avant2.es

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:dd:ba:b0:ba:d4:2a:51:49:28:88:c6:3a:be:48:87:2b was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avant2.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:dd:ba:b0:ba:d4:2a:51:49:28:88:c6:3a:be:48:87:2b
Serial Number (int): 358952343473459484827422412873969290479403
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:e9:54:13:43:63:df:b6:2c:5e:65:4c:70:38:38:28:e1:26:d8:76
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:59:e6:2e:2d:82:65:f5:91:6c:7e:45:a4:8e:24:d0:c3:dc:95:54
Fingerprint (sha256): 71:32:93:ba:4b:34:63:53:28:d3:4b:f5:f6:47:cf:9f:15:e8:58:01:28:a7:bc:c3:e2:9c:64:63:f6:cd:11:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate avant2.es

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avant2.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.codeoscopic.com
avant2.es
canalasegurador.es
codeoscopic.com
codeoscopic.es
sacsonline.es
te-sis.com
te-sis.es
te-sis.eu
te-sis.info
te-sis.net
te-sis.org
tesis.io
versusdata.com
versusdata.eu
www.avant2.es
www.canalasegurador.es
www.codeoscopic.com
www.codeoscopic.es
www.sacsonline.es
www.te-sis.com
www.te-sis.es
www.te-sis.eu
www.te-sis.info
www.te-sis.net
www.te-sis.org
www.tesis.io
www.versusdata.com
www.versusdata.eu

Other certificates including the domain name avant2.es

(limited to 100 certificates)

Certificate

The complete raw certificate details for avant2.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19AW3K4RcxLwMrauGfrE
CWRe2x4J7a3d1ekU7BkbMwIGDR078EPcRg4H7KEGIcR01jZjXAeKWCqYaoTMv1iN
hIJ6S1cq20aZxZwi2jaK7bUy08JvkeEZFhj/mV0gxGVAEVgrPE8Z+CeQibiapvaA
ipbC/wpzVvkOvAz79dNQVeAqRNz0eBsTzCXq0KgXjCdvyTgI50tUsS8K6Am+84hz
fqgjDfgzBVQRlMAYDSHBMn/DSRtGviRh2YRpDkOEhO9DFbFPe2cSorb8CV90Uw8I
CcMDh9Ql6TtzAuGb6v6pDfF8UAkcOHcggIU8WITAt3ToMhM5gP2dpvHnnA/N6BTl
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358952343473459484827422412873969290479403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-11 18:49:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 18:49:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avant2.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27243848228330090481698393939232031058883810782311552097441736265841720043498722701714793456615362973673608773345791498430863759352996650378970053377305513664992885954917234742636920624911355986595461212207783662052444782479240572444948579374650320838886320418102559432513303863074854661066365629185423625518629934608483080471095428159912047006443522805462016954472182370602162247237367470558413964594714231894080189555566202823661236288756671486354048667310926845180460451327318111345519136138347590352685029292635919275191056863275945198270278067944273330317432949970086776846946784202319210367927442311739277108601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17e954134363dfb62c5e654c70383828e126d876
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (467 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.codeoscopic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avant2.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canalasegurador.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeoscopic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeoscopic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacsonline.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te-sis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te-sis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te-sis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te-sis.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te-sis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te-sis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versusdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versusdata.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avant2.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canalasegurador.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeoscopic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeoscopic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacsonline.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.te-sis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.te-sis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.te-sis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.te-sis.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.te-sis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.te-sis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.versusdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.versusdata.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f7a87bde30000040300473045022100dc259be0955cef10363f5ebf56ec5b2190dd2f3c3b4532b13d30afaab46d7d1302203f6427789577ed76ae6a393ead8c8ce16a5488036f41158c077cb7c7ce11289a00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f7a87be0f0000040300473045022045f09bf78c6d565364b04e932868acaaa7cabc2c4582d0abb318177a95b4072d022100e7e29afc8dd788c82abda151146ac3d2143d5563f7dbe75bf77f1200a532c732
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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