www.herenciaguerrera.com.ar

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:71:49:e6:b4:e6:fd:68:29:f1:29:0c:fb:2b:9c:60:3c:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.herenciaguerrera.com.ar

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:49:e6:b4:e6:fd:68:29:f1:29:0c:fb:2b:9c:60:3c:d9
Serial Number (int): 386999282730211426496350631894957978303705
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:c8:fc:73:39:57:9e:e0:8e:f1:2c:0b:5d:c7:57:ca:76:d4:ac:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:7d:71:f4:08:33:22:8a:19:13:03:93:32:fb:9d:25:86:d3:3a:bf
Fingerprint (sha256): d2:7c:cb:76:dd:31:d8:27:6f:cc:e3:bb:4b:40:73:3d:c5:58:fc:b7:da:f1:71:a8:d3:28:05:db:80:2e:dc:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.herenciaguerrera.com.ar

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.herenciaguerrera.com.ar

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.herenciaguerrera.com.ar

Other certificates including the domain name herenciaguerrera.com.ar

(limited to 100 certificates)
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
www.herenciaguerrera.com.ar
herenciaguerrera.com.ar

Certificate

The complete raw certificate details for www.herenciaguerrera.com.ar in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386999282730211426496350631894957978303705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 07:09:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 07:09:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.herenciaguerrera.com.ar'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936640541720583506402130910785358365931470121376875213094500510019667490556325859637669342870336648006567421547274000503283484358229844145951596691680780999475610271609407855740377969156739508917902701265391688498378598314151945188112513475427741608254442710003094502322531648218763265527779239927329621638085272388808192426851575198346657784108256084984249381489848623950640275293877110597349200089379612450049492930740772348126741560263688509793929756464207512265003433612378333395023434702108348365924598008643087496156369804411612598717060553099660381883482360402655371676909092258077004778092869393403572319449818505531846417899336201768205918032810949216412068326741874288646319905702018498736788185790479701553599988786292224396893893271514839498157017130247289573172059822148440348173836642744968478909439671410689207544162128170823744222837055773373856021230370845047977812972090534919358525504249558872896535022498459198655307515754821131948586897169107259087933612820375140718775531836080651829834974184232538124454434004535912617712935668487034004059379844532157824031042208969603914496475342223028300733461968887711916078132741140519567144992779612204762529448998308761151171460110411797638817182139281233815256017682343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfc8fc7339579ee08ef12c0b5dc757ca76d4acbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herenciaguerrera.com.ar'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ecaceef4f0000040300473045022100bf4fc539a596a58687a65dc25c7905bf3b15ce28aefa053bec9716c6c4467c4302204fa18bee50abe72844522d3617f52f0e9774e4d3e3ff79d0e466dc6568d793d900770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecaceef700000040300483046022100dbf9e430913cb6a4913231da0201e39934e199772561e96c71f9ccf555447b7c022100a0002a00df0099f48cbfbd61cab74dbbce92f234aa6ab22eebe1c283db526ce1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ef3c83c6508d3a893ec08e2bd739b8c26f7a5f895f268df2b881a228414449b4cfc02f7b7a252e590c5d73800deaa2aee5a761a8daa0bf1db9b15e9c43800afb8121d9fcb066c04b9a44d11ab2cca5b914d4c6b8e75e551e6107f5205e14ba3b314c3564d393c79fe3b0b084ead36e1c216626f937a271908252de36c0d6aae62b86ea5038949add10daa7a25594c0a18828cf9833cb432cf4fe8d0a35059fa8c5de792c3e6773eff000933e976295853a3624bf315028508014443254213cb9e088916ed1727a4989dcde2a6725821d0933811d7ef5a84d1d99eaa531161e80df6db87c2fc146f0c145265595e4132fa26ea86218c879d8993f4dc3370fd4b