grupomar.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:0c:a6:ed:a0:c2:8e:21:95:86:57:c0:68:89:b3:c5:0e was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grupomar.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:0c:a6:ed:a0:c2:8e:21:95:86:57:c0:68:89:b3:c5:0e
Serial Number (int): 313757159778000993070788819729505599079694
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:d8:e4:e0:66:a7:06:dd:7d:1a:e5:0c:2a:50:35:ab:40:84:06:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:ef:ae:2d:c4:3b:53:44:26:92:19:3c:92:44:d4:4e:5f:7a:e7:27
Fingerprint (sha256): c3:23:09:95:52:86:07:79:ce:a9:a5:0a:4d:c9:c7:b7:4a:64:b3:5b:7e:31:a6:9c:34:1f:be:3f:6b:d7:5a:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grupomar.co

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grupomar.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aprende.el-lab.co
carmenzakafarela.el-lab.co
crm.el-lab.co
grupomar.co
grupomar.el-lab.co
mail.grupomar.co
mail.miguelolivares.co
miguelolivares-co.el-lab.co
miguelolivares.co
talentoypotencial-com-co.el-lab.co
techheroes.el-lab.co
www.aprende.el-lab.co
www.carmenzakafarela.el-lab.co
www.crm.el-lab.co
www.grupomar.co
www.grupomar.el-lab.co
www.miguelolivares-co.el-lab.co
www.miguelolivares.co
www.talentoypotencial-com-co.el-lab.co
www.techheroes.el-lab.co

Other certificates including the domain name grupomar.co

(limited to 100 certificates)
grupomar.co
grupomar.co
grupomar.co
grupomar.co
grupomar.co
grupomar.co
www.grupomar.co
grupomar.co
grupomar.co
grupomar.co
miguelolivares.co
grupomar.co

Certificate

The complete raw certificate details for grupomar.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWFkmTxSyV9tPmawgn7I
Lew5BC4SRRUXcNb0+iJR1l/3jjyGNze7IjPGwx3uk0nU6qmJ7zitFbVZsIEs3QZB
aevlArsJrTo2MbZoOVRu6XEiKPkspLcd6HdlzGy5mRw2ZF/RNaJDS79uMSuSHV7+
MYOOmgx65mfkgL3jjmZUy7Efg4VnIshZPk09gQImqwHhl/c64kTrigsFksTTpD0r
9COMFjK0EukfQjlD6ogo2nHH5H1rz9HmCEKhNW0v5P4Vki1U3inM09RjDa2xuT7g
Pii30fMyF1vD0wuvWA4N9UgEW3NFGAtQ6qG6ikISYOXlU15F2N+jyz9uVzTDs0yf
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313757159778000993070788819729505599079694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 06:28:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 06:28:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grupomar.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24412019118561668600194140478246613128199408228631832101992488459532206759966655321596210701961817023639109357843025311038857108506455205422878933958968667368552353099387521592599684397169675089001196815447618209135700745827347899606421005899715442702582241127143868456707452571861007814727668195311873133231573520322615890958425742781964648764047581795683718060958328105231816165768085740733499064139036080184786003360433440298710883049380587057425525787088228840616206578036270008871158646769400397288070738817453261495779598357947253051273230610067911782869480375066777163700887623505481760526112302465576747179871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bd8e4e066a706dd7d1ae50c2a5035ab4084063a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprende.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmenzakafarela.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomar.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.miguelolivares.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miguelolivares-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miguelolivares.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentoypotencial-com-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techheroes.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprende.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmenzakafarela.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crm.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupomar.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miguelolivares-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miguelolivares.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talentoypotencial-com-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techheroes.el-lab.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f98a7b0e600000403004830460221009fa2259f65cce74d1a11ed3adb7fa390e0a44884f04d4c6eac45e3dc0dcaea0802210086ebde5a582f6abd5aad9738b6c255eb43879f2b21c6bb7c77cf4d9e4df77757007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f98a7b0d400000403004830460221009f2096a9817ff18c3b28951457a4de960c56b156d52002aa05eb4863a1ca49430221008af6825111a43ade2d7140e1ab957bd8f74269d0cb0f735167a28d164cdddeda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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