www.epin.tigo.com.sv

- Telemovil El Salvador, SA de CV -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:6f:65:27:75:fb:00:da:ba:a7:66:92:59:ca:2d:08 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Telemovil El Salvador, SA de CV

Organization: Telemovil El Salvador, SA de CV
Organization unit: IT
Locality: San Salvador
Country: SV

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:6f:65:27:75:fb:00:da:ba:a7:66:92:59:ca:2d:08
Serial Number (int): 17858360546282769654199046320037702920
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:1c:de:d2:ab:5d:1a:2a:d0:7e:28:a0:b2:79:47:d0:59:cc:29:59
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): b0:f1:70:84:68:68:d8:60:94:6c:de:e6:70:fb:e0:7c:c3:0f:8f:2d
Fingerprint (sha256): 1f:22:9a:94:59:bb:48:81:6e:fd:83:af:88:ff:24:c3:78:bf:9f:3b:8e:eb:32:3e:e5:3c:60:73:d8:99:4b:79

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.epin.tigo.com.sv

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.epin.tigo.com.sv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.epin.tigo.com.sv

Other certificates including the domain name tigo.com.sv

(limited to 100 certificates)
www.epin.tigo.com.sv
*.tigo.com.sv
ingresoOT09.tigo.com.sv
ayuda.tigo.com.py
smscorp.tigo.com.sv
webmail.tigo.com.sv
ayuda.tigo.com.py
*.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
ayuda.tigo.com.py
sip.sv.tigo.com
knowledge.tigo.com
*.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
smscorp.tigo.com.sv
*.tigo.com.sv
ayuda.tigo.com.py
ofertas.tigo.com.sv
*.tigo.com.sv
login.tigo.com.sv
ayuda.tigo.com.py
ofertas.tigo.com.sv
www.epin.tigo.com.sv
*.tigo.com.sv
rhttps.sv.tigo.com
ayuda.tigo.com.py
*.tigo.com.sv
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ttk.tigo.com.sv
sip.sv.tigo.com
business.tigo.com.gt
ayuda.tigo.com.py
login.tigo.com.sv
ttk.tigo.com.sv
ttk.tigo.com.sv
ttk.tigo.com.sv
business.tigo.com.gt
ayuda.tigo.com.py
webmail.sv.tigo.com
rhttps.sv.tigo.com
ayuda.tigo.com.py
www.epin.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
www.epin.tigo.com.sv
login.tigo.com.sv
rsgprimary.telemovil.com.sv
ayuda.tigo.com.py
ayuda.tigo.com.py
business.tigo.com.gt
ttk.tigo.com.sv
cafeteria.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
ofertas.tigo.com.sv
ofertas.tigo.com.sv
webmail.sv.tigo.com
ayuda.tigo.com.py
sip.sv.tigo.com
tigo.com.sv
*.tigo.com.sv
ttk.tigo.com.sv
ofertas.tigo.com.sv
knowledge.tigo.com
ayuda.tigo.com.py
knowledge.tigo.com
music.tigo.com.sv
ayuda.tigo.com.py
ttk.tigo.com.sv
ayuda.tigo.com.py
ttk.tigo.com.sv
*.tigo.com.sv
sip.sv.tigo.com
ayuda.tigo.com.py
ayuda.tigo.com.py
business.tigo.com.gt
ayuda.tigo.com.py
rhttps.sv.tigo.com
rhttps.sv.tigo.com
business.tigo.com.gt
ayuda.tigo.com.py
ofertas.tigo.com.sv
ayuda.tigo.com.py
www.epin.tigo.com.sv
elearning.tigo.com.sv
rhttps.sv.tigo.com
sip.sv.tigo.com
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.sv
*.tigo.com.sv
ayuda.tigo.com.py
www.epin.tigo.com.sv
rhttps.sv.tigo.com
ayuda.tigo.com.py

Certificate

The complete raw certificate details for www.epin.tigo.com.sv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ3Ya8pu/Dou9gjNUzCo
6uZ9qUzhRye99kWshy/EacPeXFYpK+/FsQMfEhkhKV9HjIdwcogOLdzW3V6JI3fq
haa6zCWYGm5xYl1LfI0lFP5bcj1JE6qXstwUmhJTOfbsAld4gehVVPVv+Brn4jPU
3CyWbF35W2nxp9UmJ/E/lbRRyaROAn4W/5/Bn7jzEoRLv1F3e2KtiRsja9lMUI0E
7LbzoCUV/5nbMhgUjwMjWD5rCHsjhdrXlOIsHcM3HoGgdq7LBS0NBvt5mYbMh28K
1UpYyqB4mKlbc5tIlBJgANW21rTeLgCp+DD0QvB0r9apjELI51C0eJzSc3Ev3/cF
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17858360546282769654199046320037702920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Salvador'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telemovil El Salvador, SA de CV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epin.tigo.com.sv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21285871699457018198514403411889747365968564500832600777977753154850436039194634352365369134558140300783539203347825721281199963006858998257944825921834994628777391976215625654365056665376385586496684688118903973165774370109011677012544626437387683765626231849748810149806005867800653473027323093449275599407621140284996224810174770308575971026115695426861272325285959536776950549618926391298334006821056841560615106283350855346564157830893905713048114124244679217729741900863829755267203319011543828692022064626194523451970207863473496402291361867029623531243430682475198392825855600918095412441620100434680329209201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb1cded2ab5d1a2ad07e28a0b27947d059cc2959
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epin.tigo.com.sv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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