cstgo.cl
Issued by R3
About this certificate
This digital certificate with serial number 03:31:42:88:5e:e4:88:d5:af:8e:a0:bf:58:96:fb:43:30:f2 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cstgo.cl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:31:42:88:5e:e4:88:d5:af:8e:a0:bf:58:96:fb:43:30:f2Serial Number (int): 278099130899154161921835910587791102390514
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:0c:48:93:40:f0:a1:3a:29:01:9e:16:61:ae:9b:70:3e:69:bd:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 03:bf:2b:78:28:be:40:ae:5b:a9:13:d0:c7:1d:b1:6d:79:63:41:fa
Fingerprint (sha256): bc:d9:19:0b:49:b3:c0:2e:9a:26:77:b5:7c:a1:e4:67:ad:d9:c2:d6:ee:a4:4b:1c:ee:3c:e0:b9:17:75:56:7f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cstgo.cl
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cstgo.cl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cambiosantiago.cl
cstgo.cl
monedaextranjera.cl
pesosargentinos.cl
reales.cl
www.cambiosantiago.cl
www.cstgo.cl
www.monedaextranjera.cl
www.pesosargentinos.cl
www.reales.cl
cstgo.cl
monedaextranjera.cl
pesosargentinos.cl
reales.cl
www.cambiosantiago.cl
www.cstgo.cl
www.monedaextranjera.cl
www.pesosargentinos.cl
www.reales.cl
Other certificates including the domain name cstgo.cl
(limited to 100 certificates)
www.codetta.app
www.cambiosantiago.cl
cambiosantiago.cl
online.cstgo.cl
cstgo.cl
www.splay.io
cstgo.cl
test.cryptokanojo.com
pflevy.dev
cstgo.cl
360vr.tesseract.in
fire.clouddungeon.eu
cstgo.cl
maxcapfinancial.com
www.valsecchi.me
thiagobapti.com.br
app.fuelsqc.com
online.cstgo.cl
bonroyage.com
cambiosantiago.cl
robinhood-online.com
snapridesapp.com
cdn.fpt123.net
bathstain.com
cstgo.cl
axismed-axismed.portal.carenet.com.br
cstgo.cl
www.vizdea.io
www.bitarena.app
curiousarts.org.uk
www.beneath.io
cstgo.cl
online.cstgo.cl
test.aegeantaxi.com
bot.xfusioncage.com
myclubsapp.com.au
rates.cstgo.cl
tigerrock.impactwrap.com
rates.cstgo.cl
www.cambiosantiago.cl
cambiosantiago.cl
online.cstgo.cl
cstgo.cl
www.splay.io
cstgo.cl
test.cryptokanojo.com
pflevy.dev
cstgo.cl
360vr.tesseract.in
fire.clouddungeon.eu
cstgo.cl
maxcapfinancial.com
www.valsecchi.me
thiagobapti.com.br
app.fuelsqc.com
online.cstgo.cl
bonroyage.com
cambiosantiago.cl
robinhood-online.com
snapridesapp.com
cdn.fpt123.net
bathstain.com
cstgo.cl
axismed-axismed.portal.carenet.com.br
cstgo.cl
www.vizdea.io
www.bitarena.app
curiousarts.org.uk
www.beneath.io
cstgo.cl
online.cstgo.cl
test.aegeantaxi.com
bot.xfusioncage.com
myclubsapp.com.au
rates.cstgo.cl
tigerrock.impactwrap.com
rates.cstgo.cl
Certificate
The complete raw certificate details for cstgo.cl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAzFCiF7kiNWvjqC/WJb7QzDyMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MjkwMzIwMTVaFw0yNDA4MjcwMzIwMTRaMBMxETAPBgNVBAMT CGNzdGdvLmNsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ULYUCe Gy++ovVybFyA6qSYdikAN1HwvILj97vxDcWImqVqBAeU50a3A/YU3cbeDAaQ428b WexVFKW2EnbGYu/NaY9ux/rFAY+B3GaAirEDmpdrVyAHDHPCOFwqOwLuDmWsvnQQ WRm3QUu1OsC36TQ4AlgM6T/1iSJKhiSsqUi3743kk5Z8JRPelHaRbtgRfN02Nh7m /rs9AEVYZGHMyG6apmjj6QcC4U0CNyW9qsTgIN+3zaqzBwodp25M125APRrhXBh1 +4WhMseii6oIzBVAEkWCwkVBSs0jw0eJvOrLqCvC6qWWpRCpZXy3+2NqwHk3O775 PIgKApZ3BBuGkwIDAQABo4ICuzCCArcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRl DEiTQPChOikBnhZhrptwPmm98DAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCBwQYD VR0RBIG5MIG2ghFjYW1iaW9zYW50aWFnby5jbIIIY3N0Z28uY2yCE21vbmVkYWV4 dHJhbmplcmEuY2yCEnBlc29zYXJnZW50aW5vcy5jbIIJcmVhbGVzLmNsghV3d3cu Y2FtYmlvc2FudGlhZ28uY2yCDHd3dy5jc3Rnby5jbIIXd3d3Lm1vbmVkYWV4dHJh bmplcmEuY2yCFnd3dy5wZXNvc2FyZ2VudGlub3MuY2yCDXd3dy5yZWFsZXMuY2ww EwYDVR0gBAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwA/ F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY/Ck8XbAAAEAwBIMEYC IQDwHmRBI6S9ZcE1fO5f3/ZWtHHMAQ5u7kQkTyNsg0hz3AIhAMrZ9PTOJxmzXuQL hgf43ejMQJMdXtixGmQar1jhrSaoAHcA3+FW66oFr7WcD4ZxjajAMk6uVtlup/Wl agHRwTu+UlwAAAGPwpPGlQAABAMASDBGAiEAoDtqN7kE5oqNGcan2MaHCmjbWpQd D9vSkX19U2toPCwCIQD8fmcnO84OTOSiwHEknmwm/OSfbgwTorSmvL3ryA+QqDAN BgkqhkiG9w0BAQsFAAOCAQEAdmn07huji1ZKvbggYPPjBN9GYSWIIvMhFgK/Kbzq fd77eobS9tA6PnYRqqZ2Nx3JRuAOuy7wnVC8CYgD12FB9FraNv/Eorx2NMY8qIny 9V4uIEgtthuq+RSJHdNvS4zglBHGbUJ6drvo+av6OJ92vy1x3ephpT+N2CTQAL7Z lI5JvpOVJ+HuYi2XGPYusbiCMCWQuGHNpyQJeJHpQiuSjmGGQmJNqUaNLV0E3Qub c1wmeLuE5SVyPYU4uyd2IEjzVBFvZGfhClo/8Ythxy6dXXtNGV8aoX8V9dF2h7yI G8vIVj5dec8JW1AYxc6R7Xq8jKXf3pO2Dm98uPzsTX7cKQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ULYUCeGy++ovVybFyA 6qSYdikAN1HwvILj97vxDcWImqVqBAeU50a3A/YU3cbeDAaQ428bWexVFKW2EnbG Yu/NaY9ux/rFAY+B3GaAirEDmpdrVyAHDHPCOFwqOwLuDmWsvnQQWRm3QUu1OsC3 6TQ4AlgM6T/1iSJKhiSsqUi3743kk5Z8JRPelHaRbtgRfN02Nh7m/rs9AEVYZGHM yG6apmjj6QcC4U0CNyW9qsTgIN+3zaqzBwodp25M125APRrhXBh1+4WhMseii6oI zBVAEkWCwkVBSs0jw0eJvOrLqCvC6qWWpRCpZXy3+2NqwHk3O775PIgKApZ3BBuG kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278099130899154161921835910587791102390514 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 03:20:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 03:20:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cstgo.cl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22662263253746743430874526382813148780011712046985205134986403543201696135258880799937414984671226407815764864122002106124309119971119764228085965812930060186685266891811363304052785104425459227474817906161743916882849602933322858192047629673611014884324114277176010575286876503828253605052556015188249666459977474019616294419057359873006898977339632450948175657309684750814201529567527240988263426927510141908552738367804653571963479555178479989839506997110168539136183720534172936362061911679146419576966030713177225066140821781020220894732051251432841384444026490372242807847764503694448960385136105429769240938131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 650c489340f0a13a29019e1661ae9b703e69bdf0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambiosantiago.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cstgo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monedaextranjera.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pesosargentinos.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reales.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambiosantiago.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cstgo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monedaextranjera.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pesosargentinos.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reales.cl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fc293c5db0000040300483046022100f01e644123a4bd65c1357cee5fdff656b471cc010e6eee44244f236c834873dc022100cad9f4f4ce2719b35ee40b8607f8dde8cc40931d5ed8b11a641aaf58e1ad26a8007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fc293c6950000040300483046022100a03b6a37b904e68a8d19c6a7d8c6870a68db5a941d0fdbd2917d7d536b683c2c022100fc7e67273bce0e4ce4a2c071249e6c26fce49f6e0c13a2b4a6bcbdebc80f90a8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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