carreras.kennedy.edu.ar

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4e:37:b3:a5:95:16:c5:21:65:29:cd:39:0f:86:80:11:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=carreras.kennedy.edu.ar

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4e:37:b3:a5:95:16:c5:21:65:29:cd:39:0f:86:80:11:7a
Serial Number (int): 375065208666189662647251800875768372793722
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 63:a7:0f:14:82:5e:a9:be:fe:83:d2:ba:c8:3c:89:97:be:0e:55:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:aa:72:ae:50:85:c7:8d:20:4e:14:7a:f0:94:f2:07:19:5f:71:de
Fingerprint (sha256): c4:ab:96:96:ea:8f:3f:b5:92:fe:77:de:ee:4b:82:84:b0:3a:49:d7:b4:4c:5b:16:42:47:23:a4:7a:44:06:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate carreras.kennedy.edu.ar

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carreras.kennedy.edu.ar

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carreras.kennedy.edu.ar

Other certificates including the domain name kennedy.edu.ar

(limited to 100 certificates)
sni98105.cloudflaressl.com
ssl810276.cloudflaressl.com
ssl810274.cloudflaressl.com
kennedy.edu.ar
www.kennedy.edu.ar
kennedy.edu.ar
ssl810274.cloudflaressl.com
carreras.kennedy.edu.ar
sni98105.cloudflaressl.com
www.kennedy.edu.ar
sni98105.cloudflaressl.com
sni98105.cloudflaressl.com
sql2005.kennedy.edu.ar
ingreso.kennedy.edu.ar
sni98105.cloudflaressl.com
ingreso.kennedy.edu.ar
carreras.kennedy.edu.ar
*.kennedy.edu.ar
www.kennedy.edu.ar
ssl810276.cloudflaressl.com
*.kennedy.edu.ar
carreras.kennedy.edu.ar
kennedy.edu.ar
sni98105.cloudflaressl.com
kennedy.edu.ar
sni.cloudflaressl.com
www.kennedy.edu.ar
sni98105.cloudflaressl.com
*.kennedy.edu.ar
sni98105.cloudflaressl.com
ssl810274.cloudflaressl.com
*.central.kennedy.edu.ar
*.kennedy.edu.ar
ssl810275.cloudflaressl.com
kennedy.edu.ar
*.kennedy.edu.ar
ingreso.kennedy.edu.ar
carreras.kennedy.edu.ar
ingreso.kennedy.edu.ar
kennedy.edu.ar
kennedy.edu.ar
*.central.kennedy.edu.ar
ingreso.kennedy.edu.ar
kennedy.edu.ar
www.kennedy.edu.ar
carreras.kennedy.edu.ar
ssl810275.cloudflaressl.com
ingreso.kennedy.edu.ar
sni98105.cloudflaressl.com
*.kennedy.edu.ar
kennedy.edu.ar
www.kennedy.edu.ar
sni98105.cloudflaressl.com
sni98105.cloudflaressl.com
*.central.kennedy.edu.ar
ssl810276.cloudflaressl.com
ssl810275.cloudflaressl.com
*.kennedy.edu.ar
*.kennedy.edu.ar
ingreso.kennedy.edu.ar

Certificate

The complete raw certificate details for carreras.kennedy.edu.ar in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375065208666189662647251800875768372793722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 15:30:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 15:30:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carreras.kennedy.edu.ar'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669253755657658894331573647729763527383334172592442835343883552104874619875942061815944609187428439292077557342327619410389257681040203021774898255927738704958064774584180364327950946678079422339843003365014746707658374285734464341597803591416617221413462059983831472118044396502554431601817995558883865714837008889288435962529063927148443988864120509485871796471810247418630402213545602394182392946313268305027023120683968743111914736251589529018458542156983961622472776023406528230985881849320407666228242638165815323669206063692470583869991181290038423420163952991331780523008941421228261339312278791402029739546665563903521359132546598898712403652934976466390567525296438786754812718418699431142244038730075509185029371216525963911151725331560050726324166646625205500052273428277737635779158669458686222386459019243000193192045264845821135191890010311582749482081956472458021758491861841709082879116086837899168528161094238607496204465151317252619358202183936791167125466277993488945304394079135322160124702997143872296090324332930540838087355525450548616233917180750835594353600977119370839113180949791581178546482063454366479978608631303869648604823910935918208506726501484162695797217244680250970121455004812721927035010183067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63a70f14825ea9befe83d2bac83c8997be0e5546
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreras.kennedy.edu.ar'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ba93994f20000040300473045022100c52eed09e375e0f0e81aa11a963ef08d852c312feb32db543956148a51b6f04e02207ba5f102b771f10c2fa8bed5342e4568bd55ce3f10a1fc7c38bab0687c92afd70077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ba93995740000040300483046022100b0dcfee743fcc919c89240ad8bb73e6a18332b40730d365f54d9f07bf5bebb64022100f5bddcdcefd09d62b693dc3244deb3e821731b71377d708423c6f64cece2e199
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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