treisyjimenezvega.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:89:b9:67:0c:6c:35:74:58:67:e6:f7:18:fe:ca:80:7d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=treisyjimenezvega.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:89:b9:67:0c:6c:35:74:58:67:e6:f7:18:fe:ca:80:7d
Serial Number (int): 327194421511435641935849780445949071097981
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:66:0d:16:e0:33:e6:08:82:05:65:9b:82:bc:d1:5b:6c:8a:ca:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:ae:5f:b1:17:2f:92:d5:c0:97:ce:f0:1d:d5:0e:ac:bb:23:9f:0f
Fingerprint (sha256): 8d:32:00:60:be:6b:2f:dc:be:71:01:10:3c:8f:3d:ac:94:5c:67:e4:a8:c9:8e:8b:3e:b0:7a:77:e7:43:07:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate treisyjimenezvega.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for treisyjimenezvega.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

treisyjimenezvega.com
www.treisyjimenezvega.com

Other certificates including the domain name treisyjimenezvega.com

(limited to 100 certificates)
treisyjimenezvega.com
dev-api.ula.africa
professional.xn--hier-jra.com
treisyjimenezvega.com
www.couplessexquiz.com
treisyjimenezvega.com
treisyjimenezvega.com
www.souzaservicesusa.com
treisyjimenezvega.com
mdo.axiosi.com.br
music-lyrics.treisyjimenezvega.com
quail.me
plannabel.com
metube.treisyjimenezvega.com
treisyjimenezvega.com
treisyjimenezvega.com
cnnct.app
www.hypnochain.com
treisyjimenezvega.com
treisyjimenezvega.com
www.thecultureofwine.com
treisyjimenezvega.com
music-lyrics.treisyjimenezvega.com
treisyjimenezvega.com
jbuild-staging.beerlabs.com.au
www.everycademy-staging.com
treisyjimenezvega.com
treisyjimenezvega.com
www.retouchingexperts.com
app.diamondedge.com
treisyjimenezvega.com
bskagh.com
software.bicg.com
admin.rambox.app
www.hypnochain.com
www.collctiv.com
treisyjimenezvega.com
partner.cognite.com
leas.ga
treisyjimenezvega.com
inkino.app
jbuild-staging.beerlabs.com.au
treisyjimenezvega.com
treisyjimenezvega.com
devpanel.thedesirent.com
devpanel.thedesirent.com
xn--bnevecka-n4a.se
medinaimoveis.com.br
ojiepermana.com
treisyjimenezvega.com
www.brindoor.com
captaintot.in
xn--bnevecka-n4a.se
renderer.spirit.fish

Certificate

The complete raw certificate details for treisyjimenezvega.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327194421511435641935849780445949071097981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 20:33:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 20:33:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'treisyjimenezvega.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706844746937400138209508903202605958671006262119558172858456347621659081480493789059840212123379497926773912215744979390642180015182770414098338185422337961207778844434215500389342326143932418070804918569619941372651543833832006503253824715290459396972713345366664435180919274027035662829377846345778152331064452843508583942878253578852546163379594817595343233598952310520736631780988512217398397777621720417077146532479503520807024882375664044822353205424263829617040180232401403440908780173930108873198843596728739924183827965685530617968522949314565105902381145396499340079873633397248826288980353029877083464765305830961250761857268211630191082932710999613366258204815624804964068198287918513568883798992957089631901254072023560713407052993674191208800090512334195471044436669017379573400806945103092113962446510983501321390437853711602894730018322559008110498388084246188015958626334950563656752225301787503306720276447761117226353600979896322981171213077481834398546108969036953239104340972788041571870722687276880286117711654415707564782981236349956129265581320301020746765193750151634550363877482616120061568221373022041426256866879509807456001162058392507180878232585598725631161355603245493627191518296322554085259134769969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90660d16e033e6088205659b82bcd15b6c8aca6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treisyjimenezvega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treisyjimenezvega.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eb3ef20510000040300473045022100d19aa87f5b8e5cd36694394bb9812ef7ac9ad42cb0ee4433d6380dde5a7cb9c9022028172977e0aedfc3dbdb9a48fa8c13d5a7a919378583d9e549a6ae397b29d3aa0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eb3ef21620000040300473045022041629575894cc4259a3c723f6b5751d1c88cd4b51785e1b891807b4de229229c022100c3c33fface522a14b8bc5575f66737a763db039ae433c60a7ccaac50c22facff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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