manakintourscr.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:65:04:17:53:af:45:3e:6e:12:49:11:ec:8f:a8:2e:82 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=manakintourscr.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:65:04:17:53:af:45:3e:6e:12:49:11:ec:8f:a8:2e:82
Serial Number (int): 321020545276332283648525883400821630578306
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:54:a8:25:4a:ee:0b:be:99:84:47:9a:4c:27:9d:87:18:11:7d:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:90:6b:77:21:0e:d9:3c:a2:d5:b3:b3:11:cd:da:3f:dd:e8:47:d0
Fingerprint (sha256): c3:be:a3:83:26:90:c1:f4:66:bd:89:09:1c:20:3c:b5:cc:a0:07:2e:6d:0a:5b:8f:a8:f1:e9:4b:d6:af:e7:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate manakintourscr.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manakintourscr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.manakintourscr.com
cpanel.manakintourscr.com
mail.manakintourscr.com
manakintourscr.com
manakintourscr.logisticafinanciera.com
webdisk.manakintourscr.com
webmail.manakintourscr.com
www.manakintourscr.com
www.manakintourscr.logisticafinanciera.com

Other certificates including the domain name manakintourscr.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for manakintourscr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFp35lO5Tv7GRE9HhTN
avaknxlc5BnqWIQsR+7e3mRMcDa2Rzdiip9cPTkzBUife4ExGleAx41j9iWSntgY
SghbGvH/epa6Umjm3omUpSTGhO2dlNWDiIBiyND8mdzvktgp8EtdNOZKCnLQ0uTK
LM9XhjiURTO3aIOx0rOyNgUVVENpyKweFQOUzaRwqsbKJ0uebn27n55CpP23/NZO
+MTplxMBfcRiWM/oWx5DG1p6WxFXHAPhkKt0s1kESjgW6IO2/tbu/ncaiCPTcGfj
PPhG15Gm1gHa3CMrvCUFrB9R3g2Df0atOBLqBfTMTZ7NVK2VKAX+7UEY9NiJ3zns
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321020545276332283648525883400821630578306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 09:28:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 09:28:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manakintourscr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24743404829756183427889619875652372277280363737502226051037354956353147914332514986961393023733128841064051200003817249468144841733186624244813772258630551003004266561413981323509400398641645951902913790812529498017280023585683176047049583453907244842655619886022924839461714047983318407185646775504479891645480326153410588123771461578352741555950148914544028619269957021515894019280580491535341630313365547921929023087135514719024517668817730624136233200528862090111496263657941760329103073305089848554329851113204836023354801435121079416793784327461876840390656694991580984616177125936138870857470754014820881263861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2654a8254aee0bbe9984479a4c279d8718117d12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (273 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.manakintourscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.manakintourscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.manakintourscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manakintourscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manakintourscr.logisticafinanciera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.manakintourscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.manakintourscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manakintourscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manakintourscr.logisticafinanciera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c70c63d540000040300483046022100b845042a7994597e415c37aa4c84a0f32f2acd1a21dc7a0cc74599d005c68fef02210081dcdca8828b05d97693aab85cbac697116c2cfd5b1a49f95128fee9350ee5ee007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c70c63d45000004030047304502200b108fc6522e959a4c02eef3937244a14da58f932c82cf84ada3353d1ef590b70221008f098bbf1f97bd5026172a8ba53dbc5b0c8da758bd6f1edbe3a1d5e82c184955
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065cb9c705b816038c0dad27f6cf078d40f11dd9e9b8a9b06498231b93799315e1c4547f6c40fe1220055ff6379485cc7fc72963403d1ee7e8a0a63ea11e67e4974d7fefbd2fcdeee6352d43edfb55c83c72b56f18581b08ee342e33b3e2c88b2d4763aeb108b9cfa405dad3fe511791ba97a6d3d3bcbec1fa927e910e8dd2959a2c348ea2e545949204f4b5158b951e72db57421252caca102bb3e59a0e7a4e362afc19a9bb71584d7f432986a75b1b6bc14f3fed6b75f0e8c56e3b8e1d91671ebcdeedf652224d4bf562ec590e00b9cf4492ce0cff05bb5bcb047bc0e927e543bff8791740ca4b90db984e362fed9874b28f1d7b6a5be83ee3b1a95e0098bd2