grupomar.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:72:65:9d:05:67:f5:80:e6:d3:53:7a:c1:21:0c:6b:31 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grupomar.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:72:65:9d:05:67:f5:80:e6:d3:53:7a:c1:21:0c:6b:31
Serial Number (int): 315253531367057831931628273034733957180209
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:7e:3f:11:63:32:ea:5b:7d:fc:31:27:6b:f9:0d:35:40:ed:a5:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:69:af:bc:31:84:56:38:9a:8a:ce:92:ed:c5:ac:24:28:48:4f:95
Fingerprint (sha256): a8:24:60:2f:98:7c:30:53:b0:71:b6:3b:5f:c9:e1:d0:44:95:6c:d9:5f:6b:f4:85:8e:56:7e:58:06:7f:af:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grupomar.co

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grupomar.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aprende.el-lab.co
carmenzakafarela.el-lab.co
crm.el-lab.co
grupomar.co
grupomar.el-lab.co
mail.grupomar.co
mail.wacoservices.com
talentoypotencial-com-co.el-lab.co
techheroes.el-lab.co
wacoservices.com
wacoservices.el-lab.co
www.aprende.el-lab.co
www.carmenzakafarela.el-lab.co
www.crm.el-lab.co
www.grupomar.co
www.grupomar.el-lab.co
www.talentoypotencial-com-co.el-lab.co
www.techheroes.el-lab.co
www.wacoservices.com
www.wacoservices.el-lab.co

Other certificates including the domain name grupomar.co

(limited to 100 certificates)
grupomar.co
grupomar.co
grupomar.co
grupomar.co
grupomar.co
grupomar.co
www.grupomar.co
grupomar.co
grupomar.co
grupomar.co
miguelolivares.co
grupomar.co

Certificate

The complete raw certificate details for grupomar.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KVcFgjrUfUk7nEJ5P3b
0ndY8EBxEwKE7h+gxyR56TGbSFkLfH+E+F3OGIf2orvDRBVf9gVex4O2jL4qxXll
+dI5OJPfQegDUCW1DG0xlEdLC+X6ZcnfAINvxzhYqUYfpASjXeExbWH0Mp3kxEdF
sVSEc2sQqi6nDiRRd1KkynNdgfP3Z3l0tCwOKaDr3zNVxID783ttUe3ISPtK+iX0
w/2uGVMfgkaEtjHa1Kzey94puxOagGPkskObB36Cc5Bs3p4J8mzgyXYhEtaKpiNX
WO5PpLjkECnglAeqjXlN7sE2YScdx4zxmP9j0VikYqMvhjY1LwWUrNmtFjqPBsCE
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315253531367057831931628273034733957180209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 05:42:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 05:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grupomar.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26844062565518174813544441752570259210709555167907174085117597273982309384914652169855379836458241874788230852802177095140642074595651900158834691394378212559506976097300113640455776025099091212801770776021887279600488593816970054635516147329240094609705385130440201392852305959145189219853880603187866659394999513574146465823430194481491944808400756972472049581128356021290723139499229234339944268687237352269915622071800441364591362528931538654680269095455248130731293969696182263464477944641066920202120718755877799591113254174539048944771269634678849502795285972334673411094633806130760644015189218634288580297813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							857e3f116332ea5b7dfc31276bf90d3540eda561
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (471 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprende.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmenzakafarela.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomar.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wacoservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentoypotencial-com-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techheroes.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wacoservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wacoservices.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprende.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmenzakafarela.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crm.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupomar.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talentoypotencial-com-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techheroes.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wacoservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wacoservices.el-lab.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170d7c7758c0000040300473045022100b8a3453028dd813c48f354a9205456e7885bcc965062240bcae50d79da177bf302206e0d31114600849e25e13ae599244ca8c208cd196ee8002357ef641fba4dab51007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d7c7758c000004030046304402203153bb9a056c630309eaafa98b544a0ca836e2683f3008ca002fe1097e831c10022018a04214f3ef5e825973e18091d2706da6db01ce94a6d2c0b689ccdedae83538
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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