lktdiseno.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:32:a6:89:2c:bd:34:09:ed:ff:b4:d5:4c:d7:61:5b:25:81 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lktdiseno.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:a6:89:2c:bd:34:09:ed:ff:b4:d5:4c:d7:61:5b:25:81
Serial Number (int): 365684626172474075566581820550304476374401
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 93:61:00:a7:c8:8d:a6:e8:67:d8:47:64:f3:c0:1d:d1:de:64:f8:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:bd:07:31:32:a1:3e:8d:61:b3:61:b6:2d:ff:6c:5f:3d:91:a8:f9
Fingerprint (sha256): d6:63:dd:83:0c:c2:b4:b9:bc:64:65:70:29:db:c7:ac:6f:c6:c7:aa:8e:4f:a1:07:34:57:81:42:63:08:f6:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lktdiseno.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lktdiseno.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.lktdiseno.com
autodiscover.xn--lktdiseo-j3a.com
cpanel.lktdiseno.com
cpanel.xn--lktdiseo-j3a.com
lktdiseno.com
lktdiseno.jixeavro.lucusvirtual.es
mail.lktdiseno.com
mail.xn--lktdiseo-j3a.com
webdisk.lktdiseno.com
webdisk.xn--lktdiseo-j3a.com
webmail.lktdiseno.com
webmail.xn--lktdiseo-j3a.com
www.lktdiseno.com
www.lktdiseno.jixeavro.lucusvirtual.es
www.xn--lktdiseo-j3a.com
www.xn--lktdiseo-j3a.jixeavro.lucusvirtual.es
xn--lktdiseo-j3a.com
xn--lktdiseo-j3a.jixeavro.lucusvirtual.es

Other certificates including the domain name lktdiseno.com

(limited to 100 certificates)
lktdiseno.com
www.lktdiseno.jixeavro.lucusvirtual.es
lktdiseno.com
lktdiseno.com
lktdiseno.com
lktdiseno.com
*.jixeavro.lucusvirtual.es
lktdiseno.com
lktdiseno.com
lktdiseno.com
lktdiseno.com
lktdiseno.com
lktdiseno.com
lktdiseno.com
lktdiseno.com
lktdiseno.com

Certificate

The complete raw certificate details for lktdiseno.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Boxc8Azj67NPW2zWsBm
zTBT4rnhHZFVQJ+IeiNNgRIOPiFJleeo2XgnQ8CxoI4nj2H5ViDp5OEXcqgZaiS5
8RUA3Lg7S4it97UWnRbhSLOt7R/gnNWOO+t6CTdXcHVrUfoKdK7YJObfpcUJ5g/f
4m2EkEfRXrshxLxKamMkwyGzzNie8hV/zxJ632Beebfc49GUr5cJ8w/TNfw6L7EN
lgnnSGJkf3w9VsxQybms2VmWcSnL/uERgHrDGbT61nga4ayB0PJt2DtDPKf3lj/J
giJU624ATX68LO+6yAXTSnw8T36fXnjnKxJhQlEcQ645DLAHXiFa7qJ1fqgp4yql
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365684626172474075566581820550304476374401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 18:18:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 18:18:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lktdiseno.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26270483767681980130990527809851543864085830906772616690344857385011913517989077438591503848497700031835489958085406059689875464898464391357769099840552026148793585543740730106344257732538368585816987404886316870911348471638714841639984228496959816933536834390198021567108323707858579771444855365503234065371042824464504707014266909254594591692045446082413810378517468177438683104194405477970034102224189859419700072719270233298317531716493757217034856459367902926056216102518957492587498602038203846105386720431124957303377998716754082021250262402019698023064589564107894112784018676310029271908548718790474065421663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							936100a7c88da6e867d84764f3c01dd1de64f83d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (519 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lktdiseno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.xn--lktdiseo-j3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lktdiseno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.xn--lktdiseo-j3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lktdiseno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lktdiseno.jixeavro.lucusvirtual.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lktdiseno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.xn--lktdiseo-j3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lktdiseno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.xn--lktdiseo-j3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lktdiseno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.xn--lktdiseo-j3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lktdiseno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lktdiseno.jixeavro.lucusvirtual.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--lktdiseo-j3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--lktdiseo-j3a.jixeavro.lucusvirtual.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lktdiseo-j3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lktdiseo-j3a.jixeavro.lucusvirtual.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cb07773ef0000040300473045022100fa65d78cf77c0bda5a53b4376a1438752edca4df72fb50186af5a2696c620a320220410b3b57e65a1e48a7c1c08c87ed99c31eec8e8a461370f060953e04b4b44ce900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cb07773de0000040300483046022100f71c6fa964342edd344995a0807d52f384d08c2c2419e6a7946e629577d74a72022100ed00b67d3c6e921d82eb9a0dea765a6015944b2a40240b6312ec023a47745501
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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