umich.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:79:c0:1f:55:86:ea:98:fd:96:22:60:00:b6:84:30:4a:64 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=umich.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:c0:1f:55:86:ea:98:fd:96:22:60:00:b6:84:30:4a:64
Serial Number (int): 389878684595561853626672333110757664246372
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 72:9d:c7:c4:b9:29:db:56:24:a3:17:0e:4e:3e:3a:e4:3b:c6:a0:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:67:93:a4:bb:4c:03:77:09:b3:41:cf:fc:94:96:27:b6:7c:60:0e
Fingerprint (sha256): 10:73:43:06:a1:b1:17:84:d8:31:7a:5c:ce:3b:8e:26:6f:bc:20:b7:3f:1d:1a:c9:84:48:dc:1c:1f:a4:df:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate umich.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umich.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

umich.mx
www.umich.mx

Other certificates including the domain name umich.mx

(limited to 100 certificates)
pidcb.umich.mx
siiaapp.siia.umich.mx
www.conservacion.tortugamarina.umich.mx
contaduria.ced.umich.mx
epmorelos.umich.mx
www.mcif.fismat.umich.mx
contaduria.ced.umich.mx
www.mcif.fismat.umich.mx
culturanicolaita.umich.mx
rges.umich.mx
revistauaricha.umich.mx
contaduria.ced.umich.mx
pimcb-foro.umich.mx
geociencias.umich.mx
www.ciac.umich.mx
asesoria.qfb.umich.mx
derecho.ced.umich.mx
inceptum.umich.mx
webapp.siia.umich.mx
cic.umich.mx
atenea.umich.mx
cursos.ced.umich.mx
geoquimica.umich.mx
realidadeconomica.umich.mx
iim.umich.mx
www.muhna.umich.mx
artes.umich.mx
diac.umich.mx
uplzc.umich.mx
paricutin.umich.mx
www.med.umich.mx
telefonia.ccpiu.umich.mx
difusioncultural.umich.mx
derecho.ced.umich.mx
www.5ert.umich.mx
epmorelos.umich.mx
www.exporienta.umich.mx
fim.umich.mx
inicit.umich.mx
www.epler.umich.mx
13ariipn.umich.mx
mindinganimals4.umich.mx
derecho.ced.umich.mx
devenires.umich.mx
reloj.ced.umich.mx
zeus.umich.mx
pimcb.umich.mx
rfcca.umich.mx
13ariipn.umich.mx
www.cic.cn.umich.mx
milenaria.umich.mx
artes.umich.mx
reloj.ced.umich.mx
inceptum.umich.mx
ininee.umich.mx
uplzc.umich.mx
artes.umich.mx
rnee.umich.mx
vinculacion.umich.mx
webapp.siia.umich.mx
www.culturafisica.umich.mx
www.geografiaeconomica.umich.mx
mdc.fcca.umich.mx
biologicas.umich.mx
www.cic.cn.umich.mx
www.diac.umich.mx
correo.ced.umich.mx
cic.umich.mx
geociencias.umich.mx
www.cic.cn.umich.mx
vetzoo.umich.mx
agrobiologia.umich.mx
cimexus.umich.mx
www.conservacion.tortugamarina.umich.mx
filosoficas.umich.mx
rnee.umich.mx
www.isaacarriaga.umich.mx
geoquimica.umich.mx
rnee.umich.mx
epmorelos.umich.mx
paricutin.umich.mx
mdc.fcca.umich.mx
paricutin.umich.mx
devenires.umich.mx
vinculacion.umich.mx
alum.siia.umich.mx
umich.mx
exconvento.umich.mx
www.zorros.umich.mx
www.conservacion.tortugamarina.umich.mx
realidadeconomica.umich.mx
devenires.umich.mx
moodle.ced.umich.mx
geociencias.umich.mx
artes.umich.mx
secgral.umich.mx
posgrado-letras.umich.mx
webapp.siia.umich.mx
sabermas.umich.mx
difusioncultural.umich.mx

Certificate

The complete raw certificate details for umich.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UU32nTCUaE80Ftkl7F7
oFM55sKNzmo4U2AkPLBQmmkB3UKshVd3il9lj8NKTPmXR7rx9PD47iaO/lFz9l9j
YoywsCjB6anit0jRyrJFPVcUt/XIlXbMYANLU8RN5Kr3iBZsfUQAzt/WPxoFifBo
BQRTThblfJAgHQOOi6+Efvd/6A1HPaG4y/6ORnkciEfM98WeLK2YchAhrMcse1df
TP4ZaFok0ReKuOAr6mdzYIuX3Grs9JvJJYTOJtQPYnk6e5LSHZA7T60TfLeM8DDK
n0aVoCWq3aKcJOjB9/zI8GhfynGZQgXicvJI2wnPLRzIjoUonDFcLpb6LJ7s+VJS
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389878684595561853626672333110757664246372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 18:13:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 18:13:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umich.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26922891713056231196097089624943874925751288408736089100274945069486456573586031165853371027922213755984377012885251318384224655359646632236447314385013647779968387869904174226700952671676516178110059792290432007504243870934324101579555291109919297338467549678992511725635227427092298794798267225977256277844713372471334517868932550392609214411079496286705270634619175059947934455174115518076670171150564542091607842943742073533560695190055516282786544924874058336839314078844632308899065920379122889059678851003237674668308352344857588783723396222532968240180325940911879834667573966774243077639527464711465162920587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							729dc7c4b929db5624a3170e4e3e3ae43bc6a04c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umich.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umich.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bf70dbe920000040300473045022041453f86ae0fa281ddfcda58570da3bec7a9ca5e4395c93f0b3cc00e283c00c1022100a8393d5d9cc260dca6e3aac465294aa8d4e4b339a64613430cf16d2759e425b6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bf70dc079000004030047304502204ad34ff51012fc6cd671d365a4a2e924d9db0d82ff739cf46b85c74fa73a2fbe022100bcfc4492b7e2b628aef9574c1379ce5f8b486a5de38408024c34a1517e92f0a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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