invictus.com.ar

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:b6:0c:ed:61:bd:3b:9e:2d:bf:be:b3:b1:ac:39:f5:a2 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=invictus.com.ar

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:b6:0c:ed:61:bd:3b:9e:2d:bf:be:b3:b1:ac:39:f5:a2
Serial Number (int): 332697859099226808480303973869950498108834
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:94:05:18:ef:bb:cc:33:cf:c8:3b:67:a6:b9:b1:3c:43:fe:b2:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:cf:eb:5e:a1:a8:a4:e7:d9:dd:62:bb:1d:cf:c7:21:cb:98:8a:54
Fingerprint (sha256): eb:6c:91:b4:87:7f:d9:5c:62:3e:ba:59:19:14:5c:14:86:16:15:6c:ac:2d:f8:ab:fb:f9:43:36:d7:e5:03:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate invictus.com.ar

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for invictus.com.ar

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

invictus.com.ar
mail.invictus.com.ar
pop.invictus.com.ar
smtp.invictus.com.ar
www.invictus.com.ar

Other certificates including the domain name invictus.com.ar

(limited to 100 certificates)
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
www.invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar
invictus.com.ar

Certificate

The complete raw certificate details for invictus.com.ar in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332697859099226808480303973869950498108834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 05:15:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 05:15:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'invictus.com.ar'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859561147205706516270267855132617301247189087030006735142667795028270504423145613602992217668231950683488686089351019838577486262444932709969889611348024397690745566568754192313034926296694382740733967516261913069416178162687878795237939326732357892807950010842079059757339864064137287379228909520974210807285294105875810306819943349536280245197574287151486777632178496992902409730989400887833553567853795291016068583039883318651465879696904978550651263769308677886811816276095427048916740405002808158146707190787226980352709270118150540602580256283064447753680479314390012558606682618557179095843042210352813732064232265033879947448666405600958846473510570830647093360161242063375493855528196218685517165688279364228573693373516292646772640700204991094617804760317224722983379904048278246178224356511195107625018638011502518997619047513926488406814270734798017456704519200342557662675450108126740042586470831142742810254610926574861330324427828754105898374111661003375684315358365062253302545627492501137364275770947292730417223174828891473584914023813280721141750009149873000011949791313566943327511373935230228363986479281887026600704551221442105579730717853929760946472308797730105759565463485999511633564834097855322774716009751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84940518efbbcc33cfc83b67a6b9b13c43feb232
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.invictus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invictus.com.ar'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cd1b749bf0000040300463044022054d9dba3683f3d7d09139722795fe2e7fa07d660470c8d97dbf52c17abba1916022012b56ce5c8cd22efa4aea3ec6cdec1db698894da194b2e700c24b9861d5b307a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cd1b749b0000004030046304402202a5d22f6b5a8bcf6250147503b00f383572daf5d30d9bbb2579e19401fa421bc0220194bd69c2b23cc205f95dc56a54e44113c5de2f9cbff14c2bebfae35219ad5ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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