www.travelnayarit.startdots.net

Issued by R3

About this certificate

This digital certificate with serial number 04:d3:57:c0:af:f9:63:28:56:fc:1f:73:a0:66:89:1b:04:cc was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.travelnayarit.startdots.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d3:57:c0:af:f9:63:28:56:fc:1f:73:a0:66:89:1b:04:cc
Serial Number (int): 420365366473169309633988554611069541876940
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:d9:e2:52:fe:85:eb:cb:de:c9:37:18:64:58:79:6c:41:cc:62:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:65:f8:da:28:db:0e:f5:21:40:66:69:24:fe:e3:b2:b1:7f:4d:ed
Fingerprint (sha256): 58:ce:6e:6d:6d:9d:4e:0f:66:23:77:34:d1:ef:28:7d:e6:85:f9:04:ba:87:67:b9:18:00:30:7f:83:71:fc:87

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.travelnayarit.startdots.net

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.travelnayarit.startdots.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hotelsinvallarta.com
*.rivieramaya.estate
*.startdots.net
hotelsinvallarta.com
rivieramaya.estate
startdots.net
www.clients.startdots.net
www.ferpintado.startdots.net
www.hotelsinvallarta.startdots.net
www.rivieramaya.startdots.net
www.test.startdots.net
www.travelnayarit.startdots.net

Other certificates including the domain name startdots.net

(limited to 100 certificates)
encanada.ca
www.rivieramaya.startdots.net
encanada.ca
startdots.net
encanada.ca
backpainrelieving.com
travelnayarit.mx
encanada.ca
rivieramaya.startdots.net
startdots.net
encanada.ca
startdots.net
bestdeals.discount
hotelsinvallarta.com
www.travelnayarit.startdots.net
bestdeals.discount
hotelsinvallarta.com
travelnayarit.mx
www.rivieramaya.startdots.net
backpainrelieving.com
rivieramaya.estate
travelnayarit.mx
travelnayarit.mx
travelnayarit.mx
travelnayarit.mx
bestdeals.discount
travelnayarit.mx
encanada.ca
www.website-49efdc0a.startdots.net
startdots.net
travelnayarit.mx
encanada.ca
hotelsinvallarta.com
bestdeals.discount
startdots.net
encanada.ca
backpainrelieving.com
www.test.startdots.net

Certificate

The complete raw certificate details for www.travelnayarit.startdots.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQEVHzTlBJbeRdtovy1m
weEK8Ve9ePtLoK/+vNd2ve+4AX3T3h22XF5lubfs4VwR1MGzhwRsAw/0dIsVctAM
Zsjf93HYRf6o1qfLUMrrxrAhI50IUQDtZfBFVz0+GljYOIYCjwP8fDTY1IN5IzCu
mSSJAyJpOlvsDlhjIWboy/zK04ZJ6sV5hFybNEAM52vTwli2Knbuv2Lio6RE+N/3
4hC6VxOIxY752m5r2fauJrKuZqkn6+pyXyYD0OW2ChfSyCIrXdmOT2mF3Bs34qnZ
k2yH8fF+4Py5iv6EpD6F5jGg6SMFMcbf4bUDcIaE5yhTaZroCrpaftFKolhgYUcC
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420365366473169309633988554611069541876940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 11:11:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 11:11:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.travelnayarit.startdots.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21839760563434678990021413825486302440339197232479542547420061798440125782254625090179067686543290065058511327769969353317741129203786542288517473056964029084426072743905596323001017076196247305736720507348029824934241438257202143312393453461609277275229677960207382947057068402197732288272474308494711061930512070523892435949217550314358097225036758830812035212096202492429492097529778531942304629480088419090588019297791922295743929221349748428638148454186790328530142356932126279313425515525942375807795616289737708162812771511429132838014564588216623221862555518038593295880930503916913550099618416231632442163717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9d9e252fe85ebcbdec937186458796c41cc62ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelsinvallarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivieramaya.estate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsinvallarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivieramaya.estate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferpintado.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsinvallarta.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivieramaya.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelnayarit.startdots.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aad5a868d00000403004830460221009a663b35addaa78b57ea34863447170c5b1ad52a3aa172dbc9070818db560831022100e44b8fed47a469558cd3a1fe9ea53211deee04f6fbb8b58b24d9821f0ad28dbd007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aad5a86ca000004030047304502201bae5fbf6e0f330e89ce2942b21d493bc988068756239a73b77f675cab735ae00221009a1f837914e546a895f20ddfe4d4e7702bad7ff4f6471e8d8511107394034541
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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