meetingdesignweek.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e5:2d:e1:23:99:ae:5b:35:09:7f:5f:52:16:b2:51:fa:81 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=meetingdesignweek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:2d:e1:23:99:ae:5b:35:09:7f:5f:52:16:b2:51:fa:81
Serial Number (int): 426434790000599591917015503688148909685377
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 77:39:73:dd:41:ca:c2:74:11:be:ac:f8:f5:c8:5b:2f:12:6a:07:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:a2:66:58:fc:ef:0b:a4:4c:d3:32:f0:9f:38:a0:09:aa:36:c6:28
Fingerprint (sha256): 34:15:0e:ef:66:5d:16:e5:35:61:11:dc:2b:f7:78:70:4d:17:d7:10:dc:f1:08:4e:83:3c:36:ba:ca:1a:84:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate meetingdesignweek.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meetingdesignweek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.comunicacionyturismo.com
autodiscover.meetingdesignweek.com
comunicacionyturismo.com
comunicacionyturismo.maximanet.net
cpanel.comunicacionyturismo.com
cpanel.meetingdesignweek.com
mail.comunicacionyturismo.com
mail.meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.maximanet.net
webdisk.comunicacionyturismo.com
webdisk.meetingdesignweek.com
webmail.comunicacionyturismo.com
webmail.meetingdesignweek.com
www.comunicacionyturismo.com
www.comunicacionyturismo.maximanet.net
www.meetingdesignweek.com
www.meetingdesignweek.maximanet.net

Other certificates including the domain name meetingdesignweek.com

(limited to 100 certificates)
keenua.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
set2s.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com
meetingdesignweek.com

Certificate

The complete raw certificate details for meetingdesignweek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CnaJl+H6W7B2KqHPzeX
wI1AVB4VxgSNwQpgj6cIFxNGM97n1rNaFPdkMmW5T6HhDowA/X2UHdOFHWeI+Npv
TYbzBPPgUxQoFSbbFsmkBDR/kx2QjcAs2sA3bwohRf4jr3ag68O32iCUIMHk1XVD
DdTBsLZnz4ESevDRlYFLajLtf4BcrjvgSTqJKlwSQTya9heTG2rV1j0qblmnBmNq
71QHr+U2UTarOH9Pw2vYASV0M+IxUNSRGe1wXEVMW8fh103uMoIS79p3rgAy4a8/
A2sNyc/EwF7a6yEEmGmnaUZNVvKORxA1StVlSwlrrlYMmQy0w06PQHN1/t6b0pQj
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426434790000599591917015503688148909685377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 20:47:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 20:47:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meetingdesignweek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27793065155916694315685631956523664733651806113301259186489083664549821588720936439663780682310648086230322662584081641054361412465827223872328077703508346243897356757498696863536503610752668537952308927909230368054178388172357321176658500613780782220749478770242907079360788364442576924884518310149216923527991108634694222358325329037514875721518925484408843818126905225784693969865701848529222842871915039031649548632104832726157970847112625545610216650840889259645414908314514955857285250388367405229902061591389141416618629276722864755592723275570198920114856890711645963704806631346461587610282279306784914285559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							773973dd41cac27411beacf8f5c85b2f126a0787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (583 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.comunicacionyturismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.meetingdesignweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacionyturismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacionyturismo.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.comunicacionyturismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.meetingdesignweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.comunicacionyturismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.meetingdesignweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingdesignweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingdesignweek.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.comunicacionyturismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.meetingdesignweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.comunicacionyturismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.meetingdesignweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comunicacionyturismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comunicacionyturismo.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetingdesignweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetingdesignweek.maximanet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d653e14cf0000040300473045022056680a767797abf744f6980fe84cad3f70f2bf92720d3f671c169dd2a86ef35402210096e151d4f9641e980d696f8106bf0bb3674370dbbd3e3c1cd96e71f00b4a7ba700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d653e14ce0000040300483046022100e6272ed8ea889618cf17048381e3909a17b1b7a4d5884792031a6facd267a51e022100c2203cb1111423f28763834584e5096b1b7f984ee1400d9477fb117f0f2383cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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