langex.com.ec

Issued by R3

About this certificate

This digital certificate with serial number 04:7b:1d:d0:59:f3:51:c7:3c:0f:fe:dd:37:2d:8d:bd:3a:c3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=langex.com.ec

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:1d:d0:59:f3:51:c7:3c:0f:fe:dd:37:2d:8d:bd:3a:c3
Serial Number (int): 390343504292352962758587208529340398385859
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2b:29:e3:84:7a:ff:2a:9d:b0:29:5d:0e:ba:67:aa:fc:0d:fd:8c:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 84:b6:df:23:ab:b2:95:b4:a5:8a:11:12:2b:de:ba:5f:b8:9a:75:ba
Fingerprint (sha256): 5e:e0:0a:4f:a0:f7:3b:c4:2c:83:54:67:89:d4:73:85:a7:e3:1d:c9:ac:7f:68:7c:c8:68:eb:4e:c7:f3:a7:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate langex.com.ec

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for langex.com.ec

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

langex.com.ec
www.langex.com.ec

Other certificates including the domain name langex.com.ec

(limited to 100 certificates)

Certificate

The complete raw certificate details for langex.com.ec in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390343504292352962758587208529340398385859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 19:05:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 19:05:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'langex.com.ec'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756616370717515924428896920665822360589921302721828371251666286011545642908410868539486747718269336745876983270661741694366592528507730713293001038676465962078325703845378117753698334944568647286423988823000385985582675061855203311060562479923846490936274224641277503948052753080499763644501665682294913956282236440906734786342617371314992098642795531042644210395542565148308501010816464487387450043943667023775442148105604648247357390404574688920364522913013731207437009398148114934435443665806633491410046544115169497042834747837453736895215640051097855936419956035932056935238090912235660385172276437753892804598874377024311943310160111792605431076630186093566607382683182207458243149347723766610007410097172099401347855053212026069957642355661038688803165947690840940018468873371405941886700120375620334912756987800051850372508123741015225750977733934767520435637973560427729664139847586331051126714489150674256771114171490783703322275784155234113934816054748971858889874840931273928458948285178936734300893696844166399384910712633746402363039827995858679856575892115265759120335967673058699097069555776140115918267268717740826809272137675204538484546960101205421778123665930116796307122124902458257385521239660794955348502081451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b29e3847aff2a9db0295d0eba67aafc0dfd8c51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langex.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langex.com.ec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b72bd9da4000004030046304402206bed767180f84979016412dbdc156477d6ef55eb81001602389c59792bf84b1d02206bc5e413f85a0c1087635609e454dc79ac511330bc5848af1b812b268b4421de007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b72bd9e080000040300463044022069796bae068b7f7ec36b01538a5f126df40f7ac9fa4cd5194fbe77f71432bdca022041218f9aab0c3ee7b15b7e779734e5ea75409db4379fcdd93d3ba84d6c78f74c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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