www.cat.mx

Issued by R3

About this certificate

This digital certificate with serial number 04:66:d9:8d:3f:50:06:7f:2b:d1:88:a5:e2:dc:7c:b0:f5:92 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cat.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:66:d9:8d:3f:50:06:7f:2b:d1:88:a5:e2:dc:7c:b0:f5:92
Serial Number (int): 383447121026051158696636934545109112911250
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:54:cd:df:e2:6b:c9:fc:bd:1c:2c:c7:db:c0:f9:51:5d:3b:04:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:5e:92:2c:72:af:6b:96:05:1d:7e:7c:62:86:29:71:3d:60:12:ab
Fingerprint (sha256): 34:70:26:42:8c:a8:52:0b:9a:1b:c1:6c:a2:c4:68:26:3c:c8:a0:69:45:26:6f:12:da:db:84:af:69:3d:b3:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cat.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cat.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cat.mx
www.cat.mx

Other certificates including the domain name cat.mx

(limited to 100 certificates)
cat.tecshopsystems.com
admin.oahornets.org
www.burnet.txed.net
es.luling.txed.net
www.cat.mx
cp.livingstonusd.org
admin.ath.luling.txed.net
admin.garvyschool.org
lgusd.org
toltonacademy.net
www.cat.mx
ads.gesd32.org
www.rmcacsearlyeducation.org
www.cat.mx
rmcacsearlyeducation.org
admin.smith.fhasd.org
cat.mx
admin.ath.luling.txed.net
www.cat.mx
austin-es.weatherfordisd.com
www.garvyschool.org
admin.athlosbrooklynpark.org
amjhs.mcisd.net
admin.ath.luling.txed.net
admin.athlosbrooklynpark.org
www.cat.mx
admin.ath.luling.txed.net
www.comfort.txed.net
www.cat.mx
admin.ath.luling.txed.net
admin.ath.luling.txed.net
turner.wisd.org
admin.berenacademy.org
admin.athlosbrooklynpark.org
fhasd.org
colonies.sunrisesd.ca
johnston.fhasd.org
admin.athlosbrooklynpark.org
www.cat.mx
admin.ath.luling.txed.net
cat.mx
admin.athlosbrooklynpark.org
www.cat.mx
www.cat.mx
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
cat.mx
astaro.cat.mx
admin.ath.luling.txed.net
cat.mx
admin.athlosbrooklynpark.org
ccs.gesd32.org
www.cat.mx
northglenn.gvaschools.org
www.cat.mx

Certificate

The complete raw certificate details for www.cat.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvdm7RNLX6KA8sKhOzVL
3korrMA5Pcfq6XmRGt9KwWJliTS5uDdUzGJEMjnKJoaDJ+d1d7r/+KiXN6DUR6Dn
H1cXtn4hXi8h1CjBTBH+ZmrqqGRuVv5d6ZuWDU1oFwGUdAtwNgmi6id7RSuxtJKk
wpVnuI7FhXDNATA9DUsuarzYAqGgp9t+7UG3gEsmR8QRBWWVrbFU8D8CH8bZbLBT
JZtsSAskEXhvRR9IPE4535xcnUgxcx7xgisYriLPExZgO6lsPmcDlTJRSSnEe/+k
o6MwBYEVLdNi2gL1CB2oc65GjeUjcg0+yBqKXXF0wKh1cAAIx1L4p8mbmIiC80nw
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383447121026051158696636934545109112911250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 12:23:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 12:23:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cat.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23097370004081182069121759724779560241541418749779764447415413162646099901864595367464875943237021414182733906523187172823198847768964692401177159860816898016468921690568550398474461408554945149839925408288124354892837529383674588644397518256594957462510758954017779505032634538121556922701117282139008178875690587101368081201590174421852620401570289667517174167457681493339681000097514173795456149333482066475404762746091915185822688183669643919106183625390106821583284207848868000005486187708190536926270873137304009644853986644161447414563663295688567853776221222856096129319277351281044474108835770977501095522433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3254cddfe26bc9fcbd1c2cc7dbc0f9515d3b0462
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cat.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f585fd2310000040300473045022074088608363b344400a7ec734b9293df62d2ac6631b5d461675876eda258b61b022100ee3c3556e6d06feae72d75d030584450f913e2a9eed53c0109c79b8933844339007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f585fd3310000040300483046022100d08c08e2995076c00f15a4580de2655f4c3c07499dcf990b80f4bb47b0c05d7f022100d141698ec4d915422bd90db98c7873f90dff10695f3971964ead14f1387d10cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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