kanandata.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:2f:46:5d:86:82:3d:d2:a8:6f:2c:80:85:ad:b2:28:1d was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kanandata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:2f:46:5d:86:82:3d:d2:a8:6f:2c:80:85:ad:b2:28:1d
Serial Number (int): 283858333085565641719487466006771565471773
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:b9:17:46:48:49:d3:72:ca:74:cb:08:0c:71:03:c8:24:51:a2:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:63:1f:ee:90:a8:98:a0:ba:53:e5:ac:7d:ea:d1:66:bc:4d:31:b9
Fingerprint (sha256): 38:3a:a2:06:6e:e4:32:41:a0:28:b7:84:0a:47:b7:25:16:ba:d9:f7:be:3a:e1:ee:e3:3c:1a:ae:3c:60:c7:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kanandata.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kanandata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

club19.com.mx
club19.nextlevel.com.mx
isisaqro.com
isisaqro.nextlevel.com.mx
kanandata.com
kanandata.nextlevel.com.mx
mail.club19.com.mx
mail.isisaqro.com
mail.kanandata.com
mail.tecamex.com
marmolenqueretaro-com-mx.nextlevel.com.mx
rokarconstrucciones.nextlevel.com.mx
tecamex.com
tecamex.nextlevel.com.mx
www.club19.com.mx
www.club19.nextlevel.com.mx
www.isisaqro.com
www.isisaqro.nextlevel.com.mx
www.kanandata.com
www.kanandata.nextlevel.com.mx
www.marmolenqueretaro-com-mx.nextlevel.com.mx
www.rokarconstrucciones.nextlevel.com.mx
www.tecamex.com
www.tecamex.nextlevel.com.mx

Other certificates including the domain name kanandata.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kanandata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rLfLPtdHqYQ5iPqXsuW
8T6CpZ5qekjHeKHiC6HtvAUOtl3XV+gHsycdk1JbDaxNcTABfAv0E2BW+tgm2awP
LOGy57uoyAJPvae6NFGcS+87YCrfKqym5ghuV/Mq2lgRcM7WbdQUWBumPZn73cBU
nuV4yIR3oJQf2NCDjCJGGdlVpsD3hZuqrzccsgNObWWodOC4Ev+lmZCqgJ5RlsTm
iXT9FkIGbwQCCivrDN82Toe4UUDS5Lc5uIG5cDXJsAIK6G/6iDPpOzyN8PKnHmT3
qwEj1KH9VZqDxGlits0enytd8WCDJ2UHx7Zh/i4KFlat9+5zR5X/aARh1Ug5Yxd+
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283858333085565641719487466006771565471773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 05:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 05:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanandata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27103202224957267911565117420868871158862619797467902843205217995325320692600754088534139173307031477335649421434392007241404552857744895959249196830420777689348854009062695842076314930668202673728315946105997050582258025790299714546292398210701204999616690255641360704276371225487994905634460582023208160735272845725142617381690316454947007965889597246560448662542349072882517826621857439268891678733949921788746154698226802951439951182964838496485645587337450626731066953469747009221415681566538809623957682433957480449351645409840728292140966730961621782455002263621266424486691015982279111846379289784646270156323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcb917464849d372ca74cb080c7103c82451a235
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club19.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club19.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isisaqro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isisaqro.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanandata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanandata.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.club19.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.isisaqro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kanandata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tecamex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmolenqueretaro-com-mx.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rokarconstrucciones.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecamex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecamex.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.club19.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.club19.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isisaqro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isisaqro.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanandata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanandata.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marmolenqueretaro-com-mx.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokarconstrucciones.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecamex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecamex.nextlevel.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bda8f852b0000040300483046022100f0adf62b2c5a68f6c986a182f4f2d55a31042b99c61fb94037d3180804a4dc4402210085c3c5ee61261e5aa92b3adb23cf58da291e79b0a8220515efd9bf85cb26b4a300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bda8f871c00000403004830460221009029e24eee886210dd82c419059aeb6393041839f2043b7057a0fefaa3345fd5022100bad3d542d593662be0749539d58562c71934c311298c7d5f8492b63c2808dab3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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