images.terralibro.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:50:1d:0e:d4:c3:ae:ce:ec:8b:f6:60:6a:90:8a:32:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=images.terralibro.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:50:1d:0e:d4:c3:ae:ce:ec:8b:f6:60:6a:90:8a:32:73
Serial Number (int): 283221418395303158192687418498386412319347
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:89:47:61:b5:96:44:3a:b7:5c:3f:eb:f9:57:05:27:80:b5:03:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:4b:7e:e6:e3:c2:d5:31:97:2d:4f:9f:b4:b2:98:ef:cb:f4:a6:bb
Fingerprint (sha256): eb:c7:d1:ae:6d:d0:0b:66:9b:57:32:b1:26:b4:06:27:70:d8:cb:17:8e:41:79:8d:e5:f8:d3:c5:e8:e0:15:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate images.terralibro.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for images.terralibro.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

images.terralibro.es

Other certificates including the domain name terralibro.es

(limited to 100 certificates)
images.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
test.terralibro.es
images.terralibro.es
images.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
images.terralibro.es
images.terralibro.es
www.terralibro.es
test.terralibro.es
images.terralibro.es
terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es

Certificate

The complete raw certificate details for images.terralibro.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283221418395303158192687418498386412319347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 04:39:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 04:39:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'images.terralibro.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823241299128834903569356621751238444492972692224569431116162138968968202997243639933102262484198060655336819444385313544022992445545037135644966140327195971157340008831492447391684977923428801860421838658746633683591129061867156068684655799712320010500541513661177631738358922729217097131160573448115429696387421255823542622195887814295119974311257606994454859744758610424955713100816848371747707602491191740629304234485660802652905012840963899027982066255705365806002414096186115181368928192677771273272805582027145617204667776525699265543374845442728744247285225133090125451067341326242533340631406505408537589425643399109830598704534885725310181264490235593043437707751240834808399977924543554797461500626517295698320255036067112743508057618594436837099617711086180811826348876205708968350630405661711126165664357015999459218981038062266103342511408830916386709644190431630988806770897344692043792143062661645968830179232351504846363523670832837110479110926423444628250376500029666258017169054770284916159144998012764791410702975905948167314851526314448304692680340866298238558124977093088293595979041292413875260417015715172944684203747318423545992990583039784734345051757261950491216429502634430021986218105736908486883780735027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02894761b596443ab75c3febf957052780b503ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.terralibro.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169044490d9000004030046304402206553309f5e27e201b86125f173cb82efefcf44d70ff1788fc868330979397b0a0220035e634e2b1f4385995bf5c2a9f0b4735f93d63ecd5230ea73333969252f4e9800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169044492a200000403004630440220351af3e5d1ea45ef070fa8bb7b3afcf24b6c0f20f2fffa9f261c008f25cd956802202b0d852207f0fe2c232c0e527aa8346edfa2c17e8e150a96966d40d344606d7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009bb517d411e01fbbfc7e9d1118d699f1dcfb401455a0c71e5739d6604c42e9a61a79cb017c464e51b0ff757046d31718e10318e1c8234ea2ecd531882dfe735b3ded952bf9891dce9563c7c80a48d14f67e793edbd82ea675bdca00eba4c137433ee4540b5806d7333f29ad1f61e342313a4a9dfd4509b9e1bc85e0272922ce681fe2a077091ac254842591ef3fdc5776de6062aaeee02c08bd79fd5c28041cb2a7979c1b96bcb44f98877c7b2ae6a761cf920f4df4a5ed04bc1e5f2114c41e9797549da3e127d6bfc6603a05a9c7868a3c9fffcfef39097d07cdff03af8d9d3e2c4ff4c4bb7484ad5611211f22966f21df5e3b94f156808bf44410f6dd30e26