langex.com.ec
Issued by R3
About this certificate
This digital certificate with serial number 04:7b:1d:d0:59:f3:51:c7:3c:0f:fe:dd:37:2d:8d:bd:3a:c3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=langex.com.ec
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7b:1d:d0:59:f3:51:c7:3c:0f:fe:dd:37:2d:8d:bd:3a:c3Serial Number (int): 390343504292352962758587208529340398385859
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2b:29:e3:84:7a:ff:2a:9d:b0:29:5d:0e:ba:67:aa:fc:0d:fd:8c:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 84:b6:df:23:ab:b2:95:b4:a5:8a:11:12:2b:de:ba:5f:b8:9a:75:ba
Fingerprint (sha256): 5e:e0:0a:4f:a0:f7:3b:c4:2c:83:54:67:89:d4:73:85:a7:e3:1d:c9:ac:7f:68:7c:c8:68:eb:4e:c7:f3:a7:34
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate langex.com.ec
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for langex.com.ec
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
langex.com.ec
www.langex.com.ec
www.langex.com.ec
Other certificates including the domain name langex.com.ec
(limited to 100 certificates)
Certificate
The complete raw certificate details for langex.com.ec in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISBHsd0FnzUcc8D/7dNy2NvTrDMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjcxOTA1MTBaFw0yNDAxMjUxOTA1MDlaMBgxFjAUBgNVBAMT DWxhbmdleC5jb20uZWMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC5 dhw6VNaKsklZDQeVOGUhjzwdZau4cCGIWndu0aE6Cs0rcAyrmroqNMY1U83bZtyL FEvylXLSokIGb8JWiTl2akS8Txbz7Rf70ouN5SFR8ho7riDc5n12fu0pz7IO/hHb K5KyLKQpwyOnoanWsyqcGPYgladveNffHu3lAW+2+r+CdYbRlA3okab2jD2848Mp Jk7Fl8SDoX+JxcR3mNnmYpEdI/pTkHkAitn30K3O/5RWLVB78LufDLDEWBhauEli CyUZ3BjCHz561wczsIUB4K8Z6SmHkPsFlIN1Sg25WpqojeCjH2RSrwB5s8ehvqcG 3d82vPgsRNvP21NU2DB8GGtrpNpwyjhjxM6v3pEuH6jVmBMFyUbTUHguqW6HU573 sI3kWCe49Zq+CcAS3mXaOv2Gkm8uiOt7XyBY1DJGuI1Lt1LP//xOUW/A/uCNVW4w NJFBuKDK4yV9HdXNWEPecQQy0j5EXyGyOyolFoQKjpSTwfKhs9cItFpGn8LVS5BD mOdKIEFuzgFoN0Qf9hgodRAFgOXcXdZGfWI2m6tQKQDWDSB9c6J1SerYKc3RX9eN 5tWdj3nWaZ+irK/O8qQBCMcZBBYdwwou/N9nzlXN2k41PAyoXMQqM4+qg/arfzhI 8CKVdzkwrphGE4mPQPmolG0yqQKe+D5zCQY3rfNvqwIDAQABo4ICIDCCAhwwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQrKeOEev8qnbApXQ66Z6r8Df2MUTAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzArBgNVHREEJDAigg1sYW5nZXguY29tLmVjghF3d3cu bGFuZ2V4LmNvbS5lYzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkC BAIEgfMEgfAA7gB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB i3K9naQAAAQDAEYwRAIga+12cYD4SXkBZBLb3BVkd9bvVeuBABYCOJxZeSv4Sx0C IGvF5BP4WgwQh2NWCeRU3HmsURMwvFhIrxuBKyaLRCHeAHUA7s3QZNXbGs7FXLed tM0TojKHRny87N7DUUhZRnEftZsAAAGLcr2eCAAABAMARjBEAiBpeWuuBot/fsNr AVOKXxJt9A96yfpM1RlPvnf3FDK9ygIgQSGPmqsMPuexW353lzTl6nVAnbQ3n83Z PTuoTWx490wwDQYJKoZIhvcNAQELBQADggEBAC36rfnKbjkNb5R5SS8nFXxWEjf4 Yapa4S+vE7j6SiXg2lZkvdjFwCSL6JZIOz451IM2474SBCBx7QjP4lPaojY6ZooT Qic0kt5OQb3AkXVgyJJSipIKhfTMy+uQ9CdzRtJFCp84gPLAjimJCxsHbJuffpJX aEBN6KXLWYRgrD4QqBj9aJX4YWyk1JVUoi6xf7oMU96dbzu5smJ4jdncxhj0k+gg 6FHW4MbbNLMnAXtle7hYrwug/MX2yJd8R2CecqokVhGM6pSYqIS4KhLm7ZGZ/E+M eKKzMuTpgp7AlM6nKpt3vIbU8mSiYGIRcYCnes5gDG+2DGKm7ycdSk9/JXs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuXYcOlTWirJJWQ0HlThl IY88HWWruHAhiFp3btGhOgrNK3AMq5q6KjTGNVPN22bcixRL8pVy0qJCBm/CVok5 dmpEvE8W8+0X+9KLjeUhUfIaO64g3OZ9dn7tKc+yDv4R2yuSsiykKcMjp6Gp1rMq nBj2IJWnb3jX3x7t5QFvtvq/gnWG0ZQN6JGm9ow9vOPDKSZOxZfEg6F/icXEd5jZ 5mKRHSP6U5B5AIrZ99Ctzv+UVi1Qe/C7nwywxFgYWrhJYgslGdwYwh8+etcHM7CF AeCvGekph5D7BZSDdUoNuVqaqI3gox9kUq8AebPHob6nBt3fNrz4LETbz9tTVNgw fBhra6TacMo4Y8TOr96RLh+o1ZgTBclG01B4Lqluh1Oe97CN5FgnuPWavgnAEt5l 2jr9hpJvLojre18gWNQyRriNS7dSz//8TlFvwP7gjVVuMDSRQbigyuMlfR3VzVhD 3nEEMtI+RF8hsjsqJRaECo6Uk8HyobPXCLRaRp/C1UuQQ5jnSiBBbs4BaDdEH/YY KHUQBYDl3F3WRn1iNpurUCkA1g0gfXOidUnq2CnN0V/XjebVnY951mmfoqyvzvKk AQjHGQQWHcMKLvzfZ85VzdpONTwMqFzEKjOPqoP2q384SPAilXc5MK6YRhOJj0D5 qJRtMqkCnvg+cwkGN63zb6sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 390343504292352962758587208529340398385859 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 19:05:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 19:05:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'langex.com.ec' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756616370717515924428896920665822360589921302721828371251666286011545642908410868539486747718269336745876983270661741694366592528507730713293001038676465962078325703845378117753698334944568647286423988823000385985582675061855203311060562479923846490936274224641277503948052753080499763644501665682294913956282236440906734786342617371314992098642795531042644210395542565148308501010816464487387450043943667023775442148105604648247357390404574688920364522913013731207437009398148114934435443665806633491410046544115169497042834747837453736895215640051097855936419956035932056935238090912235660385172276437753892804598874377024311943310160111792605431076630186093566607382683182207458243149347723766610007410097172099401347855053212026069957642355661038688803165947690840940018468873371405941886700120375620334912756987800051850372508123741015225750977733934767520435637973560427729664139847586331051126714489150674256771114171490783703322275784155234113934816054748971858889874840931273928458948285178936734300893696844166399384910712633746402363039827995858679856575892115265759120335967673058699097069555776140115918267268717740826809272137675204538484546960101205421778123665930116796307122124902458257385521239660794955348502081451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2b29e3847aff2a9db0295d0eba67aafc0dfd8c51 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langex.com.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langex.com.ec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b72bd9da4000004030046304402206bed767180f84979016412dbdc156477d6ef55eb81001602389c59792bf84b1d02206bc5e413f85a0c1087635609e454dc79ac511330bc5848af1b812b268b4421de007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b72bd9e080000040300463044022069796bae068b7f7ec36b01538a5f126df40f7ac9fa4cd5194fbe77f71432bdca022041218f9aab0c3ee7b15b7e779734e5ea75409db4379fcdd93d3ba84d6c78f74c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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