incentivos-dev.gc.gentera.com.mx

- Compartamos Servicios, S.A. de C.V. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4e:f0:43:44:9b:64:54:d2:88:13:4d:3f:3f:fd:8e:1a was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Compartamos Servicios, S.A. de C.V.

Organization: Compartamos Servicios, S.A. de C.V.
Locality: Ciudad de Mexico
Country: MX

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:f0:43:44:9b:64:54:d2:88:13:4d:3f:3f:fd:8e:1a
Serial Number (int): 104927299274321762015913661494487518746
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 67:9c:7a:58:dc:32:d1:ea:eb:3c:5e:c7:18:dc:5c:70:d4:ff:4f:ff
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 56:11:01:c9:36:60:76:f8:e3:79:d9:2b:c4:cf:67:df:49:89:3b:6b
Fingerprint (sha256): 10:f0:44:60:69:2a:64:4c:33:f2:cc:41:82:9a:f6:8b:f0:95:7f:d1:03:f7:2d:03:e9:57:2a:6c:6b:4c:7d:66

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate incentivos-dev.gc.gentera.com.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incentivos-dev.gc.gentera.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incentivos-dev.gc.gentera.com.mx
www.incentivos-dev.gc.gentera.com.mx

Other certificates including the domain name gentera.com.mx

(limited to 100 certificates)
gdi.gentera.com.mx
comparnet-front-dev.gc.gentera.com.mx
insights.gentera.com.mx
docs-factory-backend-int.dev.cloud.gentera.com.mx
conversational-dev.gc.gentera.com.mx
apilab.gentera.com.mx
incentivos-dev.gc.gentera.com.mx
insights.gentera.com.mx
payments.dev.cloud.gentera.com.mx
int-payments.dev.cloud.gentera.com.mx
imperva.com
imperva.com
consola-incentivos-dev.gc.gentera.com.mx
trivia.gentera.com.mx
inteligencia.gentera.com.mx
gentera.com.mx
extranetfiinlab.gentera.com.mx
www.gentera.com.mx
sac.gentera.com.mx
docs-factory-backend-dev.gc.gentera.com.mx
www.gentera.com.mx
extranetqueretaro.gentera.com.mx
sac.gentera.com.mx
int-master-catalogs.dev.cloud.gentera.com.mx
www.gentera.com.mx
sac.gentera.com.mx
ConsultaAvansoftRemesas.gentera.com.mx
lsweb.compartamos.com
ms-oauth2-api.dev.cloud.gentera.com.mx
extranetfiinlab.gentera.com.mx
vcsetul.gentera.com.mx
inteligencia.gentera.com.mx
localizador.gentera.com.mx
endpoints.dev.cloud.gentera.com.mx
analisis.gentera.com.mx
fiori.gentera.com.mx
inteligencia.gentera.com.mx
vinculacion.gentera.com.mx
cajafco.gentera.com.mx
mastercatalogs-backend.dev.cloud.gentera.com.mx
www.compartamos.com
vcsetri.gentera.com.mx
imperva.com
gdiqa.gentera.com.mx
fiori.gentera.com.mx
geolocation.dev.cloud.gentera.com.mx
sbox.apilab.gentera.com.mx
imperva.com
conversational-socket-dev.gc.gentera.com.mx
correo.compartamos.com
gentera.com.mx
gentera.com.mx
imperva.com
extranetqueretaro.gentera.com.mx
lsweb.compartamos.com
prospeccion-dev.gc.gentera.com.mx
serviciosxperto.gentera.com.mx
extranet.gentera.com.mx
si-incentivos-dev.gc.gentera.com.mx
imperva.com
cajafco.gentera.com.mx
extranetceas.gentera.com.mx
cajafco.gentera.com.mx
comparnet.dev.cloud.gentera.com.mx
imperva.com
portalpersonasprd.gentera.com.mx
imperva.com
gdi.gentera.com.mx
configproduct-int.gc.gentera.com.mx
imperva.com
api.gentera.com.mx
imperva.com
corresponsalesintermex.gentera.com.mx
docs-factory-front-dev.gc.gentera.com.mx
extranet.gentera.com.mx
accessid.gentera.com.mx
api-lab.gentera.com.mx
api-dev.gentera.com.mx
imperva.com
corresponsalesintermex.gentera.com.mx
vinculacion.gentera.com.mx
ao.compartamos.mx
gentera.com.mx
imperva.com
gdi.gentera.com.mx
sip.compartamos.com

Certificate

The complete raw certificate details for incentivos-dev.gc.gentera.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK0cyFwXSqsl+zAZucIv
jSEtigO1tza8dp3/lg8ARDSzJigOytu7qtnvWF3i+kKrv2oMIYK0X9DjQUTrr2DF
ZrEechtbGj9vd2SYNeAUl9iNeHAHQIiHDBJHnLbGibP7fE0Nxz7IZ8z8ECfY2jHT
QjQea0FULXs77CLgh5PbNAcEGvchzNi1T2sA/rpM3bmPqcHyDZeDx7tfH6ZAROUc
5aC4LgwKynfVzhLax6uZlonWbSF5eOTYtXoTMY+XlN2FZWaO7zXeHp7sqyYWfjSh
ZDJq4VQxOpz2AZ5pMN9sDF3V2xUwBMC7o+QWqkJFcyAjDLfbx565xT+CSDG/WKVT
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104927299274321762015913661494487518746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 04:32:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 04:32:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad de Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Compartamos Servicios, S.A. de C.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incentivos-dev.gc.gentera.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24828072695282629149681467770716240557070888322438465807314487955068628752045958559858078358600075908700133097754506198382245584347178547684793767649913742814978251669024008616041338228685785717754527563021032194961772166822572430015622927066005715174872884828640316656082778903512856964624776741299822636596979205755804577387893380947975919419625998389729019167062792628273623364256238634668838523365621095308289069746202788964979877401095673918513375759794651170629757364804106602001639786206929489985252755458486345521947861756254597973575322566308166655224136153470729129526262573480197658562626145701151740613519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							679c7a58dc32d1eaeb3c5ec718dc5c70d4ff4fff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivos-dev.gc.gentera.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incentivos-dev.gc.gentera.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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