construrama.afirme.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:7d:50:6d:d7:4d:bf:af:4c:5f:b2:99:da:77:94:67:85 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=construrama.afirme.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:7d:50:6d:d7:4d:bf:af:4c:5f:b2:99:da:77:94:67:85
Serial Number (int): 335684984895107886062220302802224237799301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:fe:da:d0:78:be:e5:39:fa:1e:d1:40:e5:bc:ff:87:0c:ba:fe:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:94:a1:76:8d:95:e4:cd:40:27:ab:f0:91:69:96:c0:e2:60:91:b5
Fingerprint (sha256): 04:e7:1a:29:d6:48:75:7f:d4:d0:2c:bb:fa:f6:fd:4b:60:cb:0e:e2:f7:d3:b6:79:4f:df:52:cf:3e:c7:24:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate construrama.afirme.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for construrama.afirme.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bv.sistema.expedienteazul.com
cadastro.sicoobempresas.com.br
construrama.afirme.com
expediente.bluebankinternational.com
expediente.cumplo.mx
expediente.smartlending.mx
expediente.unifin.com.mx
expedienteazul.lendi.mx
expedienteazul.solteroseguros.com.mx
expedientes.eliteempresarial.com.mx
sistema.expedienteazul.com

Other certificates including the domain name afirme.com

(limited to 100 certificates)
construrama.afirme.com
afinet.afirme.com
construrama.afirme.com
afiserviciosdevcdi.afirme.com
docs.360audita.com
construrama.afirme.com
docs.360audita.com
www.afirme.com
afiservicios.afirme.com
construrama.afirme.com
construrama.afirme.com
expedientes.abbeagronegocios.com
apiportal.afirme.com
construrama.afirme.com
expedientes.abbeagronegocios.com
api.afirme.com
docs.360audita.com
www.afirme.com
construrama.afirme.com
www.afirme.com
construrama.afirme.com
www.afirme.com
construrama.afirme.com
construrama.afirme.com
construrama.afirme.com
docs.360audita.com
expedientes.abbeagronegocios.com
serviciosbxi.afirme.com
expedientes.abbeagronegocios.com
docs.360audita.com
expedientes.abbeagronegocios.com
construrama.afirme.com
docs.360audita.com
construrama.afirme.com
afinet.afirme.com
www.afirme.com
construrama.afirme.com
docs.360audita.com
www.afirme.com
docs.360audita.com
docs.360audita.com
construrama.afirme.com
www.afirme.com
construrama.afirme.com
expedientes.abbeagronegocios.com
www.afirme.com
construrama.afirme.com
www.afirme.com
construrama.afirme.com
construrama.afirme.com
afimail.afirme.com.mx
www.afirme.com
construrama.afirme.com
construrama.afirme.com
construrama.afirme.com
www.afirme.com
facturas.afirme.com
docs.360audita.com
docs.360audita.com
expedientes.abbeagronegocios.com
construrama.afirme.com
*.afirme.com
construrama.afirme.com
construrama.afirme.com
expedientes.abbeagronegocios.com
docs.360audita.com
docs.360audita.com
expedientes.abbeagronegocios.com
construrama.afirme.com
construrama.afirme.com
docs.360audita.com
*.afirme.com
construrama.afirme.com
expedientes.abbeagronegocios.com
docs.360audita.com
construrama.afirme.com
construrama.afirme.com
expedientes.abbeagronegocios.com
bv.sistema.expedienteazul.com
construrama.afirme.com
serviciosbxi.afirme.com
construrama.afirme.com
construrama.afirme.com
docs.360audita.com
docs.360audita.com
docs.360audita.com
expedientes.abbeagronegocios.com
construrama.afirme.com
*.afirme.com
construrama.afirme.com
construrama.afirme.com
construrama.afirme.com
afinet.afirme.com
facturas.afirme.com
expedientes.abbeagronegocios.com
afiserviciosqacdi.afirme.com
avaluos.afirme.com
*.afirme.com
docs.360audita.com
construrama.afirme.com

Certificate

The complete raw certificate details for construrama.afirme.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlOcGYzIcrEDNp9dtU+U
HBzn5DJIKRISF/v3Ub6rEyVJk8jAOjsBlMnJWFCzuN4eZlMMm7Gqpl4LQZ7hkY9F
0Vdcj9PH69NgyWQehczfBOa+nlEWJfTS6pzdLXc7aB8YFUqvoQ9NQeep5l87NLk5
VashPGYWGt27amBdwYTmXacOj2btSmAF7rPuX/QlLhxFOOTtDPvPxYFMXZGBYIKo
Dekh5UhK7YyY2hDY4KpKr86f3UGfH03A+s0esaRaUybMUkG1bjBgmaZdbfPn2nFY
isnyufYiopNq70Q0quf+gMpkwxaqjQi/TOCnmFfGobhELwoB+cXOEkEVcA6U7Y0L
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335684984895107886062220302802224237799301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 12:17:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 12:17:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'construrama.afirme.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23016601015520596352116964140410786174447300971297500899273001861966800910542031849448377921869172830530602334277131640501963425282496930269524498917798350149502963194808985256268390340858586374651116152729296969204250930900054744031280484529564758577788561124709021149642700182085042069100154759920239245514304451861705747581227727982663776652248255345206242017834072407161004932780547642253292861828947167306936703835989721463087614275642331642733824520477596456538370487297438975641473010055168806261054462702949268996435123766384526399521665822447473129599150563571295722172581408398407384903981394406341545364343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3fedad078bee539fa1ed140e5bcff870cbafef5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (333 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bv.sistema.expedienteazul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadastro.sicoobempresas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'construrama.afirme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expediente.bluebankinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expediente.cumplo.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expediente.smartlending.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expediente.unifin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedienteazul.lendi.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedienteazul.solteroseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedientes.eliteempresarial.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistema.expedienteazul.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d44850f6a00000403004630440220223c9944e4485c3126b2690bcd674e6cae15017d95ad31fda774cb3a53f48b3102202b9b6dd95ef3acc5d2349438227432bcd7a050b0362c2f24c019d45ec3eba97b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d44850d53000004030047304502205fe93927a3c61b633087dd063b600682fe5b425cbc7e035414546ccc73e108560221008680b58145c75e9471c5078a1b6148d808471f9d984867b28ee55233a611bdbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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