*.oxkutzcab.gob.mx

Issued by R3

About this certificate

This digital certificate with serial number 04:74:b5:2c:b9:13:6a:1c:b4:7f:51:04:76:e2:8e:2a:ec:48 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.oxkutzcab.gob.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:b5:2c:b9:13:6a:1c:b4:7f:51:04:76:e2:8e:2a:ec:48
Serial Number (int): 388162720771952645530326900859015181036616
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:3c:d0:f5:b9:a9:82:83:c3:12:6d:8c:c9:2b:b7:b2:4b:6a:19:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:af:16:f4:55:9a:51:e6:11:e7:a3:5a:87:5f:49:e5:d1:9b:75:8c
Fingerprint (sha256): 30:1b:c9:13:99:21:d4:b3:0a:7a:09:d9:22:5c:d9:8e:f6:19:9a:37:e6:f3:31:6e:03:58:0f:a2:ec:83:6c:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.oxkutzcab.gob.mx

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.oxkutzcab.gob.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gob.mx.gobiernosenlinea.com.mx
*.oxkutzcab.gob.mx
oxkutzcab.gob.mx
www.oxkutzcab.gob.mx.gobiernosenlinea.com.mx

Other certificates including the domain name oxkutzcab.gob.mx

(limited to 100 certificates)
*.gob.mx.gobiernosenlinea.com.mx
*.oxkutzcab.gob.mx
www.oxkutzcab.gob.mx.gobiernosenlinea.com.mx
*.oxkutzcab.gob.mx

Certificate

The complete raw certificate details for *.oxkutzcab.gob.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvb8K1iHH3W2kKAykQoP
w2rJ7XBaU8eD8LgTXThwoOLkwGH3dfq+qF80Px6Ct39vu6XXhnOsSzz+Ype4loSf
z2FJqUpQXA5U/lNNiqCjge6NXc7HaM4dGLTifnvASC0JI2HBZAxhfkv0W5hZtTJg
2Ad0w4NSZW0Ld9kvtsEpfIgf4MrOf17ns0BCLk0WzO9ZpND8L8rGhO7nvw0wgRIq
AUUZ7CU+LcdmWSo7JjJR8PWpAnQKTLoZNjqRj9g2i+RONzB6h+0/EiHKLOWR3lQq
DCDIp71ANp6eHqvynZUaG+nD1laXb09HVv51i0zMOw8yXXsKKnSqOHfKSbsj21df
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388162720771952645530326900859015181036616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 19:12:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 19:12:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.oxkutzcab.gob.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22087257924827391219685049274001205753553263083654792732509896028816967872381394162902906150328698936904376854842160620586980660827332505709786452989454529966835405505973490994947494931625631539491175342867676995215433020828182515463753381077603368212514992842149951069109755412547786350834350411442460330122434930090563388549108286431635940606656576180612836115292885020285140806428779977507802017151945335985951871797981127395823873669668673267302973095946261967251590349317126547631053788249392215211670908287633763374017785996413640502889834536208614515982561317693062146103211628174674897517800588408813254041353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d13cd0f5b9a98283c3126d8cc92bb7b24b6a19aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gob.mx.gobiernosenlinea.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxkutzcab.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxkutzcab.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxkutzcab.gob.mx.gobiernosenlinea.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df158ebf6000004030046304402207bfad41f87a26ab815d353b3e334e38eef630511f899c1e1e66321cdddf84a7802205da74a9ce8d493dd76c105263ee1b27b66114e90263340dbcb18be1514678c77007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df158ec080000040300483046022100e8d4ba51b105c7b80c446803cf576282d7a155653d04e394ce7b4b58c09fbcad02210097cd43ecd059a564a393007b4ddd415618b5138bcc04c5d6f3919d81f3e2a2b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b51ca0fcf1dc03fcd406afbb45e447c587532b4ea5e26517845b742e59029d7e6470574d4aa7b42212c52d23e7aacc86366302694e8d4644b73dd51e49828402a3122a6b6e872bea251d883e40798e207f311e687dd6502337beca2dff3bc6093b918f99168e7428b4770e8ac1be910c04aeab1b6e5f8db781632aa5623f74f32434bfc4db4d5c4d5c38f30770fe458d570340a02286ef11333d42e36a016e26d659b190b13e756c0ea6292d45f704f7890e7972e193ead0774e410d2f99a33e90415aafc9a8dfc38e5d1e5efdcbea867b75990d262a0649e4e0f6c03b647026f7e671ae722bc362c2b809f70042c0553de641f5599f985c7b9a508255220fd