da21.xpress.com.mx

Issued by AlphaSSL CA - G2

About this certificate

This digital certificate with serial number 11:21:4d:a7:48:da:38:a9:a4:da:2a:4a:13:6a:40:7e:3c:66 was issued on by AlphaSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=da21.xpress.com.mx,OU=Domain Control Validated,C=US

AlphaSSL

Organization: AlphaSSL

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:4d:a7:48:da:38:a9:a4:da:2a:4a:13:6a:40:7e:3c:66
Serial Number (int): 1492241398095188743263861158308741396708454
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 08:c4:ba:6f:f9:27:7b:3f:44:9e:36:59:78:aa:32:8e:8e:17:8d:c3
AuthorityKeyId: 14:ea:19:55:f0:0e:0d:32:c6:1f:74:33:b7:8e:66:1a:4c:12:31:1e

Fingerprint (sha1): b8:48:9f:0b:2d:ff:fd:10:bb:90:0f:38:a0:c4:04:7f:b7:3a:be:48
Fingerprint (sha256): 01:5b:ba:36:37:a4:0c:cc:57:4b:38:f9:84:92:8e:5e:4b:6a:86:44:76:1f:4c:e3:80:89:1c:b1:eb:b0:a3:9a

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphag2.crt

Revocation information

CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphag2.crl

Check the revocation status for certificate da21.xpress.com.mx

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for da21.xpress.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

da21.xpress.com.mx

Other certificates including the domain name xpress.com.mx

(limited to 100 certificates)
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xlcp18001.xpress.com.mx
da21.xpress.com.mx
incapsula.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xtcp17001.xpress.com.mx
sni134338.cloudflaressl.com
da17.xpress.com.mx
da32.xpress.com.mx
xpcp19011.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
xpcp16009.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp17001.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp17002.xpress.com.mx
cl01w23.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
cl02w06.xpress.com.mx
xsda19014.xpress.com.mx
incapsula.com
xsda19012.xpress.com.mx
sni134338.cloudflaressl.com
cl01w08.xpress.com.mx
sni134338.cloudflaressl.com
xsda19012.xpress.com.mx
xpress.com.mx
xpcp16016.xpress.com.mx
sni134338.cloudflaressl.com
xpcp19015.xpress.com.mx
sni134338.cloudflaressl.com
cl01w28.xpress.com.mx
da19.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp18012.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni.cloudflaressl.com
xpcp18012.xpress.com.mx
incapsula.com
da34.xpress.com.mx
incapsula.com
xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp19009.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xmcp16002.xpress.com.mx
cl01w01.xpress.com.mx
incapsula.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
*.xpress.com.mx
sni134338.cloudflaressl.com
vega.xpress.com.mx
xpcp16016.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
da30.xpress.com.mx
cl02w02.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
xlcp16002.xpress.com.mx
incapsula.com
xpress.com.mx
win64.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
xmcp17001.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com

Certificate

The complete raw certificate details for da21.xpress.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszxIE2gLeV6GN8C3Oad0
0rEciOl5E5F4kXtfo6JRK/lMszl+tzXj5UeiuIAKm8zB2JOkbi+/+3BEE1+lxdpx
jHbKkkGuUHVG8LRdc5Jbpw5m2xWltgywaq6RP43TKi0JlhItPbFjjPrV7o0Z9dZs
WSqrXhMjHaBIFGo6i7GQaEIVU0PgZZyy50BB+M2RLvuKM9dgNMRMKIAWFH4vTcvF
Dh91bz8aD49xul8VWmY14nDBJvC7eYR4gw6Z9TBXOqz7muq5n2YNy88HccDGjySU
l85YPNX7lCksDOGUK7kxdcY0ssuWVLnw7PxPy9Vmdq/l9Iv+CtwEVEykqhT1fbcA
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492241398095188743263861158308741396708454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-14 01:42:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-15 01:42:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'da21.xpress.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22626382527216441175355613895928426925223671451146430791242758896852512737797546697135334655446215561008262374544893751463908846204296493495986779750041480104156237573505172162032804394619615367375941791964682102427731434982705199293258544528806033171942255480068858304962198148093470154200002745669004558827503117908334207918860408805960479273623521553131886968811953469387676202111259580121147349645724215089821253788925150822717868012826687193533403734189033381823507462247269799992382735581884756498936367266500923377712177200867788296671394509925083022009310633699105612892406895839720491287829566482949739053097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da21.xpress.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphag2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08c4ba6ff9277b3f449e365978aa328e8e178dc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14ea1955f00e0d32c61f7433b78e661a4c12311e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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