www.airportexpresslima.com

Issued by R10

About this certificate

This digital certificate with serial number 03:1c:e5:a4:8b:29:94:81:64:16:b1:d2:b3:01:96:77:cb:f1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.airportexpresslima.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1c:e5:a4:8b:29:94:81:64:16:b1:d2:b3:01:96:77:cb:f1
Serial Number (int): 271170011639335812139678844618523077495793
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:cb:bf:12:b4:13:94:28:88:cd:ed:d9:bc:85:21:bb:01:35:06:cf
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 77:0e:43:9f:bf:bc:da:2e:38:0e:1b:66:78:48:3a:c2:3a:b3:79:07
Fingerprint (sha256): a1:7a:7f:43:74:67:c6:66:4e:d2:1d:04:dc:de:9d:7d:2c:1e:58:e1:eb:59:06:da:15:f6:5f:4a:8a:e6:29:57

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate www.airportexpresslima.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.airportexpresslima.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airportexpresslima.com
www.airportexpresslima.com

Other certificates including the domain name airportexpresslima.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.airportexpresslima.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuugpyNzpvf1Fpr5rZQOk
cHy2enBI46HWPhADIa3BNMHJZ8ToFP58GzexHXIAknkjdPj8DXTrHk5FX/T635vz
ZDPVyP+6JBFTzICtI01AlWX8MBN+vWMU9H+PGs4+Mm7SUF2hYu74WbELSwi5YYqg
xrOmSRS2KVFFA7X7WfS3WZkLQw+8C1+E95w4Znd2ssn80U5O5FMoHx3IwMnzukio
qcwAFuedfJ2LlYZEgjvMMO3/NrBfhNvlIz3KYUp/W7zaGDXb8FsziiWLm5SQDzmH
44aiozr/F6SckYhrpge1DNXh+fxwkWz2LmFskYsV9OyocWQfsmwuU4T8rs5JWpW2
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271170011639335812139678844618523077495793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 09:04:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-09 09:04:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.airportexpresslima.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23594808674923718477282061001256227370253495457928926482733746466153720344585583949325546347552741358613907350773264152285529728208068702303869454937710218796354714634030395105502143135029227410193405894561772307549965507420292938328362025795954721922067361878910712730560370989526773777841163660039243299079619343477621250946206014755827786598264778524964665721526123472339825676357886177617773166348043694984143761407860325969207975957671582341539975550692709158645315267611340465729977606207711490181346320583950685709399003893451015874760659782156106029246045537886922880236456347673183708192639890891220106720811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9cbbf12b413942888cdedd9bc8521bb013506cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportexpresslima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportexpresslima.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019006c1475a0000040300473045022043e465cd9da903c474d20e4d8ee30f7b65c930a27ac15f5cb5b79c0c6bbbb691022100e0528ef4cad83fe78a937289c0b3aed05e614343aacf55463809499c89e9c5780075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019006c1476000000403004630440220498523b9de1f535137910b1e1a3504471f310643965cd8bd22ada718a1c5e720022045e8a9dc17caa2c48685ed7374f30d68474780baeb36777a7772e3d213db1549
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0046a915f03f6156a7aee6e680e4bd9e36f5ed548cbb9b1a43ad1bbbd7f930da0582b8a9d88224ee7a2c7c3c3407457538b06178852cb6d38a36b0aa57e436b70e5762e627306b15776295065b2f21ba806359bd05238b2706db15e4d2d0eb1a9e6b1c78bec8d5833cca04063a70023240764d9423372221a7bb89eb3607900e086a851dfc78f6c6c41d464ab486df90284dfb0f43c4bd439cb13ce443a2e04596913517bc9c04c1dfe79eb99ca2f0e43362f37fcec7882290633f81aa5f765d570b5b20b1d91540897b6981ed138d24ceacff88ab280c2349fe5199212cfd253e44b6333f03d242088936f018f9e4ad2af0cc0fd7f530256a110faa2bc6dfd8df