counsel.cr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:30:5d:8b:d7:4f:44:d8:75:43:a3:a4:39:95:b0:60:e0 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=counsel.cr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:30:5d:8b:d7:4f:44:d8:75:43:a3:a4:39:95:b0:60:e0
Serial Number (int): 322651972504768705457222908763117714432224
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:d1:e8:53:b8:38:ba:d1:d7:30:60:1f:d4:52:40:78:62:4b:af:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:b6:63:0b:60:9c:85:2b:c3:9a:31:1c:ea:3d:99:7e:ad:e8:01:2e
Fingerprint (sha256): 6a:b2:0c:35:af:5d:58:15:d9:1c:ae:f3:40:fe:eb:d4:13:d1:2d:13:74:a1:29:06:01:0f:30:13:e2:e2:b7:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate counsel.cr

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for counsel.cr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alltextsex.noflylist.com
automatic-mail-server.noflylist.com
busesnicaragua.noflylist.com
counsel.cr
counsel.noflylist.com
documentprocessing.noflylist.com
hotelmanagua.us
hotelmanaguaus.noflylist.com
mail.counsel.cr
mail.hotelmanagua.us
managuamotelnet.noflylist.com
nicaraguatravel.noflylist.com
surefinancial2.noflylist.com
www.alltextsex.noflylist.com
www.automatic-mail-server.noflylist.com
www.busesnicaragua.noflylist.com
www.counsel.cr
www.counsel.noflylist.com
www.documentprocessing.noflylist.com
www.hotelmanagua.us
www.hotelmanaguaus.noflylist.com
www.managuamotelnet.noflylist.com
www.nicaraguatravel.noflylist.com
www.surefinancial2.noflylist.com

Other certificates including the domain name counsel.cr

(limited to 100 certificates)
counsel.cr
counsel.cr
counsel.cr
counsel.cr
counsel.cr
mga-hotel.com
airportinnmanagua.com
counsel.cr
hotelmanagua.us
find.cr

Certificate

The complete raw certificate details for counsel.cr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wrNADpBrh4l7gzNQ+Fg
ys6Rht1Xc2B2zN0nF5crX3WC9LdxQoqW9SThKSaIBgIvCnvJAn5w4U2RCBV/69hD
jXEY+UKQ2upTA7Jri8SEsHMkzAQxrGeW62fLE14tmwGfTJd+pTFp7eblXTNCUw/j
IM/IXtaECz24nEbxgOU0tsWp26y5TOIvbA6falM0Wwns9S2GT3BbV6Gsfq45lwPL
nSyQl1xv7o7ohY6RDO05I5KIeeBdvA0898vxomfsMseslNrG/u0IY3Muff2PQJYd
+bAqeeVHozR4QzuKF0pUXYPArf8F8lIEUhGBRjIcYkO6rtJtMI3HzmT+Yt3GGM+2
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322651972504768705457222908763117714432224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-03 05:37:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-02 05:37:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'counsel.cr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27146561633154378198451167967769462684671040137469661849341540154274351937848908787820440776375892374610494414670699918603534223283204073515128419002891823247390438691229700006007036562787856786171460817369241242008401501513606625622559026249028904878473441322427372136231850731958271310564131639489469789054543514819745001999709056393836931324007033808322181681179367375488384938031576017314993981707730721790785435402725946517681542349960567087884939951387249667500854170061538792671721967835198100463335820114724726501103090606344688575659705278857789423925415586240788079488324987438549368617384276487149504673297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12d1e853b838bad1d730601fd4524078624baf71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (689 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltextsex.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automatic-mail-server.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busesnicaragua.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counsel.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counsel.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentprocessing.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelmanagua.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelmanaguaus.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.counsel.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hotelmanagua.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managuamotelnet.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicaraguatravel.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surefinancial2.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alltextsex.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automatic-mail-server.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busesnicaragua.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.counsel.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.counsel.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.documentprocessing.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelmanagua.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelmanaguaus.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managuamotelnet.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicaraguatravel.noflylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surefinancial2.noflylist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001659e26cf2b0000040300483046022100c530e7f5db75175907a9d2ed6e30cc18ff767f53748df476aef4afd7fbda86560221008f6a9da553e56f06512c063873c8e6caf03cdafa14a52b8ecbc165e0cebba9de007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001659e26cf44000004030046304402203eea3704c7e4d2c6608299fdc0089388e20cee33ba78ef77b8ccb17db65a9dfe02203d5809aac164da08c1a1ada193f1a2b327a8f0b62049860704068528e5bd6821
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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