atr.com.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:4c:aa:9f:50:fa:31:d2:9b:6d:16:d4:1c:72:36:53:f2 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=atr.com.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:4c:aa:9f:50:fa:31:d2:9b:6d:16:d4:1c:72:36:53:f2
Serial Number (int): 317925637953620940867970732098804746966002
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:b8:f8:6e:e9:7a:26:3c:a3:39:10:60:e5:10:36:b0:f7:92:d7:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:67:e8:ec:4a:b7:fd:7a:61:a9:4c:ef:b6:f3:57:b1:02:8d:e0:da
Fingerprint (sha256): c1:d6:13:e3:b0:04:5f:c8:b6:c1:19:0e:47:0b:32:b7:22:af:b9:0f:75:b8:f9:c3:a4:1a:a4:80:7b:1b:a5:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate atr.com.co

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atr.com.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atr.catedra.edu.co
atr.com.co
mesadeayuda.catedra.edu.co
proyectoaicmacatedra.catedra.edu.co
redmine.atr.com.co
redmine.catedra.edu.co
redmineagile.atr.com.co
redminecamaradecomercio.catedra.edu.co
redminecatedra.catedra.edu.co
redminecun.catedra.edu.co
redmineunaes.catedra.edu.co
test.atr.com.co
www.atr.catedra.edu.co
www.atr.com.co
www.mesadeayuda.catedra.edu.co
www.proyectoaicmacatedra.catedra.edu.co
www.redmine.atr.com.co
www.redmine.catedra.edu.co
www.redmineagile.atr.com.co
www.redminecamaradecomercio.catedra.edu.co
www.redminecatedra.catedra.edu.co
www.redminecun.catedra.edu.co
www.redmineunaes.catedra.edu.co
www.test.atr.com.co

Other certificates including the domain name atr.com.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for atr.com.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QHkf8hD83vTwBSeULxe
Dq3Pu1XiBK+n1Rr0Cc3chtkRzwe0DMVSMAf6NSbCSw+TBEJ1dwLvc4soGyG1WXbl
xBVFmj+2+Y2bVriaS9SSHw4ACNQzCeCa6LxzoJ64xE9ayK4m1X44FRXopP01tpMk
THcdUg5FTr45Kxtf7Q4pzywr58GYUq28UG2u6jcPYVirqlZA0DYXbXb0yQC4Qweo
8E+61M/BBft1QMBiNsrOm/lgEKEsTe0D2lFzxSVidLHyBpIpiP7mdNGwkteFSKn+
PiQKMq8mCntPSdOR26avs75ACAZNIGsHiCmyEY5i62U2Gx13UodX5z7t0pxcPQne
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317925637953620940867970732098804746966002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 10:55:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 10:55:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atr.com.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26889692221189030559269400204849972284144934111774431226919835940989397005460229748163135353547126025512515305789265943123519925333914789189651308712482931200746118741651634184042042181967403661558049384049876033799899642681642003140227474949336866958331635328586505487476037979021016496983410294674586869060448026171874472751842463621248698100049841446671543122602012962495966162520527289554799559884486327347030813324916926459926259119918356859384663264707122416558416040329297067032850660703293347213866586734855265505693750551704185136200203126339472440885066740254105895254776711912834550236261382512448694246953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79b8f86ee97a263ca3391060e51036b0f792d7b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (672 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atr.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atr.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesadeayuda.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proyectoaicmacatedra.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.atr.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmineagile.atr.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redminecamaradecomercio.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redminecatedra.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redminecun.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmineunaes.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.atr.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atr.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atr.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesadeayuda.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proyectoaicmacatedra.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmine.atr.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmine.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmineagile.atr.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redminecamaradecomercio.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redminecatedra.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redminecun.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmineunaes.catedra.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.atr.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001683cc4c21c0000040300483046022100c73fb9e5674093c6699fc9d885e11fa963f0c18242996ede6c1a5df126968dc0022100aa6716e4b13f623ef83007df95c70999a9943f90e482c892bba96015683163d600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001683cc4c0270000040300473045022100ea91787a8434f67d9593505c0bb336616159dd286981c6fbe5a44dd277e28f7c02201a4acfd154fd3ec2318cc16e58f4ade72278570ddcd3dc50cd24eac16e46fdcb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000090561c6996fc0f73a3d9ab8b1a7b632953b9d95aada268e52d9087bf9b73f44d44c438e1ba712d298c24121c1a6354df9db16ede82c340cd0a9d0d36ea014f1cb7905a5f52b1eea6d3000d8d6b3f5d6d15138b4320aa4ef83a78a74eae9a72ad3a63ad6a2cf2bb10de7ea0b484975dd3d31fff9222e6b8e8ee7c0839ddb45e0dc7afb0811c88b3a262272a9a2555b9497fba07ba4b41162f08baf4fb9b5fe09e24c02eae3e2fbe1004d8a2d59c5a9ff969f41154a712507898d61aba175c3f51dddf5a562368caf3552454b1405272dd3c831edfafa6d50ae34d5daa3a4ebbbc12a2cf4481e038bd0c551394d9032f968fafa066dcad8f59fa7a6c4b160a49