550123445613685085097062125642372495815103552933576906099771769124595283218085464158947736948419200478164712646702896713399389574438184045065309849380852495747370473771147858197154656122562794071460776177995451412193791285301481748219153655004342771979605707208067819817926271534855845415487379281071148391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce3ce7f9acbfa1ff9a373738c2c64cf5569f9b26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookiando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookiando.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chooselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chooselatam.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupo2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupo2s.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bookiando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chooselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grupo2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.meetyourway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetyourway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetyourway.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentemining.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookiando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookiando.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chooselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chooselatam.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupo2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupo2s.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetyourway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetyourway.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mentemining.maximanet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016708b9e6ac000004030046304402202d4731a236650f89712eebbdd0c12a6f0a6af482aeb6985160eed12a66043ea002201fe149fec24a312a4939d191c6dac88556bf4f2a9636d729ef49d526ccbff6a5007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016708b9e89f0000040300483046022100f1f53a670a2a85469563de839613ae17ee53381318e56122a798f49d317357a00221008ea3b6538ef445aff26a2efeaa63cc87abe9e689cef5549c55ee66058b524ca2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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