lourdesgzp.com

Issued by R3

About this certificate

This digital certificate with serial number 03:53:7d:31:f6:50:de:6c:3e:c4:1c:e0:19:86:69:77:8e:1f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lourdesgzp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:7d:31:f6:50:de:6c:3e:c4:1c:e0:19:86:69:77:8e:1f
Serial Number (int): 289746707167617667130023857552463031143967
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:85:74:24:24:70:62:a7:b4:6f:73:70:84:f7:72:38:0f:39:c6:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:bd:a0:fe:4a:2f:a5:bb:3a:08:9b:8e:05:b0:69:d2:90:46:e1:9a
Fingerprint (sha256): 5b:08:67:4f:cf:9c:ec:77:75:1b:94:dc:8d:b7:e4:bc:4f:cc:cf:eb:16:94:9c:ce:a4:91:79:23:ab:0e:71:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lourdesgzp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lourdesgzp.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lourdesgzp.com
www.lourdesgzp.com

Other certificates including the domain name lourdesgzp.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lourdesgzp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6ykB1FpaAH4gs5ZCOrUE
ErzEVmhPIH56F9HPgDA25QOR6Q5ennPdnQoV1U3xZuohGzRs/Jr/mo0JDrVbCRCe
wci+dlUxOIZHIqCyFgdWVLLpCuAwDMlBqBAjLAAsmERu4KCkqzIc21u0mLtcqNWz
Txr4YuA6X8EzFxkZ9aGd+QQqFdJfBR0i3+9kMesTq021aS71dQOxe6tTFiUlByRq
QojuVzdkHBIutIAY+4JMy8N1aZpIu/o6DW8kE9Y6mvZb04PXO8Rz1dZXqZTWXP/c
sKYMyJ9fqMTG4J/LF3yA12cflyVjts5jiFrEOQOuHkhD6E88tWQglUOYQl+PkOPN
wTcb2Kug5uVyXXP64ucubKgtDy368bhi5sc8/6xsLCyHhdKoPoAByUzybo2Iq4Qc
t9YjRBoTDs2vwow/BmiB5qkgyQz7/U2Gxsg/PaDTziXCwePXLHb31KRF/fC7ehTr
+9ZLRQ7xJSGgYP6jh4f1GX41bskDMKwo1W0O5HfaVPX74B8O/KxJUCA1jcP9eVdM
U5R66ofTXTZ3cTxazbzUro7VQ/lrQnP8f1j3I3v4DW3Iw9zDZIRjQP2T7BW9lRIB
xg2xDYVHlkojq8OHaHhxUFVoLNu4ozs4hcd8ttN9MLth4cIV4YB2MGnqmGvkig3U
IQqWLJNLrBjdS3xq1I7hsnsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289746707167617667130023857552463031143967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 02:20:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 02:20:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lourdesgzp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 959369850367384793615486390559033591788119789986653955658013721173782510994767623397344598676732933908185720426442564262645711709725322321528470520293736405000637714312853783324934433598209683677304853661692113773942651980602401109065966820499970795253718715329060633781457118403892167622243362373039644979071266372902187939782333021425309022596853976176623020275125392997928053629401614228161445559324926497567909440876145841225315692586076629456758471507364396767765746983433448132185695114064616611448488087799093975617980383543554302831297824762613103117318841223345455582884128224613244870151644255852698708648920964626309052077841789635770735108041994971434762092023750586663719868772454939386944974696187260706368116747600147663342745088215574141023187016775151119963638658529364942649654143061728893732109077155210523904592492422446832057852615318671435998945233158536880487474475006045616307149603330397999403464905214523029165883664278116387142298929732922572470378461758404290509836342868589925518895415281572802437730558339827358442666145146618599148436593252993092503200650775601783383186422780759953569462099019635621960266120700376237573189903507318754178286753086897254202563233144349261871466346268060065859656331899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c857424247062a7b46f737084f772380f39c641
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lourdesgzp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lourdesgzp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d48ee72b00000040300473045022100dabebf92011098d7e02afcdba185fb20d2a157fec6b5e6d6b1984d2333f6270202204cf9962e8e33c4a80c82dc54d8355add6e96736abef9c57ebd6ba6b3658e3e9f007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d48ee72c60000040300463044022031a7e102fcd763603ddaf40f1e0b52c609bbd38a212c52192482d41790e075b4022059b2723ec94235f14d8edfc7b175f739f9bc1646999c19172ae22b4641c13c3c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a83b77a8b7b701e39e8557b2678106ca978bd6ee2afed7c5b9c3d66be6eec218de1526d6c3b90d4d37d59f017b181f2efde2617395854be56039574f94bba20d86a4ae397b88b40262c9d38b2cc226feb0fd7a87802182ca0b997d599f2d17800914c7763486c994d6af9a0a8128ba3b75973f2e742547be03f881ee7bdd6f0f7a9d9ec9cb16b7412d1201e0aadcb705d3c6c54160c6a8af387b5f3538c57f54255017ceb8c071e22c792b7373c1602c92305e0cd2539dffeecdc9bc812696f8220de5a590730bb840d356d1cd7f287893a093d24729cc91f1871b152de554362f6b174cdd7c70a2c2983f69d90d9a11d3c427936c1ed316a38c4748c7d7e52b