crossover.co.cr

Issued by R3

About this certificate

This digital certificate with serial number 03:a4:39:a9:ca:d4:ab:1f:37:6b:87:d7:2c:66:e2:61:13:b3 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crossover.co.cr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a4:39:a9:ca:d4:ab:1f:37:6b:87:d7:2c:66:e2:61:13:b3
Serial Number (int): 317219813578139550604244942565008939750323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:f6:34:f2:95:b6:f9:fd:b7:7a:fd:a8:86:fc:5f:71:8a:90:3f:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:5f:62:0e:c3:e8:7f:8a:95:b8:34:29:d8:dd:d9:57:4c:f3:03:20
Fingerprint (sha256): 32:13:d3:48:24:45:9a:05:32:81:7f:06:92:58:2b:26:55:05:9b:79:13:41:ca:b0:cb:fb:97:4c:91:e1:ca:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crossover.co.cr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crossover.co.cr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crossover.co.cr

Other certificates including the domain name crossover.co.cr

(limited to 100 certificates)

Certificate

The complete raw certificate details for crossover.co.cr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317219813578139550604244942565008939750323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 00:42:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 00:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crossover.co.cr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702530379312619122004915736719186893502288825397704496655156237908172173770554359779434773613482817841563633586570422569601248544050453722137364324923476476484060283584181159768985347033102003490849777463563446722377202704409086114043959905306171005849409898906371903020712268129703785099777242476425521340791185297018675902255825164213223734097554411868021685445882651465821614801366329629049364310467673283281428980803799707117366024278352819661146607507898460658204443920480809602995844037535135197748702176597645133280939410439714659994717099543095903254589943157980535311410269824984428479770184752804385485960622321623513885040278726680149423211423161642924020236401911136032411006964671920455427406117278274019197999511396691012234319456552481623393228061266851868427589436570808304964954738845245828984030516449757787350191554326416483390232864433915710784844780129548969241871246689370421624025044341777935519397196271607631584412951768481273577948513642493419469606155405290969012406720980027683736180909737978117913419216104716974750201477385885296265445131802372063240725671271287990677922380053065599453927013904632715190553496513577498414358335498773163522467559231258698225371360439197900923864011282558052513404576819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebf634f295b6f9fdb77afda886fc5f718a903f2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossover.co.cr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9752553d0000040300473045022100b9f880c444d2c73ad2b72c3dcca2bede298f51efdca7e81bda3b6ade1ddf69420220238898ae12b7f11387206afc70b06ec406fc2393ce24d3d472aa3126b87df012007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e975255a70000040300473045022047a7d710b1697dfa6af5893e248c32bf16cf93d7689c2c0b3c9406eb46bc09a9022100902f22c593958ca54ee2931cc09c9cb309e09c3306e3405d6b03688739679098
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f0d080664245c2a184a32667479aa704e4a33737fb8719f2c69e485fed99cb21cad46f290de76aab783a187a4a087dfb778ca744a0d24ae06dc5fd38fa89829b2de370672f45048dcf7b758ec88c1eb8042b59d0a7cb405b83b18cacd68ade72f0139766f04e8ccd921b936b18ba61b66f47e83558c9d30ad26f5c6b8414c93e2a46090816b16b83f9973cf41739660a34abb9d588e3551422954824c1ecd70f6f5475227cc4cb476ae0fe94b622c34bc453bf612fa7fc24a46339ae222519131005199fc3ad9239011d01541a92578779cefa0b187a44c4c24fccf141f8565e217c1e86ec55ebb63247d67a59876337b518ee9c603c1b25e48a5f0d06cbb84