jaguar.gt
Issued by R3
About this certificate
This digital certificate with serial number 04:37:e8:7e:d4:56:2b:35:2a:dc:a1:b3:97:4e:d9:d4:d7:87 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=jaguar.gt
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:37:e8:7e:d4:56:2b:35:2a:dc:a1:b3:97:4e:d9:d4:d7:87Serial Number (int): 367473713338816708029057027622330954995591
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 83:4d:b0:07:af:3e:39:1e:4e:9e:8c:07:7b:a5:80:a9:fe:54:9f:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c3:59:02:31:db:8a:6f:dc:8c:f0:d1:f9:fb:cf:e7:74:03:c9:9e:3d
Fingerprint (sha256): 3c:0d:11:cc:50:91:fe:4f:e1:ef:9e:e4:25:0c:62:d1:c0:00:5a:ab:f7:7a:e8:44:85:1f:92:4d:15:df:09:2a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate jaguar.gt
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jaguar.gt
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jaguar.gt
jaguar.pa
jaguar.pe
landrover.gt
landrover.pa
landroverpanama.com
peru.landrover.com
www.landroverpanama.com
jaguar.pa
jaguar.pe
landrover.gt
landrover.pa
landroverpanama.com
peru.landrover.com
www.landroverpanama.com
Other certificates including the domain name jaguar.gt
(limited to 100 certificates)
www.jaguar.gt
www.jaguar.gt
www.jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
www.jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
www.jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
jaguar.gt
Certificate
The complete raw certificate details for jaguar.gt in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISBDfoftRWKzUq3KGzl07Z1NeHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjkxMDI1MjVaFw0yMzEyMjgxMDI1MjRaMBQxEjAQBgNVBAMT CWphZ3Vhci5ndDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALj+miDK fikYeQpTE3yBn2aLiQ9X/gQ5baFEv53CPryru2sYQso8Qk0DlAJ6MF8z2hV13NMa v9E8G5Yk4DG39lt9hm72M4jHYoAeuCpdP8Mt+kt9pi3kmmqwfvI7MNbJaYUGf56J cB7iFhlz9cuyTITC0/imo6CQoJVRRKcb7WkkEKyFUJsxjZHGeRgdyv/rIih8Blvg /mekGPWoD4bcKaK/cS+qdc0DKIa9HI9ZrwG8l+n/FE8fOj33Zj3FRyiEVFQU4usL b8vdwCUeXUcYEwCyoOOBX5ehn48eYEAUxMyDQdXLKM7l6ikHKHx5NoNg8gBllmdK 50JV5fK8O8FxDZsCAwEAAaOCAoEwggJ9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU g02wB68+OR5OnowHe6WAqf5Un5IwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgYkG A1UdEQSBgTB/gglqYWd1YXIuZ3SCCWphZ3Vhci5wYYIJamFndWFyLnBlggxsYW5k cm92ZXIuZ3SCDGxhbmRyb3Zlci5wYYITbGFuZHJvdmVycGFuYW1hLmNvbYIScGVy dS5sYW5kcm92ZXIuY29tghd3d3cubGFuZHJvdmVycGFuYW1hLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ALc++yTfnE26 dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiuCvskEAAAQDAEgwRgIhALydKZna y6Wi93lk95F1jgS7j9wF8Ia5bQVGeAh6IwEEAiEA3Ysuosl0PJGjzO/TGyDXndy8 EICctEIZNuS0Wpxr0VUAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9 bgAAAYrgr7JKAAAEAwBGMEQCIFW+Nlh51WWCZzkSmo/WSYc3e5994V5N4xEpC6Fk jd4vAiAz8UPPrEt39jq8rvuNgHIlrdJqswqdC3h79DlW2QjO+zANBgkqhkiG9w0B AQsFAAOCAQEAAv99kpaRbkNgaCY16TbJvG7J+sr4DJSWvFckpRra+9SLnq42Vxob 8QhyUxqKlS9KuWf9MAyxeOl1MLNsmqrprL87e1984gMxW873o/9yiH6BExsJa00A XyPYRO4hpJBaXffOsPKq8XiWBjCJBQinU0EC8/xA1EmZCivQvvg8SXjS8/qkuEb0 a1X2yd6pYQaWleaG1L5zZjTkqa0PpE9kl+sizSxp9OsHsYjPrZaFE8FP72m9ucQm dNQrI3CWZI2BpvT0fVAXBnPc7T+pjr4SPS3gxpEJJ5pHmIYDmzDcrCHAOfJkIT0P i/nsr4aS+SIwxlDR5NgzYawbER2s3Ln2pw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP6aIMp+KRh5ClMTfIGf ZouJD1f+BDltoUS/ncI+vKu7axhCyjxCTQOUAnowXzPaFXXc0xq/0TwbliTgMbf2 W32GbvYziMdigB64Kl0/wy36S32mLeSaarB+8jsw1slphQZ/nolwHuIWGXP1y7JM hMLT+KajoJCglVFEpxvtaSQQrIVQmzGNkcZ5GB3K/+siKHwGW+D+Z6QY9agPhtwp or9xL6p1zQMohr0cj1mvAbyX6f8UTx86PfdmPcVHKIRUVBTi6wtvy93AJR5dRxgT ALKg44Ffl6Gfjx5gQBTEzINB1csozuXqKQcofHk2g2DyAGWWZ0rnQlXl8rw7wXEN mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 367473713338816708029057027622330954995591 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 10:25:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 10:25:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jaguar.gt' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23353397070220185535067418168077145182691207617438662804314680766006679946522041849826800956387577128291665303387218459088433467580598054257651089011118632665595888939909469678603584421665984847010243632377197105497473967462271277634475291077662581544966280958340928650365210646886780304130376994167939436543657839345308548587655215695721546085043784731586015290511750099118457162950973033608593413664882262669895315297884308503043071872784948019242156838444790805630937784771065771906508653777408624090343527003645436681157525464985219031791157416214736757604774163082350354131264673242348958285693463287850429648283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 834db007af3e391e4e9e8c077ba580a9fe549f92 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguar.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguar.pa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguar.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landrover.gt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landrover.pa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landroverpanama.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peru.landrover.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landroverpanama.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae0afb2410000040300483046022100bc9d2999dacba5a2f77964f791758e04bb8fdc05f086b96d054678087a230104022100dd8b2ea2c9743c91a3ccefd31b20d79ddcbc10809cb4421936e4b45a9c6bd155007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae0afb24a0000040300463044022055be365879d565826739129a8fd64987377b9f7de15e4de311290ba1648dde2f022033f143cfac4b77f63abcaefb8d807225add26ab30a9d0b787bf43956d908cefb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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