spanesi-americas.com

Issued by R3

About this certificate

This digital certificate with serial number 04:55:99:60:e3:8b:91:db:b9:a1:57:7e:32:c7:68:a2:9f:1b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spanesi-americas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:99:60:e3:8b:91:db:b9:a1:57:7e:32:c7:68:a2:9f:1b
Serial Number (int): 377577019874339103029093610509096452267803
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:0f:94:c9:78:c6:42:83:a3:b4:b9:92:dd:f6:ec:94:17:ff:5e:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:38:5d:d2:fd:f8:aa:62:4c:0b:e5:15:2f:ab:9c:ee:49:3e:08:82
Fingerprint (sha256): 4f:05:75:32:84:01:2b:09:bd:b2:a2:8f:7c:52:74:7b:80:3b:68:24:1a:f1:01:88:9f:b6:3f:41:76:ce:40:cc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spanesi-americas.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spanesi-americas.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spanesi-americas.com
www.spanesi-americas.com

Other certificates including the domain name spanesi-americas.com

(limited to 100 certificates)
meetings.agencyone-group.com
meeting.strongdallas.com
meeting.kreate.agency
meeting.kreate.agency
meeting.strongdallas.com
reuniao.unitaanalytics.com
meeting.kreate.agency
meeting.bezaperformance.com
meeting.moonhire.com
meeting.clixlogix.net
meet.mysocalhealth.com
meeting.kreate.agency
meetings.agencyone-group.com
meeting.kreate.agency
meeting.kreate.agency
webinar.engys.com
meet.keterna.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meeting.tradefy.com.br
reuniao.unitaanalytics.com
meeting.theholdingbox.com
meeting.kreate.agency
www.petozonesummit.com
meeting.abrahamsenfinancial.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
spanesi-americas.com
meet.mysocalhealth.com
meet.bodytechniques.com
webinars.spanesi-americas.com
spanesi-americas.com
meet.keterna.com
meeting.kreate.agency
meeting.kreate.agency
meetings.bopyx.com
meetings.stricklybizzness.com
event.ilmcon.org
meeting.kreate.agency
meeting.kreate.agency
meetings.greenlight.education
meeting.kreate.agency
meeting.kreate.agency
meeting.thebrandingzone.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meeting.virtualpethub.com
meeting.theholdingbox.com
meeting.kreate.agency
meeting.kreate.agency
meeting.heshamsaad.com
www.spanesi.us
meeting.virtualpethub.com
meeting.strongdallas.com
meeting.thebrandingzone.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meetings.greenlight.education
meeting.abrahamsenfinancial.com
meeting.kreate.agency
meet.minervaintelligence.com
meeting.moonhire.com
spanesi-americas.com
meeting.kreate.agency
meeting.fastrnd.com
spanesi-americas.com
meet.minervaintelligence.com
meet.keterna.com
meeting.kreate.agency
meet.minervaintelligence.com
meetings.synkron-international.com
meeting.kreate.agency
meeting.kreate.agency
meeting.kreate.agency
meeting.thebrandingzone.com
meeting.kreate.agency
meeting.abrahamsenfinancial.com
meeting.kreate.agency
meeting.kreate.agency
meetings.greenlight.education
meeting.kreate.agency
reuniao.unitaanalytics.com
meeting.kreate.agency
meetings.greenlight.education
meeting.kreate.agency
events.mondayskills.com
meet.indrastra.com
meeting.kreate.agency
meet.indrastra.com
meeting.virtualpethub.com
meeting.strongdallas.com
meeting.dinepalace.com
meet.ensura.com
meeting.kreate.agency
meeting.kreate.agency
meet.mysocalhealth.com

Certificate

The complete raw certificate details for spanesi-americas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377577019874339103029093610509096452267803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 12:26:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 12:26:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spanesi-americas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3984672723560666445228885979385930768589063101463645026789741815806198975321109857368625307858210996354419913240500425335702091381570329885660631539510204971205777363023572589771529650216645953477696331201716103292406519921808299707969871995254427423690493975041459449006738556726677324763742700707284748263502027132748383681709094058532542775906919026785431201330553752768628172442050977361184164374491635669772983645991564301484341423277184967614039465144199979118240800879378511998600959565640963866652988224424621154705169229713672417011944158343282315480966094083279701556419599359299550558411660811619584105974961868790814191445563145220065574629622244938237396503818904803718166254916229303328950150600569367767996187438407233124592984267402502053532392425212376238652715912539224813146846897118259647217931647318566041074450279836332148877648844390589445321533140213486900597907837786481185960127096691399286053584017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f0f94c978c64283a3b4b992ddf6ec9417ff5ed4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanesi-americas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spanesi-americas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e80174ab00000040300473045022100edcec05aa12e8df3171cbd8ff9060a5eb25ae9b1e0291ead1641cb9997697ee902205d90f1aee04d7d1a8adafaef198c2902fb348739547b360fd53b4fb15643f97400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e801752aa0000040300483046022100c5f3c63b0ce2ea9a41cdb9d224fce96817ece641f35c83c84046802119cd4dc7022100fb5664abd5d70fd7537435abbe2e7331348f475edea6b1ff219b69a850b6460c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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