crossover.co.cr

Issued by R3

About this certificate

This digital certificate with serial number 03:17:70:63:c2:01:1d:ee:ce:b3:3d:df:06:d0:ac:ff:94:19 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crossover.co.cr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:70:63:c2:01:1d:ee:ce:b3:3d:df:06:d0:ac:ff:94:19
Serial Number (int): 269312743742255185161911900210503908037657
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:bc:06:27:1c:69:82:2a:74:20:07:81:8d:f8:e4:96:54:20:3e:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:38:b8:b5:4e:cd:3f:8d:d2:c5:76:ac:10:70:e2:8f:a9:2f:47:32
Fingerprint (sha256): 4a:9c:2e:5f:db:da:fb:7e:35:d5:78:ca:a0:59:61:1a:2a:f5:33:a6:96:9a:95:42:be:f8:d6:a0:75:bb:3a:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crossover.co.cr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crossover.co.cr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crossover.co.cr

Other certificates including the domain name crossover.co.cr

(limited to 100 certificates)

Certificate

The complete raw certificate details for crossover.co.cr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269312743742255185161911900210503908037657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 00:42:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 00:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crossover.co.cr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 944829779422529481057732270630668336606532923528514065521527943632114250577875412192020275601704184407522984506793665727701685041508406958251323695440182682724298108742242086560601086393254180044615719965455242737948180785803478464014071261448995902854214348700399150952804827685691124136586559507305188685663453845255467101014547666033218969413327740823095097103476032553268195810442594053917337770371866637746578676320566829469730378662103726619850288569522685477413125209105112999490625309658889999169477767619679958939714137452455320510982106772652127891345173260712332602051106134756837558357920191492282069954778897654543128035141147873385721114347502344064461162906473792559272885540550312003624481729398832910110454114764806695232452343252330945299868651631138240896078592398568742101463254939713646758821228792952463696916381722710782772088789988417561540041056528056870437768380588575749858871413469552891184117024505358011708637666972551810375112044934209345197634759634051869033450808848848620903032421208835615465697289508597491281558387684228126663372917516361158773969628456772255512375728740204207351723414414299968660124072953015090883735611654764026416697875664869190988469249745245278790872163722195807275700161273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98bc06271c69822a742007818df8e49654203ea2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossover.co.cr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d677b247a0000040300473045022100a29efffdfddcde91851f05e3229bde50c4e4d281faa3554f122557303236f67a02205726dc11df9472dfa0fbec149d4e44aa757b5e73d188877a18995cf598e6546a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d677b24730000040300473045022100b276d36c26db2f666fdd23b43195ea49ee7db860bca1dce68c7b7b7762f3e86702204e4eee976920675d8fea5053800f94dda93cd413140ae704de814bdafdfc3140
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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