tvazteca.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:79:8a:86:67:de:5a:9e:3d:89:f3:23:e3:68:02:e7 was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tvazteca.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:79:8a:86:67:de:5a:9e:3d:89:f3:23:e3:68:02:e7
Serial Number (int): 9935673511621971570874936046568080103
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 18:cc:a6:18:3b:08:21:e1:ea:aa:97:a1:53:c4:35:46:cf:fe:db:f8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 23:05:c1:5e:6c:bf:04:c9:9c:37:ff:e2:b5:97:fd:6d:96:eb:6b:a7
Fingerprint (sha256): 2a:c1:10:29:86:c7:19:4a:5a:13:ce:75:7e:9b:08:e2:d8:8a:75:65:b3:7a:f3:3c:ae:5e:52:67:ce:73:26:5a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tvazteca.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tvazteca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tvazteca.com
www.aztecauno.com
www.plantelazteca.mx
limpiemosmexico.mx
www.aztecanoticias.com.mx
www.aztecadeportes.com
www.redsocialazteca.mx
www.adn40.mx
www.limpiemosmexico.mx
revistacentral.mx
revistacentral.com.mx
redsocialazteca.mx
www.amastv.com
www.aztecanoticias.com
www.revistacentral.com.mx
live.adn40.mx
esperanzaazteca.mx
movimientoazteca.org
www.revistacentral.mx
*.fundacionazteca.org
fundacionazteca.org
www.esperanzaazteca.mx
www.ritualnflfantasy.com
www.azteca7.com
*.movimientoazteca.org
quevivalaselvalacandona.org
*.tvazteca.com
www.limpiemosnuestromexico.com
ritualnflfantasy.com

Other certificates including the domain name tvazteca.com

(limited to 100 certificates)
tvazteca.com
tvazteca.com
*.tvazteca.com
tvazteca.com
tvazteca.com
colosal.tvazteca.com
www.azteca.com
*.tvazteca.com
tvazteca.com
tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
tvazteca.com
secure.tvazteca.com
tvazteca.com
tvazteca.com
*.tvazteca.com
tvazteca.com
*.tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
www.azteca.com
media.tvazteca.com
www.tvazteca.com

www.azteca.com
*.tvazteca.com
correo.onuriscp.com
tvazteca.com
www.ventas.tvazteca.com
tvazteca.com
colosal.tvazteca.com
www.azteca.com
colosal.tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
www.azteca.com
www.azteca.com
tvazteca.com
tvazteca.com
tvazteca.com
tvazteca.com
correo.onuriscp.com
www.azteca.com
tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
tvazteca.com
secure.tvazteca.com
tvazteca.com
tvazteca.com
secure.tvazteca.com
tvazteca.com
tvazteca.com
correo.onuriscp.com

colosal.tvazteca.com
tvazteca.com

Certificate

The complete raw certificate details for tvazteca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxK/UklXyqLwLAU1zHhk
LEy4Kj7dwGuZ5h7hxQ6f2Edv/IniDU9lTw4PX0Cn1PFQ63H/EqgJnlxIjTbKTIib
Qljbk1cGnKSCxNpDDJ9G5ysfYJUUFNr1azdvsx22iipS8J6U0n2gQtVlJy7AgVY8
CON+TJmc4H3aDcxc+PnHnM4lHp3uEpaOUPQ7qQr5FDoOh7+fvfnLzm4MoawmxloS
iFNl62yXeqmLAHjUrgY/rXfGRqDIJ9pC/EICL31wJNbTRK1vC8BgdwrekSNWqaIR
RPk4dnSHPhxnlz2lNdxvtqNofnNxlii5VMIn0rZfVxSnHagnJHQgNGpVsU2abSEx
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9935673511621971570874936046568080103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tvazteca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24120760911031166888946080920655776763008289944612385385662225946611845523836318366249325658415122816048325741788154514527406702026383366281490961581051135565865031658865409885981222620291400716869042531207557446636395057743592847649484768149411441543882596519232698581000535569019199123084194128457522639397277110331365110337245835702636106637587945041982396703007738904999087696665555080640708681064495696631050832667332918952487485145834421945987741758339969832478891626503024201028232668725850003978709441738326479106205703886860710823249418556921819963021750752632655707734370200465970376356303244119704531448307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18cca6183b0821e1eaaa97a153c43546cffedbf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (635 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvazteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecauno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantelazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limpiemosmexico.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecanoticias.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecadeportes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redsocialazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adn40.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limpiemosmexico.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revistacentral.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revistacentral.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsocialazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amastv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecanoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revistacentral.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.adn40.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esperanzaazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movimientoazteca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revistacentral.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundacionazteca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundacionazteca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esperanzaazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ritualnflfantasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azteca7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movimientoazteca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quevivalaselvalacandona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvazteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limpiemosnuestromexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritualnflfantasy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000171090fbcb50000040300473045022100ebd26d67b366581fc42013857d2b81de028b345f91b3d29b0eacbe50e2a1a9d3022032cc50998a90d784fd843fe4294780446b3dca9348654021f3cb292c9b8d5d2e0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000171090fbce900000403004630440220662cf87575b06e19ec0c8f5556fdd7e72cf7240e2f12a68cf4454761608e031e02200ca6136b90bd101700d41e00f3af4b3c916e1e4cfb15147c3ef888d796edbe5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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