*.tigo.com.bo

- Millicom International Cellular S.A. -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 35:83:77:de:1a:6a:fa:75:ed:8d:98:9e:ac:3a:e5:a7 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Millicom International Cellular S.A.

Organization: Millicom International Cellular S.A.
Organization unit: Information & Technology
State / Province: Luxembourg
Locality: Luxembourg
Country: LU

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:83:77:de:1a:6a:fa:75:ed:8d:98:9e:ac:3a:e5:a7
Serial Number (int): 71131705868639455557944066784297149863
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 9a:85:72:42:5a:3f:80:cc:7e:03:7d:b9:c1:f0:24:b3:70:8c:87:21
Fingerprint (sha256): 29:89:11:f0:c1:48:79:4f:c8:c4:bf:f4:99:89:53:ca:55:b2:60:dd:c3:cd:54:ed:8a:28:ff:47:16:e5:fb:af

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.tigo.com.bo

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tigo.com.bo

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tigo.com.bo

Other certificates including the domain name tigo.com.bo

(limited to 100 certificates)
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.bo
ayuda.tigo.com.py
knowledge.tigo.com
*.tigo.com.bo
*.tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
salvatuagenda.tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.bo
ayuda.tigo.com.py
*.tigo.com.bo
ayuda.tigo.com.py
*.tigo.com.bo
gis.tigo.com.bo
ayuda.tigo.com.py
*.tigo.com.bo
*.tigo.com.bo
salvatuagenda.tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
tigo.com.bo
*.tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
www.micuenta.tigo.com.bo
*.tigo.com.bo
ha-fp.tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.bo
oneapp-prod-bo.tigocloud.net
testcomunidadweb.tigo.com.bo
login.tigo.com.bo
knowledge.tigo.com
tigomoney.com
giros.tigo.com.bo
ayuda.tigo.com.py
knowledge.tigo.com
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.bo
ayuda.tigo.com.py
tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.bo
ayuda.tigo.com.py
tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
vpn.tigo.com.bo
*.tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.bo
ayuda.tigo.com.py
tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.bo
*.tigo.com.bo
ayuda.tigo.com.py
vpn.tigo.com.bo
money.tigo.com.bo
*.tigo.com.bo
ayuda.tigo.com.py
*.tigo.com.bo
shopping.tigo.com.bo
ayuda.tigo.com.py
*.tigo.com.bo
ayuda.tigo.com.py
oneapp-prod-bo.tigocloud.net
login.tigo.com.bo
ayuda.tigo.com.py
activate.tigo.com.bo
oneapp-prod-bo.tigocloud.net
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.bo
login.tigo.com.bo
ayuda.tigo.com.py
knowledge.tigo.com
knowledge.tigo.com
comunidadweb.tigo.com.bo
ayuda.tigo.com.py
ayuda.tigo.com.py
oneapp-prod-bo.tigocloud.net
login.tigo.com.bo

Certificate

The complete raw certificate details for *.tigo.com.bo in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR4yp2wEzuDGhvpYrFJ3
5juyzir7NsLveK/aJiw3BLP88JUP1Y3srUeX79aHmm/8MuxEOnrcGI8uc2QZrXOV
Z4TmoEhAhzQRUkqRIco31cLmA4OBG742XlUeNMMrP8LdJe0jLAFf5QY/WzoHVSat
Byq+HBdX2zAslfqBROkWXCYercwY/CstmsrUmnA4Oa8rCHmVJbkoCD+vgA7PXNkZ
nhcIvw6CvmbXLyxcNq7HV5Dlq8dm1qUAKktvM5sXR2IB1bv9gnHJy/LudIewS6JP
ohNxK7bGPWCiFh8lDHMYq/O+V+lqn6yqrIzwE/uyygoxSQIx2rJ9jsJs0jUz426K
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71131705868639455557944066784297149863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Millicom International Cellular S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information & Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tigo.com.bo'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24378883981743799305081146074424000884918472687691002757189113971157710841524027253699089206924605311083794625093814077605540496752941319156209498758220968694887788100645245930000132853596015937215881445117534011796671926262176236950499627295363159767840063940291687562501714639914281973736247990614303439642340521323505304363605156948508157745668370195349681924555131149619643520755723159795042069281858632531773467460252452207275927326959413155144304358464923957844464417977215829122532743858503402981920429014196356181205497951788101351527931360048024082299410909730130128185095373307236123943385936159277350554157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigo.com.bo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c52781b5244cee3c28159880574526a6641bdc57505b4e5d0be4000d0b607cda3cd9e6188f5a237792c5fd15208b945f47032ce669dab1261b891fbe5b6f457670ca3b201cd629fae8552ffb60faaeb3f840f1d66836a032bd6a67bf740aaa70ecc2161b55475645898fcc312d40a3b25bbed22b22e781165984f849b17ecc599010adc63069133f6d23a491f693f864fead1c40d202ad0d5c39b2674261fd451693da84126b9ad0ca14859a491816c16f81ee821ccbd437642877e700ffb5ab15219a73d3e18e0c08f53961bc57335d0cab4cbb41dc6438383dd7219061fbcfed0461de2280aeb403c0f53573b5fa70a2e4698fa9846796eb0675e45604e39