www.tecnologiaenergetica.com

Issued by R3

About this certificate

This digital certificate with serial number 03:98:df:1e:58:8c:f6:16:b0:99:3b:6a:a2:0a:77:9a:cd:41 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tecnologiaenergetica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:df:1e:58:8c:f6:16:b0:99:3b:6a:a2:0a:77:9a:cd:41
Serial Number (int): 313356352975249327286882264946658281966913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:1e:3f:87:8f:f3:2d:30:58:9e:54:20:a2:c8:08:9f:c8:d2:bd:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:0a:64:3f:df:ac:c9:fa:e9:ca:10:7f:1c:e6:e5:f0:b4:7a:ce:cd
Fingerprint (sha256): 62:36:86:b7:ed:dd:56:7e:97:a6:1c:4d:1f:19:d7:bb:c4:c3:de:4c:4c:6e:e8:52:33:0e:6e:4c:ff:c4:76:e9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.tecnologiaenergetica.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tecnologiaenergetica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amaranthine.org
caremagnet.ai
chronicsinusitis.org
freezones.ca
goldoptions.ca
luvu.social
mysteries.me
nationstrust.org
newmax.org
nunootropics.org
organicfleaandtickcontrol.org
pon.life
shayv.org
tecnologiaenergetica.com
www.amaranthine.org
www.caremagnet.ai
www.chronicsinusitis.org
www.freezones.ca
www.goldoptions.ca
www.luvu.social
www.mysteries.me
www.nationstrust.org
www.newmax.org
www.nunootropics.org
www.organicfleaandtickcontrol.org
www.pon.life
www.shayv.org
www.tecnologiaenergetica.com
www.xn--rypto-p09a.com
xn--rypto-p09a.com

Other certificates including the domain name tecnologiaenergetica.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tecnologiaenergetica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQwoc9dj8pyNgu8h+M7/
KQC0dbfomXBJ+4Iha38HjsVjOd25NeadgRLTaT7Nt0Q9h5gGoCmQBZXpvzEfd+Zp
zfueEk1RV3fldxOwvH5kWNUf1XmgpLH0IYRTkcXuUr0dOFn+lYes03eivxu00y/B
rFU0T3be0DitpTuYJy6rMwhOOTYJS2ibHtWLGP9sd96OMactTuOwB01ekgFW3Yg5
e+Dj4RQI/5BmjpfJ5JcoHSGn1dtZK6gCuv8G3bbHp3qQb/d/55imBufPtEkLl86v
+gSzIweBV98QH6uHLQ21xolQlJeXoZYcbPFlbqicv4vQdQ0AGkZjPpNBgPkynoWE
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313356352975249327286882264946658281966913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 16:44:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 16:44:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnologiaenergetica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25379894640105309431604706834939784508149144433250350437584362933799968066294997815658309127848754733659243082593631404367088699063804434371602516603194895029082883664776575281861874859458863734644320015815073164198599789941954041346335117088973960214406791345940220705198304567867446910511591586993791367102938551670680224291471076227146752186748574326135115623476231600060923714559490043788032815367091027006304351463350943671619973860523703075261548042583794135700595843174740158876473316298147102794265364371725296660264670713566995265429307239725627426353343969809152522550539195081661859867244766822273877640201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							591e3f878ff32d30589e5420a2c8089fc8d2bd3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (578 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaranthine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caremagnet.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronicsinusitis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freezones.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldoptions.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luvu.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteries.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationstrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nunootropics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicfleaandtickcontrol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pon.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shayv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnologiaenergetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amaranthine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caremagnet.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chronicsinusitis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freezones.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldoptions.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luvu.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysteries.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationstrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nunootropics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicfleaandtickcontrol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pon.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shayv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnologiaenergetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rypto-p09a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rypto-p09a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001867a39d6380000040300463044022005e7daaea0bbd2b2c012087f18f20f4e255a9d3909694abf90537a851d43a9cf02203a70d6c14c0a182041aec2f9a0bcad4b5c93819c2e781a1d5853e8097e6436e1007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001867a39d65600000403004830460221008f23c480f07abe311f82c79f62f4b0db0f19b2b0be84a39bd2249334c2502cc2022100e950ccffff7771dde47baa77200a03def90d50ad87eb7b86195c5968814e068c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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