colegiolasalle.edu.mx

Issued by R3

About this certificate

This digital certificate with serial number 04:00:2f:7b:0e:2f:fc:ea:8f:d8:4f:07:d4:17:d5:1f:ee:c1 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=colegiolasalle.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:2f:7b:0e:2f:fc:ea:8f:d8:4f:07:d4:17:d5:1f:ee:c1
Serial Number (int): 348512256383112209296019563299449115504321
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 82:f5:d5:da:52:9b:16:65:43:15:fc:52:02:bb:a5:84:83:6b:f2:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:ee:a3:60:3d:c4:d3:3e:43:c9:43:bd:d0:78:80:1b:4d:7b:ab:82
Fingerprint (sha256): 12:cb:e6:3b:51:75:4b:f4:f9:4f:23:c2:52:88:fd:22:87:71:8e:a8:27:d8:fe:70:fc:6f:a2:10:ef:87:b0:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate colegiolasalle.edu.mx

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for colegiolasalle.edu.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

colegiolasalle.edu.mx
secundaria.colegiolasalle.edu.mx
www.primaria.colegiolasalle.edu.mx

Other certificates including the domain name colegiolasalle.edu.mx

(limited to 100 certificates)
admin.palla.gfusd.net
colegiolasalle.edu.mx
admin.ce.sheldonisd.com
komarek94.org
mssd2.k12.ar.us
academyofthecanyons.net
colegiolasalle.edu.mx
colegiolasalle.edu.mx
colegiolasalle.edu.mx
colegiolasalle.edu.mx
admin.sym.keeneschoolsnh.org
colegiolasalle.edu.mx
admin.avila.ecisd.us
www.johnotynes.org
admin.athletics.sheldonisd.com
plataforma.colegiolasalle.edu.mx
ceca.sheldonisd.com
colegiolasalle.edu.mx
admin.athletics.sheldonisd.com
www.grandville.k12.mi.us
admin.avila.ecisd.us
www.holynamesf.com
colegiolasalle.edu.mx
admin.barrientes.ecisd.us
admin.athletics.sheldonisd.com
secundaria.colegiolasalle.edu.mx
sle.sheldonisd.com
colegiolasalle.edu.mx
academyofthecanyons.net
www.unionsquareacademy.org
admin.avila.ecisd.us
gorena.ecisd.us
www.secundaria.colegiolasalle.edu.mx
www.ciudaddelosninoscr.org
colegiolasalle.edu.mx
sa.snowlineschools.com
admin.bme.snowlineschools.com
admin.barrientes.ecisd.us
admin.ce.sheldonisd.com
colegiolasalle.edu.mx
admin.whe.keeneschoolsnh.org
admin.athletics.sheldonisd.com
academyofthecanyons.net
www.cfhags.edu.mx
samuelgompersms.net
admin.nel.sau29.org
primaria.colegiolasalle.edu.mx
web.euroamericano.edu.mx
admin.aes.lammersvilleschooldistrict.net
sau29.org
admin.ike.iasd.cc
admin.ce.sheldonisd.com
admin.colegiolasalle.edu.mx
academyofthecanyons.net
athletics.rsu14.org
academyofthecanyons.net
cranburyschool.org
colegiolasalle.edu.mx
admin.hilointermediate.com
doe.as
admin.barrientes.ecisd.us
lincoln.tiffin.k12.oh.us
academyofthecanyons.net
admin.athletics.godleyisd.net
colegiolasalle.edu.mx
admin.che.sau29.org
admin.mlb.sau29.org
colonies.sunrisesd.ca
colegiolasalle.edu.mx
colegiolasalle.edu.mx
colegiolasalle.edu.mx
admin.athletics.sheldonisd.com
admin.bn.durand.k12.mi.us
academyofthecanyons.net
admin.avila.ecisd.us
admin.gfusd.net
admin.barrientes.ecisd.us
admin.avila.ecisd.us
colegiolasalle.edu.mx
www.dolemiddleschool.org

Certificate

The complete raw certificate details for colegiolasalle.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348512256383112209296019563299449115504321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 16:39:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 16:39:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'colegiolasalle.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804716929357385870847983976943027614732396115620328248702757975091769971706973448131340674874152607014861114150917307144031372941621059125352524894293364972997351427549447264607790559980959306081099548414546465743707916975301844470006076883322223750070376692767733074616238043380701372909245545950855885135779057609391934780055407606157286288466303414601975408205782140719009557441052187067163831098700742782765188534742146902529578810212295366038239523666347646263008312926542496251586450631938629072937544941566326661106987985616518974830469989167430865876356054808808464872664515311761825851917469591142335391410033812395274652462550030934204316504531098492766402703918579523973359424533994308277084545381994460499540994677454604168739131780826033497941146364091703689847353883280634742434218321664782421973376739051895445400414251252495153454811592412249844811981601155515651226547907812284105757433389571175872213654395603528376365066916897437053125343952283480191309936805534498350571054233904201289724164596678531278277168337473053909292097176670631745559862469110059701649253549104644988533794238370628419987933925022639131083532210168843763234656841335682900462883733451754166182364685486113486576109569099548351392382062753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82f5d5da529b16654315fc5202bba584836bf220
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiolasalle.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secundaria.colegiolasalle.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primaria.colegiolasalle.edu.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001881b58c604000004030047304502201539483bc0945672606c40611c3823289fae9d91541abd84ab69d5ff8fdeb0ec022100eaca91d1845a3e6392992c4936d863bcf53d84fd12731d605ab757afa8e84461007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001881b58c5ee0000040300463044022055d75709662f3fc53aa40c775fe8a967309e0b269b707f4105793707c39c5b34022054da948c56bb3c9df33d7d0557f169ae6676323dc7124c70d431139a70c20569
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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