zone100.cepi2.edge-cdn.com.ar

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b8:c5:e8:7e:07:3f:43:62:30:c4:f4:10:4c:96:dd:69:f9 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zone100.cepi2.edge-cdn.com.ar

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b8:c5:e8:7e:07:3f:43:62:30:c4:f4:10:4c:96:dd:69:f9
Serial Number (int): 411324164324692258585778928566602617940473
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 66:12:16:1c:b8:a1:4a:7d:5e:92:7f:d9:a3:65:1e:de:cf:f6:0b:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:3c:16:e9:bd:f7:f9:a1:b4:b5:9f:01:ae:c7:17:c6:6c:45:d1:f6
Fingerprint (sha256): fd:3f:5c:8f:b0:ec:c4:47:fc:52:45:c6:63:2f:3b:8d:62:61:3b:bb:de:6d:8c:95:87:e3:1b:fd:41:3d:99:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zone100.cepi2.edge-cdn.com.ar

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zone100.cepi2.edge-cdn.com.ar

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agrotv.downloads.edgetech.com.ar
artear.edge-access.net
cdn.adserver.agrositio.com
cdn2.agrositio.com
iframe.statics.space
o.epa.avstreaming.net
statics.avstreaming.net
statics2.vod.avstreaming.net
statics3.vod.avstreaming.net
www.peugeotargentina.com.ar
zone100.cepi2.edge-cdn.com.ar

Other certificates including the domain name edge-cdn.com.ar

(limited to 100 certificates)
zabbix.edge-cdn.com.ar
zabbix.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
static.americatv.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zabbix.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zabbix.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zabbix.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar

Certificate

The complete raw certificate details for zone100.cepi2.edge-cdn.com.ar in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk4LGNr5zT4iUuzZXeb4
e1DZgEgdzq1bxTVGI2iverlAlpsJPa7u9oCvnMnF2wUXFTI7KyY/JnN3HPKINcG0
zoDzeYgws6A5vmkdbOR0BXT5G042aFxzW9YbE7dbG45ginaZZl8GaQHEWDQ17XwO
J5mMiYquvtsLr6PF3TVBEQOHlPOaB9gnY1P8y4/f4CnTcZK5iN32ch9hsPKBbA+6
M/Gn05HBAUGmCsnrtAp/gAP+Niu2bUpQZNR8dNf7L2lsGu4KpjqauPuYrX6XgutP
KZDbQKYAJkqqnJCfZr7GYnqjw3gM9CrEn7UaRpLG0FT+1zQq/aasWX8z6vt6N6Cw
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411324164324692258585778928566602617940473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 19:23:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 19:23:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zone100.cepi2.edge-cdn.com.ar'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21498996453476161779775453867477387908498965706958754755011232491678693569011139392559196279182152606720707870706312399912469849578230075952481793535662562874446464320585271551358511510679847703107541646254871954693392979788377924134454568966812641599988387062983912112369997509495167815642446005427699129966970583517165253857944540332047483829288107046167027152253657357774725176278848168671779608029702025397497475139692254559799963710964132689093594031760362628217038752406922628276811691884953276566179555453209295038412132493286027483841660320356481039524887323895747064899800786107017336547129687210283841400861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6612161cb8a14a7d5e927fd9a3651edecff60bea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrotv.downloads.edgetech.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artear.edge-access.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.adserver.agrositio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.agrositio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iframe.statics.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.epa.avstreaming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.avstreaming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics2.vod.avstreaming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics3.vod.avstreaming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peugeotargentina.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zone100.cepi2.edge-cdn.com.ar'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f86d37880000004030047304502210090b6731b97af2990a76b4db1044db9ac9236165bbc0a3486f241144de7fa2ca902206da97b9fce05a3e0d0796ea3c4b1068245af8ce9964d2242aa068eaa9757027f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f86d378a800000403004630440220391a7f48e7809209c13a6b4345a1400b2938b3343a65850f4fa3c2762faa21cc02207215ed0d664b293603ae305ab51e11dd852977d308e3e27716ccd2dd96324ec4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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