www.vivaaerobus.com

- Aeroenlaces Servicios, SA DE CV -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:f9:38:4a:fe:d6:93:2b:c8:ab:1a:ca:31:17:e8:6f was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Aeroenlaces Servicios, SA DE CV

Organization: Aeroenlaces Servicios, SA DE CV
State / Province: Nuevo Leon
Locality: Ciudad Apodaca
Country: MX

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:f9:38:4a:fe:d6:93:2b:c8:ab:1a:ca:31:17:e8:6f
Serial Number (int): 3952479666035431989978266266011953263
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8a:a6:b2:97:32:49:f3:fe:ed:d7:e2:45:bf:17:6c:a3:12:8d:c7:c8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b7:a0:73:a5:70:87:36:82:ef:81:ee:09:46:96:38:0b:6d:b6:72:51
Fingerprint (sha256): 37:66:57:37:54:e4:89:7a:f0:08:91:eb:ed:60:6a:80:66:a2:4a:96:9f:f2:78:e1:5f:f1:21:1c:f6:d0:f1:3a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.vivaaerobus.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vivaaerobus.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vivaaerobus.com
api-loyalty.vivaaerobus.com
api.vivaaerobus.com
beta.vivaaerobus.com
content.vivaaerobus.com
static.vivaaerobus.com
viaja.vivaaerobus.com
vivaaerobus.com

Other certificates including the domain name vivaaerobus.com

(limited to 100 certificates)
s2.ct.cartrawler.com
tls.automattic.com
adfs.vivaaerobus.com
uniform.vivaaerobus.com
www.vivaaerobus.com
leapfrog-ssl-44.gcs-web.com
autobuses.vivaaerobus.com
status.vivaaerobus.com
sni37348.cloudflaressl.com
sni37348.cloudflaressl.com
sni37348.cloudflaressl.com
www.vivaaerobus.com
braze.vivaaerobus.com
www.vivaaerobus.com
notifications.vivaaerobus.com
leapfrog-ssl-44.gcs-web.com
sni37348.cloudflaressl.com
sni37348.cloudflaressl.com
tls.automattic.com
leapfrog-ssl-44.gcs-web.com
vivaaerobus.com
leapfrog-ssl-44.gcs-web.com
leapfrog-ssl-44.gcs-web.com
*.vivaaerobus.com
sni37348.cloudflaressl.com
sni37348.cloudflaressl.com
leapfrog-ssl-44.gcs-web.com
leapfrog-ssl-44.gcs-web.com
leapfrog-ssl-44.gcs-web.com
sni37348.cloudflaressl.com
leapfrog-ssl-44.gcs-web.com
s2.ct.cartrawler.com
autos.vivaaerobus.com
s2.ct.cartrawler.com
apps.vivaaerobus.com
vivaaerobus.com
tls.automattic.com
sni37348.cloudflaressl.com
www.vivaaerobus.com
vivaaerobus.com
notifications.vivaaerobus.com
sni37348.cloudflaressl.com
notifications.vivaaerobus.com
s2.ct.cartrawler.com
*.distil.us
sni37348.cloudflaressl.com
vivabus.vivaaerobus.com
*.vivaaerobus.com
autobuses.vivaaerobus.com
sni37348.cloudflaressl.com
www.vivaaerobus.com
sni37348.cloudflaressl.com
autobuses.vivaaerobus.com
leapfrog-ssl-44.gcs-web.com
s2.ct.cartrawler.com
vivaaerobus.com
www.urustoko.com
sni37348.cloudflaressl.com
soporte.vivaaerobus.com
s2.ct.cartrawler.com
s2.ct.cartrawler.com
3f65c374d705.vivaaerobus.com
*.distil.us
sni37348.cloudflaressl.com
www.vivaaerobus.com
gamma.vivaaerobus.com
*.distil.us
leapfrog-ssl-44.gcs-web.com
s2.ct.cartrawler.com
*.distil.us
www.vivaaerobus.com
tls.automattic.com
www.todd.expert
pwr.vivaaerobus.com
www.websiteunderdemolition.com
*.mobileapp.vivaaerobus.com
paquetes.vivaaerobus.com
sctvb.vivaaerobus.com
ri.vivaaerobus.com
asr.vivaaerobus.com
sni37348.cloudflaressl.com
s2.ct.cartrawler.com
delta.vivaaerobus.com
tls.automattic.com
sni37348.cloudflaressl.com
www.vivaaerobus.com
www.vivaaerobus.com
sni37348.cloudflaressl.com
sni37348.cloudflaressl.com
viajes.vivaaerobus.com
sni37348.cloudflaressl.com
*.vivaaerobus.com
sni37348.cloudflaressl.com
tls.automattic.com
ri.vivaaerobus.com
vivaaerobus.com
asr.vivaaerobus.com
sni37348.cloudflaressl.com
sni37348.cloudflaressl.com
leapfrog-ssl-44.gcs-web.com

Certificate

The complete raw certificate details for www.vivaaerobus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE14K6vUi2mtyJtnW7XO0xnHUxgL08
VZ8kstotBvuQxbysaBCf7hpo2rBt5sGxK8sUuA1Yfwr8hgd1zVIDl25Wbw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3952479666035431989978266266011953263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nuevo Leon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad Apodaca'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aeroenlaces Servicios, SA DE CV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vivaaerobus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d782babd48b69adc89b675bb5ced319c753180bd3c559f24b2da2d06fb90c5bcac68109fee1a68dab06de6c1b12bcb14b80d587f0afc860775cd5203976e566f
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aa6b2973249f3feedd7e245bf176ca3128dc7c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-loyalty.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaja.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivaaerobus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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