chichaylimona.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e7:c9:5f:4c:d9:ab:f7:fd:f7:92:8f:f4:c7:be:1a:c2:f7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chichaylimona.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e7:c9:5f:4c:d9:ab:f7:fd:f7:92:8f:f4:c7:be:1a:c2:f7
Serial Number (int): 427322040139840963429418343122101386003191
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:41:15:6d:22:70:70:c4:f9:a1:f6:61:33:64:c8:2d:d6:04:74:8f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:ba:08:7c:de:76:f7:21:c8:be:52:da:de:19:48:b0:f7:b5:a6:29
Fingerprint (sha256): d7:76:10:e4:96:b8:a2:95:b4:cf:c7:9c:ad:cb:43:de:b0:b6:e9:c4:33:90:76:e8:30:e4:bd:12:3e:8f:80:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chichaylimona.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chichaylimona.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chichaylimona.com
www.chichaylimona.com

Other certificates including the domain name chichaylimona.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for chichaylimona.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427322040139840963429418343122101386003191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 04:22:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 04:22:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chichaylimona.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892784904514540334804936822999129942082674542882797275821261395802427703075672399332887513228750363591550002264959789120092115613736318956289442963646538183788961276294956439515142653095451622385228297907496180915861724347478287416165995388550879947990754764616394619694884962858151246027715696062848628219712334779628188421592877178901266655632833382078854941787515557932663364819838627458497180046902980059574061186650201781871122437698973550401252815158917644102118405347146780702192021589806399781587774956981043890348317515490364118043121030289884109358533594390070008218881775861834511015208738399493354894529192020706999878411778855587164168049303196229498130015319198190545377751890429640256590656786140520879694393615859205904332084417979796916222066453209813112833251463523867116856308043003928128410834194208066405359255311724168939592096136575806527284489541694937700460850405738988308715971911778679917971197676137353840817327409225251545996677250370886316852031979637958694070207001822428325571651109685562154391923396034300883663315557462035732356356304470689167903703962507961107829240960340278988875465844285167316640343968232955257557553813534944561881456159244072153301651614850954581937560201970017542174660464199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a41156d227070c4f9a1f6613364c82dd604748f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chichaylimona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chichaylimona.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab63084cf0000040300483046022100d81e3f2ca73dd4560f8dd4e07516314be696288768fe35bf64f956e58cef6e6b022100911faf4e202c84715422aaf5b1b0afea502c24e2161229beba42c98b7864464a007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab63084c7000004030047304502202da38274813ac5f14b0088703a3b3419b1d4df53fc8573addfbcbdfd7cfdf008022100cc51b8bb85de9bd5c2a250c12cf7310ba79319dd98513bddf30db4d436b37c73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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