grupomar.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:d9:bd:24:b9:84:e0:4e:13:0a:35:96:a0:1d:e1:90:6e was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grupomar.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:d9:bd:24:b9:84:e0:4e:13:0a:35:96:a0:1d:e1:90:6e
Serial Number (int): 313689484498240993662584790244420455862382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:ec:29:1c:2e:24:3d:4d:05:be:ce:e3:f1:c6:78:50:7b:ad:e7:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:a4:72:d3:1d:35:1f:5a:01:03:79:db:9d:56:07:f3:f1:39:29:86
Fingerprint (sha256): f8:69:08:cf:3e:58:9f:80:a2:da:ed:e1:93:dd:19:58:2e:47:a7:bf:94:d5:4f:cd:66:1c:0d:bf:e2:74:ce:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grupomar.co

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grupomar.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aprende.el-lab.co
cruzanaquintero.com
cruzanaquintero.el-lab.co
grupomar.co
grupomar.el-lab.co
mail.cruzanaquintero.com
mail.grupomar.co
mail.vitalitysports.co
mail.wacoservices.com
techheroes.el-lab.co
vitalitysports-co.el-lab.co
vitalitysports.co
wacoservices.com
wacoservices.el-lab.co
www.aprende.el-lab.co
www.cruzanaquintero.com
www.cruzanaquintero.el-lab.co
www.grupomar.co
www.grupomar.el-lab.co
www.techheroes.el-lab.co
www.vitalitysports-co.el-lab.co
www.vitalitysports.co
www.wacoservices.com
www.wacoservices.el-lab.co

Other certificates including the domain name grupomar.co

(limited to 100 certificates)
grupomar.co
grupomar.co
grupomar.co
grupomar.co
grupomar.co
grupomar.co
www.grupomar.co
grupomar.co
grupomar.co
grupomar.co
miguelolivares.co
grupomar.co

Certificate

The complete raw certificate details for grupomar.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yVoZ7SoxPTkLT4CKJdm
eMSD4Hhn3JnCoMSe+KCzuIlLTBBwZ/o7U4BKNqizn78rlWIomLrBdxnOtrZX3FOs
d1NHVU8lUUBUEbtkseQCiYd7Jg6LSq4++rpvfadVtYXa1s7UOlb9HPFxP55MTb/O
Hla+U3RF7VRkRn5qGLdAUYPz5Mk/cqaI5Tn7yF0E1uq0RKqGLIKNZCsD4obgZ6S6
4KxmfpsQ8XBgMpxRD7HXAHozfRuEPnSTQ0iSTr9obgpohaTsZFdLG1fLkaUlqB91
ekutwsL9T4tgwt7QmnKiWvgJiayGYFRR4LKvUx/O4PCTN+MJG8DXb8S0skebwGlL
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313689484498240993662584790244420455862382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 06:02:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 06:02:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grupomar.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27664635277244904339917431388978865393624755597651018649736147508711025711138853253669037622377537166304032803721175761071241944144416156539826206939533200410416757636522814325400176653173732847576356282532385606102175815742521440779795349359322361188095520476825898070583603895849945009750797347352831895292083798485064627218379753621759844775447872958466690703870869630061522926717939876822187757681560322791567251824963878092692928526900395394812365596393688127433246265539130953741960393620630983136187240572451424057285851209537024588082688864914820701418343363820161134474394211551926037949999379880520291273649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1ec291c2e243d4d05becee3f1c678507bade796
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (559 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprende.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruzanaquintero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruzanaquintero.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomar.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cruzanaquintero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vitalitysports.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wacoservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techheroes.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalitysports-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalitysports.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wacoservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wacoservices.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprende.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruzanaquintero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruzanaquintero.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupomar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupomar.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techheroes.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitalitysports-co.el-lab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitalitysports.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wacoservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wacoservices.el-lab.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab00052d10000040300473045022100dea0589f3b88b065ba2d077df61ce9fbd62add79af61b7b51c7aaf9cc81ed135022041c30937951b2f2b0d31fb5b89d12af2b123ce3aa37c89a80876ae81d2aa81e100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab00052f00000040300473045022100b2d526d2a9787e2890ef980ecb95461cf7206d15c0d45339e31c444b796e56970220167cce3447aff1018a9eed00cc499741846c9e071a0319c6ef63f761407c3961
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007130a1b6c00f876415cdf6ac95571e4584bc247815990183bf95c705f928160019ebd2efe0e852c54f3c32d9cca698873a92ebb538486c303e014ce67f83a6fdc3cd362785025fd41c4cb3164c36be93b3bdba4447b2f4783d6e7cbf948b6b91217ac92b44e009f50b2fa814156259a246269708010d704d1ee69c596749c6381d1655d1624c2a3b0b015807c3f047d93eefc4651bf71dd6049b3ee8102e3fd8e2157eb140201678ace9ec284cb9d36281186ca6724fffc8481b0cda9ecf8179358d7593e0c7e7d48b4b5b704354dc724235e1f28997e5019dc6e5241bf4b673af0d8f3986ea0c44e89610ec4dfecc962b7473f4fbc3f916df64bbb5ff90321e