cballenar.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:c1:56:10:7b:15:92:2b:a8:60:c6:e3:54:d9:25:72:c6 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cballenar.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:c1:56:10:7b:15:92:2b:a8:60:c6:e3:54:d9:25:72:c6
Serial Number (int): 265336951706397679338840245142935048647366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:fa:12:7d:6f:20:9d:5f:40:81:33:8f:f9:35:8e:83:a0:f8:3d:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:89:f3:b6:d8:8a:3a:9e:98:98:e4:e3:72:e1:c4:86:70:ed:39:0f
Fingerprint (sha256): 50:3b:bf:da:fa:fa:42:0a:a4:a7:e0:6b:c5:c4:4b:7f:eb:ce:88:84:4d:f2:76:0c:9a:7c:80:43:e8:c4:c9:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cballenar.me

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cballenar.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cballenar.crunchyweb.com
cballenar.me
www.cballenar.me

Other certificates including the domain name cballenar.me

(limited to 100 certificates)
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
tinvoice.tintash.com
cballenar.me
sni76324.cloudflaressl.com
pets.cballenar.me
www.marina.franciscomoya.es
story-wise.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
clasharena.in
sni76324.cloudflaressl.com
askchat.me
trigo.5loyalty.com
cballenar.me
cballenar.me
cballenar.me
cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
cballenar.me
cballenar.me
sni76324.cloudflaressl.com
cballenar.me
sni76324.cloudflaressl.com
www.marina.franciscomoya.es
cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
cballenar.me
cballenar.me
sni76324.cloudflaressl.com
cballenar.me
sni76324.cloudflaressl.com
cballenar.me
www.mattbairdmusic.com
pets.cballenar.me
bazar.li
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
cballenar.me
pets.cballenar.me
pets.cballenar.me
cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
handd-album.re2fe.com
sni76324.cloudflaressl.com
grub.cballenar.me
pets.cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
cballenar.me
cballenar.me
grub.cballenar.me
cballenar.me
pets.cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
pets.cballenar.me
sni76324.cloudflaressl.com
cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
cballenar.me
cballenar.me
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
sni76324.cloudflaressl.com
pets.cballenar.me

Certificate

The complete raw certificate details for cballenar.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAwvBVhB7FZIrqGDG41TZJXLGMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMTcxMjMwMjdaFw0x
ODAzMTcxMjMwMjdaMBcxFTATBgNVBAMTDGNiYWxsZW5hci5tZTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAK7MYwdJn4PYP8GMwvDPDBusOHGHOwuijmJM
DxcUi1B2n3ED6hf0m+5W7kzy2WGk1vsxJC/3NBpp/EK4hZTfLzYgfBGvMSjj8cYS
874NAqlHl5UC/9Ej3MHtdAEJR+tWkoCDN3EsjKuwn1Ehj+TKqQgvG/ZlPfHKJMTT
keOSwGx6Q7QGJ/R9LtlTleJNf3zC6ZwVhFpm+6oNilEdGJJGJonnh9jcSqO7VpMC
FPIUertaxW/G/lo2WrHmZcPivhfDQUaJJT8UPisFQBS9O0ovn5R3QGPL3lu8BAsA
BFyW/0eV0LmCzSfbsw28lXeAgbkRx2FJ0kDVOkimIcG281bilWcCAwEAAaOCAjgw
ggI0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUNfoSfW8gnV9AgTOP+TWOg6D4Pdow
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzBDBgNVHREEPDA6ghhjYmFsbGVuYXIuY3J1bmNoeXdlYi5jb22CDGNiYWxsZW5h
ci5tZYIQd3d3LmNiYWxsZW5hci5tZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB
5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5
IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5
IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k
IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3
DQEBCwUAA4IBAQB41XZUezLx24pFX5POWNl4D3lZ/NHsqBEfHhKY7ALYdisYR3nD
/VXRYDXF+09/aXWsZ+cIGtAcdBjnfaS8Z84Qx7bulj7b+IrX3slUPSdG2rCeHqG7
/SEhOt+jHWKdwy9iDA0iPt4MGgnaS5X5+i0TIg5vto1Q/zPUmieEVE3PCLASmTwi
Yi0wgpk8PB8/xZ7dq7rSFFKMfWWCAJN4OPrGBJaiyWkKFtI06NIFuzTxSBHCk95f
Scl6QG2ym8DPBGADB2t1mghnoeNTfPXK3g+u6lky8m3ApM3eZ41KHZ4lZat9FeBm
x2jtQRfj+Ay2Ay7TkiYlJIpVvCVxkfhbfrzb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsxjB0mfg9g/wYzC8M8M
G6w4cYc7C6KOYkwPFxSLUHafcQPqF/Sb7lbuTPLZYaTW+zEkL/c0Gmn8QriFlN8v
NiB8Ea8xKOPxxhLzvg0CqUeXlQL/0SPcwe10AQlH61aSgIM3cSyMq7CfUSGP5Mqp
CC8b9mU98cokxNOR45LAbHpDtAYn9H0u2VOV4k1/fMLpnBWEWmb7qg2KUR0YkkYm
ieeH2NxKo7tWkwIU8hR6u1rFb8b+WjZaseZlw+K+F8NBRoklPxQ+KwVAFL07Si+f
lHdAY8veW7wECwAEXJb/R5XQuYLNJ9uzDbyVd4CBuRHHYUnSQNU6SKYhwbbzVuKV
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265336951706397679338840245142935048647366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-17 12:30:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-17 12:30:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cballenar.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22066251966321735942241784080035948344391944444785162218028185345071251195520430660162015199684849727073657373261712649138121903964539372917591789984994605369523385950308076232115766406514340986052727824726543484623563067000602769408440395951788185990703649801809748515539919668880510549075965774341795007068768474330721981710990395465771829061552459264397002261983557379617860412255649921431368068413677540250470678580112538973559646300262438922295861191231306328737031155282713376745008896350651394880727064520982411514841198634365486328633682626283031451322178902844851037389628523944044472324422247687864547710311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35fa127d6f209d5f4081338ff9358e83a0f83dda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cballenar.crunchyweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cballenar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cballenar.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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