geriatriamexicana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:18:a9:1a:cc:62:50:ae:58:d6:c9:4b:e3:b4:22:97:d9 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geriatriamexicana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:18:a9:1a:cc:62:50:ae:58:d6:c9:4b:e3:b4:22:97:d9
Serial Number (int): 328405263592309169525187384556603689834457
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:31:08:38:6d:c8:7b:6a:2e:e4:2c:f5:8b:cb:66:cf:de:90:ea:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:17:e9:cf:b1:a0:38:fd:47:3b:13:eb:f9:f2:1c:d4:d5:3c:ab:87
Fingerprint (sha256): 46:da:4a:82:bd:e1:04:60:56:b9:09:c8:0c:1e:ba:8a:e9:96:e0:53:de:25:77:7f:f6:06:7a:21:9e:bc:a5:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate geriatriamexicana.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geriatriamexicana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geriatriacongresos.com
geriatriacongresos.montemayort.org
geriatriamexicana.com
geriatriamexicana.montemayort.org
mail.geriatriacongresos.com
mail.geriatriamexicana.com
mail.monterreysaludable.com
monterreysaludable.com
monterreysaludable.montemayort.org
www.geriatriacongresos.montemayort.org
www.geriatriamexicana.montemayort.org
www.monterreysaludable.com
www.monterreysaludable.montemayort.org

Other certificates including the domain name geriatriamexicana.com

(limited to 100 certificates)
geriatriamexicana.com
www.geriatriamexicana.com
geriatriamexicana.com
geriatriamexicana.com
geriatriamexicana.com
montemayort.org
montemayort.org

Certificate

The complete raw certificate details for geriatriamexicana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBIddj+tW+Z7f9muJ9Ft
oVr6rjKhF1HLJWycfAITdDkMgQ0CoNgAzNGQpsWPuoXuWW0CkDjHtZcvTDVAbibJ
kAw/sm9iluV02CycvKhOTWZy5k+Vu+WShW8dFPDMPYPOX030IErhit6inYS8/XsT
JSY0JEIDMCD6du+yNMNkL+gMs2l/kak1g7wXbdFyH4q1cjjRT/E8t3rPuLRg18fx
n2tSar4NKA9DkuWcpxB2l6erLXykzjqb/btxuIZN3vIC5PIRy1k1vyZNdpq1ko/J
QZm+6wox/wiKOI4lw8b7Sowu5ZP03Amhvd75VfOc2bfQUIYlON+6d7Hek+TH4Yva
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328405263592309169525187384556603689834457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 07:09:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 07:09:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geriatriamexicana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24246687435117076286254627622645740186067322011175951123085759651599807560163466539945956184591079913971046121312275380529535244360447844528540628200748824325469815880674145990009914929313158167560271031332263257498520195738419222137356501799875715011893123736108453205825679842558648435597961818725030897074780192458233865314846790400670403087222612616576964139192892974574509436372801244340427286480064248643825556782053893549591042018606725030231176081513936029818232553851000726751537128606292923527414439016176250889996185705772581843316778288368505448806613581809386852627607833907153778455120301948321479252507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac3108386dc87b6a2ee42cf58bcb66cfde90eaae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatriacongresos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatriacongresos.montemayort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatriamexicana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatriamexicana.montemayort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geriatriacongresos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geriatriamexicana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.monterreysaludable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterreysaludable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterreysaludable.montemayort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geriatriacongresos.montemayort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geriatriamexicana.montemayort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monterreysaludable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monterreysaludable.montemayort.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bc654d0350000040300483046022100be8d9639db4f08e51bd6dfab8fb14673e8100dd8d77f4b953d657faca2add209022100fec829f54c99f2c6fb24e6e1fb6ae0b2f3295566e91c69466f54511613d2ae07007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bc654ce2c0000040300473045022100c320465c1e4da5f645430f5b6dc60227dc5f2aed389ba8fbd6a7d521b9eb1c65022045bd62b394d2ad8c0b3d390f465e7c3e593015e9a3271585188245c3b41e5591
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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