ciudad.ns02.biz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:38:ff:6a:36:72:3e:e3:8f:d9:6e:98:76:62:7f:e7:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ciudad.ns02.biz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:38:ff:6a:36:72:3e:e3:8f:d9:6e:98:76:62:7f:e7:05
Serial Number (int): 345122083015543579703788272662793907332869
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:e4:56:c6:29:17:bd:3a:5e:88:f3:e1:ae:28:f1:fb:99:ac:e8:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:76:f3:e4:fa:24:fe:69:00:64:f6:67:87:62:f3:ef:0b:5e:bf:46
Fingerprint (sha256): 83:b3:34:fc:04:05:21:b5:44:2d:e6:d4:56:03:ab:36:24:95:bc:27:cb:cb:7b:df:c1:5f:13:15:e7:f0:0e:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ciudad.ns02.biz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ciudad.ns02.biz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ciudad.ns02.biz

Other certificates including the domain name ns02.biz

(limited to 100 certificates)
abc.ns02.biz
riz.ns02.biz
sni.cloudflaressl.com
mulher.ns02.biz
rockero.ns02.biz
hard8.mymom.info
ztfartitcom.itemsz.com
guided.ns02.biz
pax.ns02.biz
planejada.ns02.biz
zo.ns02.biz
tardes.ns02.biz
blood.ns02.biz
pablo.ns02.biz
hard13.mydad.info
hamptons.ns02.biz
fruit.ns02.biz
blood.ns02.biz
hardx3.gr8domain.biz
e.ns02.biz
sur.ns02.biz
ciudad.ns02.biz
cupboard.ns02.biz
utilizables.ns02.biz
hardx2.mydad.info
archive.ns02.biz
sc7ha7s79wa78bsaveyourmoney.ns02.biz
cath.ns02.biz
blood.ns02.biz
blood.ns02.biz
hard12.ns02.biz
adestiaus.gr8domain.biz
moms.ns02.biz
calder.ns02.biz
blood.ns02.biz
lebaran.ns02.biz
blood.ns02.biz
highschool.ns02.biz
bronzer.ns02.biz
hard13.mydad.info
eco.ns02.biz
if.ns02.biz
peplum.ns02.biz
damour.ns02.biz
mb.ns02.biz
yarn.ns02.biz
hard12.ns02.biz
minions.ns02.biz

Certificate

The complete raw certificate details for ciudad.ns02.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345122083015543579703788272662793907332869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 03:22:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 03:22:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ciudad.ns02.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814585571580854861831273614475774271317931372588120272589704002086104794945785913475897979245359343153076356319539483865150565155919989429186267210977980464347572742498309916098129463707851761780785157486735751970960887121486502932670086382881960771729724462666921079746503596095481903449898781869233191199658093334472948731043339949728926908168694312172479811474106182272003508272741341934478365926256426225363921126055079339048640279992963724452624496937356856949045266171982191559899759721331654901582950837462929113901383201135804936881771689518207133339835083764297457647698392716717044734993374070635794420677068021070461047094723104716517937980535602492074668020482113664189019434314463307410095612635705529822024654784850388727411124588944965887746570400860210770746515588684062062920707334981254851128497484248118260839926769622538147741900699886142416271818106509973166071722166188908891674557671790459909628909069601496763715919810472063265984390546306170381523228366638768733031002191508710918114427813367447699753954152901987763555105152593493537091745533894749495752470305555195719314868719930729284112479875207814479670182534007148094569284561625976981632994360991069855320306438133284572744694745797595350216971123571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87e456c62917bd3a5e88f3e1ae28f1fb99ace8a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudad.ns02.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c223749d40000040300483046022100d6ab8848b920e9b1b014d604defe610147e13b781a0ddd8dfa377b34643ce3be022100bde0b7f50bc6c9c2a03a2687566c39fe434a406921a3797863c45784f67f458a007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c22374bdf000004030047304502202383d60f8a5c6884b42dbbc734f00e465c5dc4e831ce89c15a74ba9e4188f7ee022100a03606b1a2f8f89b674d4e97ff0b4cefc2b18dd5887a84024c070df54a7de0f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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