fisioterapiareset.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:25:cb:5c:5a:f3:20:39:31:84:34:f5:cb:18:a6:6d:f7 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fisioterapiareset.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:25:cb:5c:5a:f3:20:39:31:84:34:f5:cb:18:a6:6d:f7
Serial Number (int): 281804037155830834180318797904435051130359
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:2e:25:e5:02:3c:f5:7e:e8:d9:cb:2b:d9:fd:3f:6b:ff:e3:61:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:ca:70:02:11:95:64:f9:2c:d1:62:9c:30:33:61:2c:59:fa:d8:d5
Fingerprint (sha256): 6c:e4:ab:27:e2:f8:51:f5:84:44:f5:61:e7:a1:16:c0:8c:95:3b:88:40:07:8f:d3:3f:f1:aa:51:1e:40:06:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fisioterapiareset.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fisioterapiareset.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.fisioterapiareset.com
cpanel.fisioterapiareset.com
fisioterapiareset.com
fisioterapiareset.luishp.on-rev.com
mail.fisioterapiareset.com
webdisk.fisioterapiareset.com
webmail.fisioterapiareset.com
www.fisioterapiareset.com
www.fisioterapiareset.luishp.on-rev.com

Other certificates including the domain name fisioterapiareset.com

(limited to 100 certificates)
fisioterapiareset.com
fisioterapiareset.com
fisioterapiareset.com
fundiscap.org
fisioterapiareset.com
fisiopulmonar.com
fisiopulmonar.com
fisioterapiareset.com
fisioterapiareset.com
fisioterapiareset.com
fisioterapiareset.com
fisioterapiareset.com
fisioterapiareset.luishp.on-rev.com
fisioterapiareset.com
cinencia.org
fisioterapiareset.com
fisioterapiareset.com
fisioterapiareset.com
fisiopulmonar.luishp.on-rev.com
orbetrade.net
fisioterapiareset.com

Certificate

The complete raw certificate details for fisioterapiareset.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgTwtoWrqcEnrZOK6Qgu
1kR6Z4BeC3AR4KQpSi9fZhu5QvgaAYaDJwQfPmDHv1fgmq/6KDNzHUh6YB1wcmHH
3TwNvfTcQmxq5Oy9gLvM3p06jM6lG/LOE9FLDRwoVNXA/ARPiluy9urnvM56+5uC
xhGfaEo4Dhj/oQzIi+SZbSntgxwvBtdwTX1wyZq4R897GV8g7tor+EMiFOdiZ4lM
7HWEXKAAXfxZqvwrFqtSvtYZSNBvc34oaiC47Gqhs4J4xGuhi0i/FUJemuFhOvpm
tEQmiio4oZqUWfsLisbX60AFxAvLdDvjzSf89NjkVPqMGqeQ0JNAKz4rr2xo01Wm
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281804037155830834180318797904435051130359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 11:40:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 11:40:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fisioterapiareset.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21967901209457116880111762581441558883612450228250326245743318645939123495868819305559081933338942651896886788819899129812670954819994984156462678815844391370688883569678183618841436370044599797510988365439756494313952196808963072606349743437334908355429526650517741924944459931455078994607731458366814901139257074020392658473877600694038218380343636001166415605227814006085458859583093851340632066012524878956285042046112889753835597437852034125271997284517594292745504972002084056232823419385485340975874218616423063840336760568599329990663896832424303856600025735378101713108333060124022684645340556551343312316063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e2e25e5023cf57ee8d9cb2bd9fd3f6bffe361cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fisioterapiareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.fisioterapiareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisioterapiareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisioterapiareset.luishp.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fisioterapiareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.fisioterapiareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.fisioterapiareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisioterapiareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisioterapiareset.luishp.on-rev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3a1722be000004030047304502204b7918f2d7df7153635bde8f3e29b50c5c36ef6c83ed3379fff5f2f22cfd66600221009999a9b6904caf4fb5f9dec48b9f1998a0855cd5eb51e6819afbdfaa65e9de4b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3a1724d30000040300483046022100e06efb9e1b6d5b73e967ad34b4f567d7709fb06646df65489de0613dde0506a902210087daff4c455d452e8660a923b23a3c822a92a662b9b8ed4922cfcff5477bd403
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a136e2d796943a7e98053214d593667895654542a7c5998e21e47713e4e9842586b7ccd10221b7b6aa1ec3c8d0a7a12353de9f7299c52d63424db64a3244420f63673fc875cbda949a5076df3045cb4c63e637eb6197fd860444116dae4515916600ff7d23a0bb9da2d2365802e04fc90a4ec5409542e50bd2f046bb09b74ca574578c9d0109c4c106b051f3fc10f3cbdf2fd574af233e27c4c2d6e5e4878e153b3530904d5324d3814a4bcae6d9bb1673a93367c8bda821c9eea4bf101b64343a968e4fff4edb166736bbd538ff5b64d1d2692385aa8a67b5ca5c1b5567c8277a17da80e7695403ad88d99e9b9275e152c0ae5829afbafcbabf4ba5b85c351