iberogast.es

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:84:e5:dd:bc:b5:15:b0:e4:c1:90:bb:94:cd:21:bf:8d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iberogast.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:84:e5:dd:bc:b5:15:b0:e4:c1:90:bb:94:cd:21:bf:8d
Serial Number (int): 421105939509988552644221666421451398430605
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 63:95:fe:74:85:57:ee:3c:9b:c3:b8:6e:d3:56:1f:7c:ba:27:19:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:d2:37:be:42:6b:22:e6:45:d7:f2:ae:eb:60:a5:2c:75:ed:ac:6e
Fingerprint (sha256): fd:76:98:d4:d2:43:16:81:35:c7:11:d9:7c:ed:9d:db:14:c3:ec:7c:91:c0:c6:ac:dd:76:13:de:11:7a:ba:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate iberogast.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iberogast.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iberogast.es

Other certificates including the domain name iberogast.es

(limited to 100 certificates)
www.iberogast.es
www.iberogast.es
sanssl20.bayer.com
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
iberogast.es
www.iberogast.es
iberogast.es
iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
sanssl20.bayer.com
www.iberogast.es
www.iberogast.es
iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
sanssl20.bayer.com
www.iberogast.es
iberogast.es
www.iberogast.es
www.iberogast.es
sanssl20.bayer.com
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
www.iberogast.es
sanssl20.bayer.com
www.iberogast.es
www.iberogast.es
www.iberogast.es
sanssl20.bayer.com
iberogast.es

Certificate

The complete raw certificate details for iberogast.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421105939509988552644221666421451398430605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 01:09:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 01:09:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iberogast.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818086675429451637412640345173627026218439230609010394659642304414011516024330959640527708616490931214788931215405233438619101886733199264908817133948134752499688321825182087690775636132156851009923351507227730162421679920434882273745208437286470948935982490164806287137864992182727837344529004989503305178450966993582502790009961538220234266424835012715274401525495687332188861457666459371024708738263723190790698156471657750263596177019689401869667588620780389549443787505625597826429576720791463137498855710017067170788464251440517550941204727553267534168532121763378516641226265354674636103023610376654687842171989124090437641424707336071427809307057892101387346497782645292478499810308635474676858596472548122658068298069600203064480240810428810971912830434971587207295922586048910871757191688565022376563125759034810926492159277084814596715731390207039259884803051656380066632607601747040564749287700151129911106896561213167848397677141751103312385231391452369891875430809492154471793135342225519423322016952542535586459742651089876387331128296372210817985314591765741464909684057195685557274539172830262890230781250371748090303863590210932572860763708696296271197427934443572516481056533819787727734507165598192999665155664927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6395fe748557ee3c9bc3b86ed3561f7cba271972
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iberogast.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187bb530ffd000004030047304502210099a05cc2362be2513601b392918d863ba221ccd7e89ddf4fdf08396f8063a29402205f6e149bb948c6e9bd08e2070c3fdf91c686ba643164fec529fbb34b7025be8f007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187bb53100700000403004830460221009d3b43bff4a3047f524200468eab054d738f52a17dd35b4e1f5d5e4ce23dadde022100a1259d880de15b48f80a4114b9665615916298e49b5c8e6aa18ac071a3964d9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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