cicloturista.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b4:43:b6:92:bc:4c:d9:ac:54:e5:be:b3:ec:7c:b3:db:17 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cicloturista.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b4:43:b6:92:bc:4c:d9:ac:54:e5:be:b3:ec:7c:b3:db:17
Serial Number (int): 409789976022706233409303947357737698188055
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4f:6c:89:7f:83:bb:04:c4:9c:d5:62:b4:fc:79:78:d6:a3:a9:6e:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:2f:de:df:c4:08:41:b4:1d:2e:d5:68:96:05:63:5f:90:c8:9d:33
Fingerprint (sha256): a6:0d:67:60:a2:60:3a:7a:f5:a6:5f:48:5d:9a:7c:61:bf:58:15:69:dc:06:ed:a6:ef:ea:e5:6c:b8:a5:94:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cicloturista.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cicloturista.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cicloturista.net

Other certificates including the domain name cicloturista.net

(limited to 100 certificates)
cicloturista.net
www.cicloturista.net
cicloturista.net
cicloturista.net
cicloturista.net
cicloturista.net
cicloturista.net
cicloturista.net
cicloturista.net

Certificate

The complete raw certificate details for cicloturista.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409789976022706233409303947357737698188055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 04:24:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 04:24:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cicloturista.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881682482425468396271255918249387912825382166232780128854888207657487761104839743766408406096502712722292167592630664587503673810579718916113967060547184400081456742771307363689577135843333556271026913939619232242165599050411200730169888247564085778604160874192171583431627076747407573813170763906340155065327974426517933557498165532035537155444061901838630247417099938465870676857910659617275967061551900423166599161089001970515506289701142919096555583139064438163429329064456795949530779641210285510827024832848732095537007351094482989153927249636545268859571986737256456214920392784587791412811879249459823867568982050448227529039001098168086813086946555401156704197870525203798862058119966364470878756568432633465987074694595805467554045488703665502159386304988493911084699425329177868577655325588734912741132036117229730660071381179159224281637464250038744114953766588115519306874296092613459558443603376353744215478572004128898780323076972947081060099207648269540893845305075561757557881961063235271098373036344629494767843639830148320457471867595877838450068513078941305261414660861868200171941491324495482545122263417204826897003482569610531461250279417445813011071284290391359475961969021839239028772225612865626254672631291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f6c897f83bb04c49cd562b4fc7978d6a3a96e48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicloturista.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e53c5adaa0000040300483046022100a271daf78879423e40c55ad175b85211497249838d3b26a19d0a1a5579ef1afc02210099eb765ec765c35da0fcba2a0580536523bcb3590923d063e375a5ce2dcdecd4007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e53c5ad9c000004030047304502201fc407a5a0bbf994aeae9ecceffed9d2627510cedd22c4784361fcefd6225f500221009b49b38fe612f464e719c195562e8d87c63b0663ee6e09baf978bf4651b6ea30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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