assistente.org

Issued by R3

About this certificate

This digital certificate with serial number 03:d1:92:09:d1:1e:30:e5:79:7a:8f:9d:51:73:ea:fd:b7:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=assistente.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:92:09:d1:1e:30:e5:79:7a:8f:9d:51:73:ea:fd:b7:f4
Serial Number (int): 332649990741228788071387964833563779381236
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:52:3d:73:9a:a0:1a:4a:f3:4a:08:0f:5d:e9:21:f1:0d:cd:8d:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:a0:4b:a9:72:b6:59:8e:3a:0c:6a:44:08:60:5e:1f:25:01:6a:3b
Fingerprint (sha256): fe:f4:80:21:f9:44:4a:9e:00:a3:23:e9:48:2a:4b:0f:e1:d5:55:e5:40:3c:5a:7e:b5:00:fb:4a:f1:94:40:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assistente.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assistente.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assistente.org

Other certificates including the domain name assistente.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for assistente.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332649990741228788071387964833563779381236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 21:04:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 21:04:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assistente.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775839989076615836890767847337264737490386051964570485879045022104407680442756099571151870162945738377622096281612732081504961390286360091311910948600167989969938761973818726863492534519613628955229501950947783674674223480107365605070818063021668314467714712021360083293467296137401816028154415668249664757515546222587017525903462042257127792333457726017220183579460054865339700666856572066600758058766264826395070436169374274290578301010449462517763469220145655354134578938023411468826374057949981107195541468891998877620024102972213721029368324084659755863209459779702712470391059877757160097794375281271095421329920640564085416100315374799294809779435416192734150295852242850264397246825285969251089776766640848748782593597308341417676911963629009415959014803802998959433276767652136842652490300176822076004213411336724516183984346703971884493997066466334567966502530534639580790298790440031155982132992230038947432458031902296977668881126030603889275251545125761904387097227729388378773955382691934593964583247747863860733623731581563635200168892667968427839817981600895014336344799347393158095856306853432574799844302046126902848951015149194731939845007200905935426989908759217063714210602232127922060814659612229956585575225641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5523d739aa01a4af34a080f5de921f10dcd8dc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistente.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c36dcf3e80000040300473045022100e6e4485fe8ee4d93f9033b9895671f18a9c68c06db955bab109a4892e9bf76b202206299f1ac3962adf97c3ecae251743339ac101f42d1fa0d9c1f32a274bc66f4de00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c36dcf4ab00000403004630440220245ea85d9f6cfb7a9554759b84cdc4770ac022a9563d7347f6e548f4e129a65f02205341ca6c7b15aca90aeaae378f4c3c89a4187f74b6d086e094a0d38e8136d73d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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