charofil.mx
Issued by R3
About this certificate
This digital certificate with serial number 03:ce:ce:34:0f:8a:2d:ea:47:4d:1a:1d:f9:8b:c4:7a:e7:60 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=charofil.mx
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ce:ce:34:0f:8a:2d:ea:47:4d:1a:1d:f9:8b:c4:7a:e7:60Serial Number (int): 331709116662746240426719322289224887756640
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f7:61:af:bc:b7:8f:cd:96:4e:c9:1c:8c:a7:86:d1:ac:0c:ca:13:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b5:dd:b2:10:c1:62:6f:38:6a:fd:5f:cd:6b:1c:98:79:0c:0d:ec:00
Fingerprint (sha256): 0d:73:4a:9f:1b:45:2b:39:e1:be:24:ce:7b:73:a8:1f:84:6c:2a:92:49:c1:a5:78:ad:bf:e7:4b:e3:b8:bb:2b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate charofil.mx
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for charofil.mx
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
charofil.mx
www.charofil.mx
www.charofil.mx
Other certificates including the domain name charofil.mx
(limited to 100 certificates)
mail.charofil.mx
laura.charofil.mx
charofil.mx
intranet.charofil.mx
charofil.mx
config.charofil.mx
mail.charofil.mx
laura.charofil.mx
config.charofil.mx
charofil.mx
config.charofil.mx
charofil.mx
laura.charofil.mx
charofil.mx
cliente.charofil.mx
charofil.mx
cliente.charofil.mx
charofil.mx
laura.charofil.mx
config.charofil.mx
config.charofil.mx
laura.charofil.mx
charofil.mx
cliente.charofil.mx
mail.charofil.mx
mail.charofil.mx
cliente.charofil.mx
mail.charofil.mx
laura.charofil.mx
charofil.mx
mail.charofil.mx
intranet.charofil.mx
intranet.charofil.mx
charofil.mx
charofil.mx
charofil.mx
tienda.charofil.mx
intranet.charofil.mx
charofil.mx
tienda.charofil.mx
tienda.charofil.mx
tienda.charofil.mx
tienda.charofil.mx
config.charofil.mx
intranet.charofil.mx
tienda.charofil.mx
charofil.mx
charofil.mx
cliente.charofil.mx
cliente.charofil.mx
mail.charofil.mx
charofil.mx
tienda.charofil.mx
laura.charofil.mx
charofil.mx
intranet.charofil.mx
charofil.mx
config.charofil.mx
mail.charofil.mx
laura.charofil.mx
config.charofil.mx
charofil.mx
config.charofil.mx
charofil.mx
laura.charofil.mx
charofil.mx
cliente.charofil.mx
charofil.mx
cliente.charofil.mx
charofil.mx
laura.charofil.mx
config.charofil.mx
config.charofil.mx
laura.charofil.mx
charofil.mx
cliente.charofil.mx
mail.charofil.mx
mail.charofil.mx
cliente.charofil.mx
mail.charofil.mx
laura.charofil.mx
charofil.mx
mail.charofil.mx
intranet.charofil.mx
intranet.charofil.mx
charofil.mx
charofil.mx
charofil.mx
tienda.charofil.mx
intranet.charofil.mx
charofil.mx
tienda.charofil.mx
tienda.charofil.mx
tienda.charofil.mx
tienda.charofil.mx
config.charofil.mx
intranet.charofil.mx
tienda.charofil.mx
charofil.mx
charofil.mx
cliente.charofil.mx
cliente.charofil.mx
mail.charofil.mx
charofil.mx
tienda.charofil.mx
Certificate
The complete raw certificate details for charofil.mx in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISA87ONA+KLepHTRod+YvEeudgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MDMwMDI1MjFaFw0yMzExMDEwMDI1MjBaMBYxFDASBgNVBAMT C2NoYXJvZmlsLm14MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Cyl HtIcrh+khGF4aPlMQYmlZvXThXdeXwpclcW5sp98oidfCGq25tDq+f8w5uIEE7aU gpCvaItnjOqB6SuMmvgNOvC8PlRc4c90s9/1IIW1HjruWXpCEQ+vnbXwIgzYVf9q d8VmEc45bTgfXffhzoRVrxNsKtufJYF6zYUyA9B9E1NgpRrdzg2AenSfkYRYfryA EbSnEukQvc50DmOrP2lIx9tFh8PiFCW+mZ0nSE0ANzUvqQKNV3aAfc202k3qwd9T FM2QEMvMsUin1BLhaVTodW3bR2GoIv4sR85H7D7x6rLdlm6rqCN2YgKDRL6nVXzP xFPf03HW9CROmP9UBGDiaxrt8uswZJ3Wxxz9wq0O7oTzf4gB/K5bJ+SlsbpwgpGL dFKFnhXoi6TlWiLZEEF9geKm4bC4EKa9um0KVW1n6ig/VeCPiQOc3DQV8wwO3Hko AIZsgWaAXcCi35cDIpwtWJsTNd5VSRu7K5XY2I+Ig+vRj4KxSWX6n1/c6MIMBdmg r3zgarrKL9wVqUze/YSkt0bkqKR89HypTRPFSpk+oFbS6fIjVqHG8lGea5dPL6Qc o5nvY2Zn1rQhpmlyjJG2W29Ni4wTX7cAavWLjrmdjzDEvRazL411S+mdI1AvmglO BXt5SNsAn8Iiesg8OsaH/0OivObODUALg3L7NwkCAwEAAaOCAh8wggIbMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQU92GvvLePzZZOyRyMp4bRrAzKE50wHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wJwYDVR0RBCAwHoILY2hhcm9maWwubXiCD3d3dy5jaGFy b2ZpbC5teDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABibj/1hgA AAQDAEgwRgIhAJuKI6lnvglqlRzba7PWZ31pcvqgUgWqmL0h2dEKKCioAiEA7r9w 1PhDvdSCEdOxyjBGB5+pLcT1UCkhn+AK7UTpqTcAdgDoPtDaPvUGNTLnVyi8iWvJ A9PL0RFr7Otp4Xd9bQa9bgAAAYm4/9YWAAAEAwBHMEUCIQCFWbK7wntJmwaBthJ/ dQXQgF/4YQwyFdJ08KU6adsNUAIgIwc6L++9OW3MqmJxRaT4voL14+Om8nq9aAJK JgkogLowDQYJKoZIhvcNAQELBQADggEBAAHwxhEQXBjp++dJtZ3ChHvp2QcCj9u7 FC2tKeaCaPEDE1xI31/vxF/UwmCCg2pdc5qiezXII/wzAuJ7PZIs4BdNX1WSAR2V 8v2iRVJTTko9TCNZnX1u8tr2Ibv0xOBeYCiIFncVls69rxb4Luw4iwUDyEI2Fi2A WGBv7VazT+PZR5tM1GbtfWsi0zjkA/CyH1d4TWY5i/MzaxFizGcbqsyfhqX92DMk pasGftmYisPXFIKnAL98xjhQtLOscCkjJjBAPD1MmYXZ+5RLRxeqnxmX/3xIxw0v mj/M6dFDaVmNInOT9YRV6YGvY9+IdnITiNrn1epRvF8VaJ4RitZv4xA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1CylHtIcrh+khGF4aPlM QYmlZvXThXdeXwpclcW5sp98oidfCGq25tDq+f8w5uIEE7aUgpCvaItnjOqB6SuM mvgNOvC8PlRc4c90s9/1IIW1HjruWXpCEQ+vnbXwIgzYVf9qd8VmEc45bTgfXffh zoRVrxNsKtufJYF6zYUyA9B9E1NgpRrdzg2AenSfkYRYfryAEbSnEukQvc50DmOr P2lIx9tFh8PiFCW+mZ0nSE0ANzUvqQKNV3aAfc202k3qwd9TFM2QEMvMsUin1BLh aVTodW3bR2GoIv4sR85H7D7x6rLdlm6rqCN2YgKDRL6nVXzPxFPf03HW9CROmP9U BGDiaxrt8uswZJ3Wxxz9wq0O7oTzf4gB/K5bJ+SlsbpwgpGLdFKFnhXoi6TlWiLZ EEF9geKm4bC4EKa9um0KVW1n6ig/VeCPiQOc3DQV8wwO3HkoAIZsgWaAXcCi35cD IpwtWJsTNd5VSRu7K5XY2I+Ig+vRj4KxSWX6n1/c6MIMBdmgr3zgarrKL9wVqUze /YSkt0bkqKR89HypTRPFSpk+oFbS6fIjVqHG8lGea5dPL6Qco5nvY2Zn1rQhpmly jJG2W29Ni4wTX7cAavWLjrmdjzDEvRazL411S+mdI1AvmglOBXt5SNsAn8Iiesg8 OsaH/0OivObODUALg3L7NwkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 331709116662746240426719322289224887756640 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 00:25:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 00:25:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'charofil.mx' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865596010059675110929578730833111364463010010063923271305861661722514800816636270281111781158572218614557543752674681074989317930039187967538942405636496865756334167255266629008474320354464060603511553512768703446250115205127776274839494737977948576736188590862234313526740532578118747642764050737700289836383788791040810277262119788733966231584833244390397941082316555689228528130018167846089779268148321195150660964516961958684372740212628480619982630656796417084883887447461852481934767379166284333920159860997175930966141299701907966961128219257902294739561786004230979939209288697934157758845542844214718036868228190030487232661839554300668143828625809609690914371717716644478848655694021066650132806279766277707067761182727626981609650366519995757882606656284526945835975242959804742869535136251560162468107579158774920456836960139254675024165040999716555177332782341645488344755156162966539893003798355840000950652397342150881310093214021879586394467267340768524575595203063788415047221459664164784158533406423569745287051786504530990935239762873406969627976911120940042035684534080167004872729860321852121896190970649725439447433541637300330275989500878491669816996965640657067535352460145892030481225401796675878934439212809 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f761afbcb78fcd964ec91c8ca786d1ac0cca139d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charofil.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charofil.mx' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189b8ffd61800000403004830460221009b8a23a967be096a951cdb6bb3d6677d6972faa05205aa98bd21d9d10a2828a8022100eebf70d4f843bdd48211d3b1ca3046079fa92dc4f55029219fe00aed44e9a937007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189b8ffd61600000403004730450221008559b2bbc27b499b0681b6127f7505d0805ff8610c3215d274f0a53a69db0d50022023073a2fefbd396dccaa627145a4f8be82f5e3e3a6f27abd68024a26092880ba . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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