elmejordoctorensanluis.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:f7:a5:b1:48:dd:39:4a:fc:6e:75:99:ad:13:e4:90:f6 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elmejordoctorensanluis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:f7:a5:b1:48:dd:39:4a:fc:6e:75:99:ad:13:e4:90:f6
Serial Number (int): 327000251883800850389432162325544468517110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:d0:ca:fe:83:b9:6a:c1:2b:d3:36:96:ce:ac:f6:b8:c7:67:ad:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:05:d8:c4:b0:4d:d1:e8:6e:81:a3:91:ec:a2:b6:0d:fb:ee:48:4c
Fingerprint (sha256): e5:6c:48:d1:6c:4a:42:9a:34:d9:a6:be:32:57:9b:16:a6:7a:65:7f:d2:e9:24:a6:f1:02:98:aa:69:d2:b7:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate elmejordoctorensanluis.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elmejordoctorensanluis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

doctorensanluis.com
doctorensanluis.us
elmejordoctoren.com
elmejordoctorensanluis.com
mejordoctorensanluis.com
mulhearnacademy.com
www.doctorensanluis.com
www.doctorensanluis.us
www.elmejordoctoren.com
www.elmejordoctorensanluis.com
www.mejordoctorensanluis.com
www.mulhearnacademy.com

Other certificates including the domain name elmejordoctorensanluis.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for elmejordoctorensanluis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGo+tRHaHnRtb2DYosx/
LKeSepFlmReDvCqpYSvIOrqrTnuBixUAUgfQxKPqnlqE+KLVSv02+KQQycBqNa+G
+EMgnajBF8d5zk642Q7mVCQAO2Hrsim0XZtJot8LWOviXV3ZXrgd9uxdwpKZS5r1
A1hG8epCXJPdX2FPtUgY1gPWnM9l9uyXQ0KGYqCmyvBeekPgZky8PbI6POLy1AOp
2jjqWoCSuj+0eGh9plJVfgfdhgE48CMUpw9yMhgWzqPUU7i+O0eomlXz2CWr1zm6
Nt4qwQWnTFjnw9OuvzvQGYe/MVBrmz2mVYo2Gq8MCfbPMKCnftYBxfHElaaMVBJR
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327000251883800850389432162325544468517110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 07:12:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 07:12:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elmejordoctorensanluis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23280239451451331522826022469615011873332418980275118317591758810916695839184022355660992714664822380171936441481405342037110329516990458194831096520460112522279101581529147933426829733835196432737710696803502109718259901683896854297402787237786997861239863006236155253274033845734773401298163654353207415310207535629785452670035604464122054078234961596808334366624096197250136475634433055800208879529101922502997094040546549725019279508350197452264141351746748513762416737087571862066244667959620728861098902667812381078227711079660997691029160992404324224452234459195443171057194074574804232052312946173757938094441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86d0cafe83b96ac12bd33696ceacf6b8c767ad80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorensanluis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorensanluis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmejordoctoren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmejordoctorensanluis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mejordoctorensanluis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mulhearnacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctorensanluis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctorensanluis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elmejordoctoren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elmejordoctorensanluis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mejordoctorensanluis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mulhearnacademy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ca8ef0206000004030048304602210095b41798496f9f0acc4c5c1abef59feab29367beb44c33536728a7cf97ff9447022100d161a8c0c196f1f775feea9e26749a99d769412060f17d979c7b5f97a15e94ac007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca8ef03e700000403004730450220449ca4078108eb7b0b78ef05239863cc7dc9b5063e8cfc15ddde13c438ebbbc4022100c5e3bf3fda5a1c14f236bc9e5ba1759f46e1cbf541f30bc8084be2a847f07705
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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