sacalmahotel.com
Issued by R3
About this certificate
This digital certificate with serial number 04:43:a6:4b:e1:19:ff:be:d6:57:32:21:05:ae:2d:a6:cd:14 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sacalmahotel.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:43:a6:4b:e1:19:ff:be:d6:57:32:21:05:ae:2d:a6:cd:14Serial Number (int): 371469108145910564055603398310467081784596
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ab:77:79:30:06:d7:d2:0c:a6:2f:b0:42:47:ee:6e:96:16:01:f2:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0d:e7:8a:61:81:09:0e:f1:f8:ec:40:b9:50:a6:48:7f:98:e4:b2:73
Fingerprint (sha256): 48:37:3f:1c:45:65:56:30:33:f8:c8:e8:4c:76:98:1b:ae:8e:57:b4:c6:d6:65:a8:9e:f8:b8:91:c7:4b:81:9a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sacalmahotel.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sacalmahotel.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sa-calma.com
sa-calma.es
sacalmahotel.com
sacalmahotel.es
sagaroina.com
sagaroina.es
www.sa-calma.com
www.sa-calma.es
www.sacalmahotel.com
www.sacalmahotel.es
www.sagaroina.com
www.sagaroina.es
sa-calma.es
sacalmahotel.com
sacalmahotel.es
sagaroina.com
sagaroina.es
www.sa-calma.com
www.sa-calma.es
www.sacalmahotel.com
www.sacalmahotel.es
www.sagaroina.com
www.sagaroina.es
Other certificates including the domain name sacalmahotel.com
(limited to 100 certificates)
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
sacalmahotel.com
Certificate
The complete raw certificate details for sacalmahotel.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISBEOmS+EZ/77WVzIhBa4tps0UMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMjEwMTE5MDhaFw0yNDA2MTkwMTE5MDdaMBsxGTAXBgNVBAMT EHNhY2FsbWFob3RlbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzjktrQSkjDR0SxuC0QWlq523Vub3rJGdtGfP2Gf1TfPtUMS3xrYFEUfR1YLgU MUXwl+GA44nK1noPRQNbZhqjLtPQYuiZ/zh4OE/+/BUHTe2syEc5MWGaNH7dzr2L NoeVA6U46ejKAfzJxekTPT4F0+zhmy1N2zNCP/bLmchISS4VlGLpj11k0ebWTqMO emLdGdEb4e+210+ZQE5zRYmQ3+RN/EQvAbMQ3dhS5w84Va7hBSQYlVLy+OQioO8U ygqw40yh0TDGJZhBlh2UmQgiiH1opsx2JiFbnmtsF9hDQ0bsyodu0UmK0PC3lFfK QaUnmGeLTzOoMRyWMrTPIrPfAgMBAAGjggLSMIICzjAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFKt3eTAG19IMpi+wQkfubpYWAfKTMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIHZBgNVHREEgdEwgc6CDHNhLWNhbG1hLmNvbYILc2EtY2FsbWEuZXOCEHNh Y2FsbWFob3RlbC5jb22CD3NhY2FsbWFob3RlbC5lc4INc2FnYXJvaW5hLmNvbYIM c2FnYXJvaW5hLmVzghB3d3cuc2EtY2FsbWEuY29tgg93d3cuc2EtY2FsbWEuZXOC FHd3dy5zYWNhbG1haG90ZWwuY29tghN3d3cuc2FjYWxtYWhvdGVsLmVzghF3d3cu c2FnYXJvaW5hLmNvbYIQd3d3LnNhZ2Fyb2luYS5lczATBgNVHSAEDDAKMAgGBmeB DAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AKLiv9Ye3i8vB6DWTm03p9xl Q7DGtS6i2reK+Jpt9RfYAAABjl7OGoIAAAQDAEcwRQIhAJS6FjchKdtBvXVo8zS7 fSR4lh8E+5qkImtSUSMeLutiAiAgeLkG5QLKeXmP+dUaZFU3zLQNPsnP3A6bygE0 sQgrTwB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjl7OGqoA AAQDAEgwRgIhANpnGpbSiyqTBbIxXHrn3zWIoair2v5aqrfZl3uINo1wAiEAz/vY BTMYmOLylOrJi8S5eByi4P3ZPvyR27IYlDu9fzcwDQYJKoZIhvcNAQELBQADggEB ACu29tASh0rlGi7NkZMI62MAoqE9KF1Xye+YOzh8OMd2Sbl3Hf2hRfLm/tEWNnDz yruMRGv2s5afAzfUZs3QC9lpoIyTd3KmApQzbFQgaIkfjzYmBXL2e6DsYgTz96wq glLaQYdJXcWhGCTEmmBAWZos1Ivf4RGo+xi5iqufwAQM7AxDIbARJIl+WpGb7Kme bIpVSEACdGvwP/8M31REw5DP8XejhQN96UZrIN1lXwR2j+LYtJ4KxcTW/piCKfjh hrwlfkc3o/sWOZROhzyA6pE5zrJlXt1ZbrEoUG0rCjxh2awtZoMwBZV56x/X74gY 9AdJLd5QQcvzMCNrlShccZU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs45La0EpIw0dEsbgtEFp audt1bm96yRnbRnz9hn9U3z7VDEt8a2BRFH0dWC4FDFF8JfhgOOJytZ6D0UDW2Ya oy7T0GLomf84eDhP/vwVB03trMhHOTFhmjR+3c69izaHlQOlOOnoygH8ycXpEz0+ BdPs4ZstTdszQj/2y5nISEkuFZRi6Y9dZNHm1k6jDnpi3RnRG+HvttdPmUBOc0WJ kN/kTfxELwGzEN3YUucPOFWu4QUkGJVS8vjkIqDvFMoKsONModEwxiWYQZYdlJkI Ioh9aKbMdiYhW55rbBfYQ0NG7MqHbtFJitDwt5RXykGlJ5hni08zqDEcljK0zyKz 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 371469108145910564055603398310467081784596 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 01:19:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 01:19:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sacalmahotel.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22666824674010255635332712463180859235698658684661832763955644063427110740844734840763309560631905866284644067932352117359639690991609694947525305489337792975982016919078245824727368671693777986571775515849039127398761286015394764317235617549529237558985658110039998067252710952251130053077806937391214998250851213278575111209458519887906242072204678602865000006472772327970971902354052623324622210053229993399915573551700653396480348986603052566755847925047423724985134118356174927995939550552440986020708057545886852201950010963518830152959285450886077362131933215429915655712589648377605693760618438497642897126367 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab77793006d7d20ca62fb04247ee6e961601f293 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-calma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-calma.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacalmahotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacalmahotel.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagaroina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagaroina.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sa-calma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sa-calma.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacalmahotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacalmahotel.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagaroina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagaroina.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e5ece1a82000004030047304502210094ba16372129db41bd7568f334bb7d2478961f04fb9aa4226b5251231e2eeb6202202078b906e502ca79798ff9d51a645537ccb40d3ec9cfdc0e9bca0134b1082b4f00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e5ece1aaa0000040300483046022100da671a96d28b2a9305b2315c7ae7df3588a1a8abdafe5aaab7d9977b88368d70022100cffbd805331898e2f294eac98bc4b9781ca2e0fdd93efc91dbb218943bbd7f37 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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