crossover.co.cr

Issued by R3

About this certificate

This digital certificate with serial number 04:98:4f:6c:c4:17:84:d2:e2:3d:4c:78:a4:cc:36:a1:38:dc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crossover.co.cr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:98:4f:6c:c4:17:84:d2:e2:3d:4c:78:a4:cc:36:a1:38:dc
Serial Number (int): 400277637255967000165931426723013427542236
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 02:08:38:3d:9f:15:e1:dd:58:0d:6d:94:7d:b3:0b:a9:2e:c5:08:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:83:3d:6b:82:84:3a:d8:0d:ae:4b:ae:17:86:80:62:6e:fb:fa:e7
Fingerprint (sha256): 61:e5:bb:a8:15:19:be:40:16:51:3a:37:d3:93:19:ce:f2:23:d4:d3:f0:c7:50:78:02:4c:7c:08:cf:d4:33:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crossover.co.cr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crossover.co.cr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crossover.co.cr

Other certificates including the domain name crossover.co.cr

(limited to 100 certificates)

Certificate

The complete raw certificate details for crossover.co.cr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400277637255967000165931426723013427542236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:42:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 00:42:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crossover.co.cr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909174633969631143704297906817447490590789888006034374422914241315598240703743519353907012337832838987910708258054785345227228495147439242956631688002760696216633934027216585432018149707165151506062703009145752101828920288454641043259036287838262454392792638842242560817098062523029775696540450363432478020890654303884575941298777899765830234470271933719496898255653527488921358941444650791707410828843950069716846109176052006202218915498130323107563271547684248630020244547551495261462427418680284437320307491256496339662769045345449765447526184783890152626433372345295645627799443903684047851063490496993681134597329700334449426012270213216383517683748197303375762148201485181488024271600468884406563755951291719025127864765050913937095166745076570249273123380863236447469065290579562339581087196611489398734453707246171884640988226102271894186171866027513046125488267781034477791970624190868998791232499009291675294401727281510867785107480853743556863060963110010091975824834774202013110195740081905253748596920508924103127723751267841455309397047934481116283171608720293494083316501535323366769748493701430316510761822130155668449309081429181375060264891930643729209902128105096136943112329449604240043665941394192005746395729183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0208383d9f15e1dd580d6d947db30ba92ec508d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossover.co.cr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c37a3ed3d0000040300483046022100d16057297ff74b1cfeb58998c2e6add923b1fafacae51a5b80faa4cece1aae62022100fb406cee1ac13b557a31c2307b60d1edcf431e9549870ba1bd75346f47f99a0b00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c37a3ef880000040300463044022027783d3b7e1f65415fa4edeb426b52e8eac7db1c36e3697dd355198dc71bf36f02201c1a01e96f15636ca9eaa8ceb3cc0952b526b0c692a3c88ee977787c482a5477
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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