kentek.com.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:db:c5:ee:10:83:27:27:ff:cf:9b:29:aa:90:92:45:85 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kentek.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:db:c5:ee:10:83:27:27:ff:cf:9b:29:aa:90:92:45:85
Serial Number (int): 291573834726403078804467941858166996878725
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:5a:d5:f9:1f:a2:14:18:49:1f:0f:5e:33:50:be:36:05:0f:e3:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:49:d9:98:63:0e:99:06:45:06:4a:99:63:b4:bb:73:b0:71:bb:96
Fingerprint (sha256): 06:21:bc:b5:47:fd:25:5c:ef:4a:6b:de:03:d2:bd:59:46:67:6d:21:4c:44:bf:a0:36:3f:e1:4e:85:d7:39:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kentek.com.mx

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kentek.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.kentek.com.mx
autodiscover.liftek.com.mx
cpanel.kentek.com.mx
cpanel.liftek.com.mx
kentek.com.mx
liftek.com.mx
liftek.kentek.com.mx
mail.kentek.com.mx
mail.liftek.com.mx
webdisk.kentek.com.mx
webdisk.liftek.com.mx
webmail.kentek.com.mx
webmail.liftek.com.mx
www.kentek.com.mx
www.liftek.com.mx
www.liftek.kentek.com.mx

Other certificates including the domain name kentek.com.mx

(limited to 100 certificates)
kentek.com.mx
solarvibes.co.za
link.ilikelm.com
eliasterrazas.com
kentek.com.mx
www.popotts.com
admin.realtybulls.com
itfitsmocha.com
kentek.com.mx
kentek.com.mx
kentek.com.mx
eliasterrazas.com
eliasterrazas.com
eliasterrazas.com
eliasterrazas.com
www.notaboo.cz
*.kentek.com.mx
www.andievandy.com
kentek.com.mx
eliasterrazas.com
kentek.com.mx
kentek.com.mx
www.igorbobeldijk.com
www.kentek.com.mx
theholidaystrip.com
eliasterrazas.com
postreschic.com
kentek.com.mx
eliasterrazas.com
kentek.com.mx
www.agentesmart.com
kentek.com.mx
eliasterrazas.com
kentek.com.mx
kentek.com.mx

Certificate

The complete raw certificate details for kentek.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NzIjHgZYtKgqDBdGSs6
zFMnQ1Ov24mHrSdUgIeCLjRhQgA+GnLBoB5AuM6ga+CS4LT6ZodvgOBiDLFRNbW/
Z9HRdA3A+IVeEbgDFtsDGSyIaR6/ZZgAfXP4ASrjpqcO0OweSPEbflASeiw5Z2aZ
rZjlhB3aPOiJsnKWiPTVv2ynMrg3CtMJocnvu12cTdHeqwcnMbcpMCIw9M8odONz
HqVwAuXLe7C7t9o9WgJsNvIxAACpE23G01D5970Q4oSyW5fmZzlmZLqg+Jt6arog
FDV/1Qhg4FwFFtA36zdlYv0IQrH/9WYwzmKhqES9zk8T+Vg2cRt2Cas9SkKsskJg
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291573834726403078804467941858166996878725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 23:53:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 23:53:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kentek.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27376346221676763545846640902711867457058407540253792389014275750592862410256931763559402358466984541805316569456491406994644616964123962870561903745950394896862906357645561779454451383235431016780488537626416565529955068639343129272197744099664332930044959352313039849389224724519138493209590212027031514618055508674982791733055099259423767824012307398442107572555220290555708028748014893897564262492555840698866015863132413479831492757062240581899763244654311692886295754129559593182369773973591692909015035820166164525612804764300073754309418072317766971849853127927251133889384845286202853682420481591302609330291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							755ad5f91fa21418491f0f5e3350be36050fe3a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (352 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftek.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftek.kentek.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ffe3cc45e0000040300473045022004eb19403411c53f1c668d9585eda0622929f707b1f0c4a997b4208e1c842ab00221009cf8b7af83eb24c09a221d1ba75135e7deac72fcc2ed8dade9aa19c65dbaff3c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ffe3cc46700000403004630440220364af915cdb25f3785eb788b0efa1cf4710a477f9ba4e5b2adbc30c632c6fca802206c27c200db06e77985e7672cd37ec4f386d2118faea822ee8f8f0076440d5b35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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