invictus.com.ar

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:b5:d4:26:20:2f:31:53:6d:ce:53:41:58:de:4f:15:93 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=invictus.com.ar

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:b5:d4:26:20:2f:31:53:6d:ce:53:41:58:de:4f:15:93
Serial Number (int): 289821986057171183129813308196475582223763
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:ec:d5:db:e0:2e:73:d2:09:a8:27:92:b6:e1:95:b7:43:36:91:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:df:db:23:f1:28:b3:6e:ed:34:c4:da:e2:0c:2c:18:53:5c:a2:2d
Fingerprint (sha256): e2:04:73:06:b9:fd:7d:59:ae:b5:fc:89:8a:49:a5:59:16:aa:ca:f2:66:cd:17:07:d9:36:e3:80:ad:09:74:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate invictus.com.ar

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for invictus.com.ar

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

invictus.com.ar
mail.invictus.com.ar
pop.invictus.com.ar
smtp.invictus.com.ar
www.invictus.com.ar

Other certificates including the domain name invictus.com.ar

(limited to 100 certificates)
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
www.invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar

Certificate

The complete raw certificate details for invictus.com.ar in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289821986057171183129813308196475582223763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 05:10:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 05:10:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'invictus.com.ar'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818831575178107429817723117031833079165178820573154270435135182877687347217161224583560895746933470067985204879629797326364944232485012600273470469239030613081564723540901651672782010522393202796233358463835470085809387124661857019634607086451529637943796999314237302777377037086562925595041689466091059012479126957086257734700387229414899744380938306951619686581878872414911133160749209570007361825107486594246615632515713440648947880145338140802633446545583621974122520558542163847507281739565622375995921212328097956839446133984000346327462643968000448061107442004910322310870794377224394951517786576864860643580714159812714685356004624072614415182651754405046343518429730636491309251414019025701466649802924770461920747327220503240087282529824124523479502366126731835063706554451833765398778317447865476579815895216104522843302290072971001574271167880140531090240682652213420650988878521484126533832942845741200845592873242778093833325442175466069534370088916112209961158771121277792673832538591241899846447843497143121169531773750159154748526642430361363847012349407646485352949174485411308320256346824115495188355110061270361655329098419382483884982579148820386211422335631697414877014792202888775658837692094303307723859288703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74ecd5dbe02e73d209a82792b6e195b74336915c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invictus.com.ar'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0bd6807000000403004630440220620eff82d4e3d18b515620165a9f1f07e54d4e6f4ee95e1d6fe7985258f9a29e02202e6676b29d262d769dfca6e13845707b3ea2ce3fc61491f7e30cc36f3b687dd20075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e0bd681c50000040300463044022001b1fe8cc6c8d7f2f5bb787642d451c1f94f9279ab9fbada83c40b23dc5fd16b022050fb34d179148950ac271bd19622ff24bb56bb12e63418d4732e0d48aebff79c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059ec0d8404eabd6164b7bccfe311f059c25d86fa494b1e783493b8b25375557b6d4abd1e86cf4033578529a2357212dfcd02052b063e1a2491e53b5c697e53b8d46f6dbbc598b6653672118efc48145c01f6a5dddf37053e854a86b40f0d07f7ab8f4a9a3491b61a4cf122231ca48ce3f490880b2c565823afafbf4f1dad1f124b2e1f540a2a8b6dbc0d2014c2d1231f7ce4dde6ffaa1c441e4f60bd63d026f2e6671a85180eccd9d36db8fb93a6b3a7a4216680051b434dd2ff0a64ecf90a334ab7f02d4cb401ecadc28da875ded49efe3361d956e9c02e5b80f10b3d1165d39c814141bfbdce92b41b26684eadb699703a51deeb972e5b0a8690c3834f5358