veracruz.city

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bc:21:37:2c:bc:1c:8d:95:b0:dc:d9:b5:91:26:77:73:39 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=veracruz.city

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:21:37:2c:bc:1c:8d:95:b0:dc:d9:b5:91:26:77:73:39
Serial Number (int): 325354093783935046569377423815904343847737
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:82:cd:e8:b4:2c:63:84:16:00:df:14:a7:6b:bd:49:e3:bc:e3:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:39:52:e4:55:19:d4:29:19:bd:4f:c0:a5:3b:fb:11:6e:2d:11:a7
Fingerprint (sha256): 67:5f:09:1d:ba:9c:2e:5d:b3:db:ed:6c:ff:b3:8a:73:d2:26:c7:3b:84:52:52:78:91:eb:55:19:0e:fe:db:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate veracruz.city

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for veracruz.city

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

veracruz.city

Other certificates including the domain name veracruz.city

(limited to 100 certificates)
veracruz.city
veracruz.city
www.aiaaw.com
veracruz.city
xeoto.xyz
veracruz.city
www.newtown.biz
www.planners.biz
xeoto.xyz
november.biz

Certificate

The complete raw certificate details for veracruz.city in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325354093783935046569377423815904343847737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 20:23:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 20:23:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'veracruz.city'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937202715255480417501965904033269571812494772771329022802736995021730820770935921158438097286313593734043471509043624074510510815824151708156747384689353488362638228609993751804749260848491732255063288783302105097222713070082143053656680450775793204380530339982982374626307305737564577049733780555406619908567836458386536163745876964744317547111257984487905931782578714969060126924278994024374882943951093628121897814150916073345259543513691912879113450352021948124150296857962824806139636493553180113897006765668010226046350443384794499020111380260020656245395646493767262183783252136325109050477256320951821555875555503729874313869182981180640471434835920700542079887167908669292948090681969262406661995612186079598649046181409714508296135294925501828927397891143521031317776707073662058718922362026308052147425346390536032274828307196754615545986586051479475213280043918646183992244135389584997318100454180825549349300869718485778195519284477945864003579480435939554076902107690964024445276627182377435829170101333247150401173341845306550593981679951755299431137836449151184944593566732954864224421470479088467349927860190722537792434359889521783739206346227164998866005463512135922277628545304303794969080967090554982555247981179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c82cde8b42c63841600df14a76bbd49e3bce357
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracruz.city'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fab16a92a0000040300483046022100ec79a8db0c6a056adf5f799ee5872508500cd9ac3bf509db8c92db2017874554022100eacd5d8139828eb09eb9ff1a3ac263a9073e72a18f4592d16f4024b3d48c976f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fab16a9180000040300463044022009a41a919ceb550f0451c44071b2a0ba6a46ceda89b64ac088b76ae72c5990d30220593060862ac0163ddeaa1f7e33a0fc671f19cd967dc2d9d369f3adac5543723e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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