www.ilumps.nexumlegal.com.mx

Issued by R3

About this certificate

This digital certificate with serial number 03:95:82:0c:07:f7:73:14:de:e6:ff:29:05:94:a5:aa:b4:c2 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ilumps.nexumlegal.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:82:0c:07:f7:73:14:de:e6:ff:29:05:94:a5:aa:b4:c2
Serial Number (int): 312211792575096751851180880194550947820738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:7d:a2:5e:21:cf:cb:16:7e:ad:65:7a:0a:dd:b2:81:df:3c:66:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2b:5d:74:b2:1c:0c:72:bb:6c:4e:1d:d8:4d:2d:9a:c7:80:9f:2c:5d
Fingerprint (sha256): 4f:10:34:a0:10:8b:4d:8e:55:25:43:4b:9d:97:b1:b1:29:85:2c:4c:44:f6:5d:5f:80:54:9e:b0:44:35:b7:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ilumps.nexumlegal.com.mx

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ilumps.nexumlegal.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nexumlegal.com.mx
ilumps.com
www.ilumps.com
www.ilumps.nexumlegal.com.mx

Other certificates including the domain name nexumlegal.com.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ilumps.nexumlegal.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpuMYvyfy2dgIlFZqMzW
Kb+cwnoAtKasFcb2V3gkoEqjC1xM+M6P0UzqkKTZnoCklM25Xi5dFa4An/4Xw35x
5PmsabqpVjBGPIi8CJuwNR7zfxLr6J9VjTeJm96qm0l4+uPrdt9DmPY6Xx8PEQOx
yof8yBSwywlW8WhrAjzc2GvLlZqXFJe/xfPvZxU6ObWCNFaNqwSKN2HuWLicEmM9
n/QNOBpwkmD873ZkZWUeFmSFz20pHEntj+KXhUXjgi5EkWLznVA+KXfibvNYgeri
GX43gDQIXQh7A5M4ihEAKzmbkqsBNFIQnn7iPI03Ik1VnRQZ9Frq0msGYRd3E5ch
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312211792575096751851180880194550947820738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 12:11:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 12:11:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ilumps.nexumlegal.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22042168831732831479545255669576238867653795797570857783784045388062742991478287885491968956541867465704789683020928117878245064947666027809479769683474126207945819015277213127788654281291316284384644553822499949925531975339679036564409605672235253406433478348525038964617585874686128347585808336554916079992766613615112090171363155494267357169124741443354813418225260253113847200937657600934744426302641337971173649585755820609199977576264424835829850474643935005157476151254857768184789230325708357950714678386962958654399399610249090761277963095329712922921003027388325964873087375366656978326327815631614084850093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							037da25e21cfcb167ead657a0addb281df3c66a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nexumlegal.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilumps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilumps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilumps.nexumlegal.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018963fa1df2000004030047304502202a47a41a8a64ae2cf3d2bd534fde9acfb21737585d1bf0823dfeed21abff794c022100a16bca829d768560c0eafabccaa641a622a24a5a39c13ae8301894c138fb9bbf007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018963fa1e12000004030047304502202b5ea84e5ab04a583cf717cb33196de1ef41559778e4bfcc877680c867a459d8022100ea5fe7894f68da1dd2a06622ae17f48851543b16ac8980f5a50f71bb26dd4df5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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