www.coppel.com

- COPPEL, S.A. DE C.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:9b:84:5e:72:af:f3:34:ef:54:d6:73:bc:bd:dd:de was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

COPPEL, S.A. DE C.V.

Organization: COPPEL, S.A. DE C.V.
State / Province: Sinaloa
Locality: Culiacan
Country: MX

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:9b:84:5e:72:af:f3:34:ef:54:d6:73:bc:bd:dd:de
Serial Number (int): 11441314740361185276593950006139805150
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 52:f5:36:7d:18:25:2d:d3:f9:84:4c:4b:c3:fa:32:0d:ab:f6:97:d0
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 1f:df:0e:23:77:b3:87:89:08:2b:0a:8c:6d:00:ef:c3:8d:da:c0:8f
Fingerprint (sha256): 4f:39:93:62:24:7f:d4:a2:08:26:b1:00:8c:3b:08:e3:a5:ea:9d:f7:d6:1e:7e:87:62:99:7a:a7:5f:35:be:c7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.coppel.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.coppel.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.coppel.com
administrador.coppelpay.com
api.coppelpay.com
apikraken.coppel.com
babycolors-staging.coppel.com
blog.coppel.com
cdn1.coppel.com
cdn2.coppel.com
cdn3.coppel.com
cdn5.coppel.com
checkout.coppel.com
checkout.coppelpay.com
conveniosdev.coppel.com
conveniosqa.coppel.com
coppel.com
coppelar-staging.coppel.com
credito.coppel.com
dev01auth.coppel.com
dev02auth.coppel.com
dev03auth.coppel.com
dev04auth.coppel.com
dev05auth.coppel.com
dev06auth.coppel.com
dev07auth.coppel.com
dev08auth.coppel.com
dev09auth.coppel.com
dev10auth.coppel.com
dev11auth.coppel.com
dev12auth.coppel.com
dev13auth.coppel.com
dev14auth.coppel.com
dev15auth.coppel.com
dev16auth.coppel.com
dev17auth.coppel.com
dev18auth.coppel.com
dev19auth.coppel.com
dev20auth.coppel.com
eva-staging.coppel.com
evl-staging.coppel.com
fashionmarket-staging.coppel.com
img.coppelpay.com
juridico-staging.coppel.com
kraken.coppel.com
login.coppelpay.com
mesaderegalos.coppel.com
micrositio.zuum.mx
neocity-staging.coppel.com
owa.coppel.com
prdgcp.coppel.com
prodauth.coppel.com
prodlive.coppel.com
proveedores.coppel.com
qaauth.coppel.com
record-staging.coppel.com
recordhome.mx
refill-staging.coppel.com
sas.coppel.com
sdk.coppelpay.com
search-prdgcp.coppel.com
search-staging.coppel.com
search.coppel.com
search2.coppel.com
seguro.coppel.com
seller.coppel.com
smail.coppel.com
sportline-staging.coppel.com
staging.coppel.com
staginggcp.coppel.com
starhaus-staging.coppel.com
startravel-staging.coppel.com
testadmin.coppelpay.com
tucredito-staging.coppel.com
tucredito.bancoppel.com
universidad.coppel.com
universidad2.coppel.com
www.babycolors.mx
www.coppel.club
www.coppel.com.ar
www.cumplimientogrupocoppel.com
www.evatuestilointimo.com
www.evl.mx
www.fashion-market.com.mx
www.fashion-market.mx
www.fashionmarket.com
www.fashionmarket.tienda
www.fashionmarket.tv
www.lojascoppel.com.br
www.neocity.mx
www.recordhome.mx
www.refill.mx
www.sportline.mx
www.sportlinemexico.com
www.starhaus.mx
www.startravel.mx
www.zuum.mx
www2.coppel.com
www2.coppel.com.ar
zuum-staging.coppel.com

Other certificates including the domain name coppel.com

(limited to 100 certificates)
pcissl001.insnw.net
lqpzdi.coppel.com
ci-usw2.oregon.delivery.aimatch.net
ssl6.ipaper.io
pcissl001.insnw.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
pcissl001.insnw.net
ssl6.ipaper.io
ssl7.ipaper.io
ssl6.ipaper.io
ssl5.ipaper.io
static.wingify.com
www.coppel.com
pcissl001.insnw.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
pcissl001.insnw.net
ci-usw2.oregon.delivery.aimatch.net
static.wingify.com
ci-usw2.oregon.delivery.aimatch.net
ik.imagekit.io
ssl6.ipaper.io
viajes.coppel.com
pcissl001.insnw.net
pcissl001.insnw.net
ssl5.ipaper.io
ssl6.ipaper.io
ci-usw2.oregon.delivery.aimatch.net
ssl7.ipaper.io
pcissl001.insnw.net
ci-usw2.oregon.delivery.aimatch.net
pcissl001.insnw.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ssl5.ipaper.io
ssl1.ipaper.io
reservaciones.coppel.com
links.coppel.com
ssl7.ipaper.io
ssl7.ipaper.io
ssl5.ipaper.io
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
bigdata.coppel.com
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
static.wingify.com
pcissl001.insnw.net
ssl6.ipaper.io
ci-usw2.oregon.delivery.aimatch.net
ssl7.ipaper.io
ssl6.ipaper.io
pcissl001.insnw.net
pcissl001.insnw.net
ssl7.ipaper.io
ci-usw2.oregon.delivery.aimatch.net
www.fashionmarket.com
prod.49.slot.cdn.salesforce-communities.com
ci-usw2.oregon.delivery.aimatch.net
ik.imagekit.io
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
execution-ci360.coppel.com
ssl6.ipaper.io
ssl7.ipaper.io
pcissl001.insnw.net
pcissl001.insnw.net
ssl7.ipaper.io
ssl7.ipaper.io
pcissl001.insnw.net
ci-usw2.oregon.delivery.aimatch.net
reservaciones.coppel.com
ssl6.ipaper.io
ssl7.ipaper.io
pcissl001.insnw.net
ssl6.ipaper.io
ssl6.ipaper.io
ssl7.ipaper.io
ci-usw2.oregon.delivery.aimatch.net
ssl6.ipaper.io
pcissl001.insnw.net
ssl7.ipaper.io
pcissl001.insnw.net
ssl6.ipaper.io
ssl6.ipaper.io
ssl6.ipaper.io
static.wingify.com
pcissl001.insnw.net
viajes.coppel.com
ssl6.ipaper.io
ssl7.ipaper.io
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ssl6.ipaper.io
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net

Certificate

The complete raw certificate details for www.coppel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEvX+YYtqNzO2LNLHMfz9+FAwQAu3C
y4wSQLhBDr8pyWzlC7TfUa331vUPdr0CfiJvNyMNQgfBc9iiK0LFXXE4mw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11441314740361185276593950006139805150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sinaloa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culiacan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COPPEL, S.A. DE C.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.coppel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004bd7f9862da8dcced8b34b1cc7f3f7e140c1002edc2cb8c1240b8410ebf29c96ce50bb4df51adf7d6f50f76bd027e226f37230d4207c173d8a22b42c55d71389b
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52f5367d18252dd3f9844c4bc3fa320dabf697d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administrador.coppelpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.coppelpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apikraken.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babycolors-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn5.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.coppelpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conveniosdev.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conveniosqa.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppelar-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credito.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev01auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev02auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev03auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev04auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev05auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev06auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev07auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev08auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev09auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev10auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev11auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev12auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev13auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev14auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev15auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev16auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev17auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev18auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev19auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev20auth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evl-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionmarket-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.coppelpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juridico-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraken.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.coppelpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesaderegalos.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micrositio.zuum.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neocity-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdgcp.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodauth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodlive.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proveedores.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaauth.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'record-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordhome.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refill-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.coppelpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-prdgcp.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search2.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguro.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seller.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smail.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportline-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staginggcp.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starhaus-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startravel-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testadmin.coppelpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucredito-staging.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucredito.bancoppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universidad.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universidad2.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babycolors.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppel.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumplimientogrupocoppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evatuestilointimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evl.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashion-market.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashion-market.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashionmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashionmarket.tienda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashionmarket.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lojascoppel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neocity.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordhome.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refill.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportline.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportlinemexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starhaus.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.startravel.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zuum.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.coppel.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuum-staging.coppel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00854b9c9d55bfe8a9bb56d1794c9827542cdde385ca60c09fe16d53889f8cfc8b748c69486af7d6fbc87e6a3e7ca9faab20ba6ace0eb6e4410033d823090f0f477441801535c8b0e58e993c60547edc9c911ceb5932a156abe8fb69b9f085b01233ad91dc039b1bf0c51bb904f365aa5fe6042e662028f62adaa01e4466381f9128b28125072de5913f757673007cfbaf1f9715b99e53fcd3e689ad5d13ba9bf7df3b40fa09e2a98f88b3a17739a1a118ee4993d969580abc015948129ab034a124f82d8775b37272f77ac37eb0f0d9d6ff60283695e4884b2abdd4fa4de224204d1219aec18e62e76652eb4bd7605b0e9a67b715ba7d75e05d7063c6e6337ad7