ipefh.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:30:7a:11:a0:21:77:08:32:89:8d:b9:77:94:a0:a8:03 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ipefh.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:30:7a:11:a0:21:77:08:32:89:8d:b9:77:94:a0:a8:03
Serial Number (int): 284880777874327737300283120478966423529475
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:17:65:7c:32:05:9d:37:9d:f9:b3:eb:72:f5:66:89:f7:b1:5a:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:fe:f4:11:f3:30:02:d3:ef:20:07:4a:ec:44:3c:72:e3:6b:e1:16
Fingerprint (sha256): 30:e1:84:d8:16:82:69:9b:01:06:c3:26:d0:a8:7b:95:16:d8:f3:5b:d8:27:db:67:7a:6b:11:99:1e:dd:80:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ipefh.edu.mx

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipefh.edu.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeropuerto.ipefh.edu.mx
calimaya.ipefh.edu.mx
cdn.ipefh.edu.mx
ipefh.edu.mx
metepec.ipefh.edu.mx
toluca.ipefh.edu.mx
www.ipefh.edu.mx

Other certificates including the domain name ipefh.edu.mx

(limited to 100 certificates)
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
admin.aeropuerto.ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
schoolforthedeaf.wvsdb2.state.k12.wv.us
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
admin.aeropuerto.ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
phs.pusdatsa.org
ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
admin.aeropuerto.ipefh.edu.mx
sni157847.cloudflaressl.com
preschool.castaicusd.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
admin.adultschool.uusd.net
sni157847.cloudflaressl.com
ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
admin.aeropuerto.ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
admin.aeropuerto.ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
admin.aeropuerto.ipefh.edu.mx
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
sni.cloudflaressl.com
sni157847.cloudflaressl.com
sni157847.cloudflaressl.com
ipefh.edu.mx
koepsell.solake.org

Certificate

The complete raw certificate details for ipefh.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlatO1fLvmwTDVrNykf59
ZZkm5OumgRpQEIWYRpdjO/WlBjCWQf3QP81U266fVtHfMFwGHI6Rd/jRmMDjHNRQ
R+GwqqDLIuKwIAGok0K3b4SeY6imlqYzKmSsDHw1a2jhpBGzpkP/x7d62uSWXLGo
4MHI1b36GD/f6r/brWNqoc76X8oL9Tdl/b4loalguTpL0vnn+7GlHD41pJVvetoA
9yE7vfDFUYDLqJiGfx84ruTvlM40A0lTEx1khNCJateOjiXAJHIFCREtwO/0avX9
85PIScbXugTciCdOhFIfibGORY37ThqZCCmhn6Ikaqzfk19aOpiO/7K4hylBJ/d7
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284880777874327737300283120478966423529475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 12:47:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 12:47:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipefh.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18893982539554399549909937821490498773017272732250209366046926969868627624494823582755072813454577287365555416295893321722090560970444379540475249937599725328147180325367690675873565379907088360056925218482149732126495561763701271568293602554535004678493672324190088102719850339478817243991060130890244121309822652049163306265473861760023213897907435250166041289028604243822980950025356280846056539978380967650453376482704223065100266199300147359613616090644063460447506981357116742118186828178832790077305975552120240322457643248208237812854016567756346015200409115417303302684226038553728502446723352847952287070977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9917657c32059d379df9b3eb72f56689f7b15a87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeropuerto.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calimaya.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metepec.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toluca.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707c9a18a10000040300473045022100add9839f289d8716ae14f1367af5dddf5d9594a159dba85b5d06f3dc9ad9efae0220665f5646523fdc2458111d720aafebe82c44b059cab6461d5313085eedca4f8f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707c9a18c70000040300483046022100d3bd4db1cbb73004a260527a83c311e09b8a99593e3d7ef29c62571fe97b1d45022100cc181e6fab087897ac2faca04833a49cf8358f1b5a54491cd0354446fd2c90cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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