alejandro-fernandez.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4f:28:3b:53:c2:2e:6f:db:5d:c5:6b:ca:e0:68:32:32:74 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alejandro-fernandez.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:28:3b:53:c2:2e:6f:db:5d:c5:6b:ca:e0:68:32:32:74
Serial Number (int): 288272641946205560911226246488391867839092
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:ae:f5:7f:43:0b:70:ac:5b:cf:9e:ba:5d:e4:89:af:5d:8f:d2:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:55:69:6f:d1:f7:c0:85:12:7b:90:cd:f9:09:b2:aa:d7:74:22:2f
Fingerprint (sha256): 92:0f:13:d0:96:c7:7d:39:1b:7c:8e:c7:7d:62:d0:6e:65:c7:9a:76:d6:50:1a:c8:ea:b3:9a:27:40:4f:ce:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alejandro-fernandez.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alejandro-fernandez.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alejandro-fernandez.com

Other certificates including the domain name alejandro-fernandez.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for alejandro-fernandez.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288272641946205560911226246488391867839092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 20:44:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 20:44:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alejandro-fernandez.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908451103975268360320304287645760130755971186683118080479344073355667015715887285861261218454753761925701635829221967682453615520749765503828580100500183616060493065215186092026226469243842097805488033078893776357125990326755839389619611002634363373408763765142350608279327981516424464979307262376845091876762225956789276634883733657346691507704979919112591867083454442705359802259993285853409730459855325869681333203128935866396874614714177347186302470633085874580055156146480883782560388049820915162402337463721678501653334582618147386989415848674104145792158221197443968980044483562686067731404748659768678086245771020332119282696391619645060305899634379050956398719028657049354005506651580522567364145381993970375688324700805251054392624612491071235785835643777476896961308499017909358044149099903144355518179295382135645605867727855311391439319271717590064535199846639834985318062277365533165937058703616832728251695354574662337760895599657513757529284098743787625638558010322471487364226395869723054703398902407438231011239341061022481142813935385045608036917126156696469167615653236743578000229079749552806603738827582337928253908292231910571218182030071705534215388817402161821745985579116292102549162154995534574443350344679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daaef57f430b70ac5bcf9eba5de489af5d8fd2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alejandro-fernandez.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d19625c8000000403004730450221008b6f7d168adbf750128fd95817a194033cb8f21d1a20c5eedd64c3a06601b4970220657ec89f716a065658c82121ef1510c6f2c272d1d02797f0d43a979f0cadbfcf007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d19625ca100000403004830460221008cc4f74df748fa94a0e91f21cbfbc9824088775dd52ee2af1e47c1a079ee4fb9022100ef7a43ce24e3a09d63bd1d054ee7237c196462d1314b1af057458a8858c0ec67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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