conexionrh.com.mx

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 01:ec:6a:57:4d:b0:cb:8c:2f:0d:db:55:b8:ba:bc:31 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=conexionrh.com.mx

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ec:6a:57:4d:b0:cb:8c:2f:0d:db:55:b8:ba:bc:31
Serial Number (int): 2556766906711338938125858380506119217
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 61:04:47:87:2f:20:8b:0c:0f:99:86:78:25:cb:93:84:0a:90:38:34
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 1a:6c:78:f7:97:29:d7:66:ca:a9:e0:5f:f4:c3:e0:c1:00:7c:1f:c3
Fingerprint (sha256): 56:f3:51:25:46:5b:e3:a2:5b:6f:09:6c:04:48:96:ff:07:c0:03:ca:29:b3:a0:4c:e0:29:7f:fe:66:4c:6c:0d

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate conexionrh.com.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conexionrh.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conexionrh.com.mx
www.conexionrh.com.mx

Other certificates including the domain name conexionrh.com.mx

(limited to 100 certificates)
conexionrh.com
tienda.conexionrh.com.mx
conexionrh.mx
haciendacompostela.com
www.haciendacompostela.conexionrh.com.mx
tienda.conexionrh.com.mx
conexionrh.com.mx
conexionrh.com.mx
conexionrh.mx
recluta.mx
conexionrh.com.mx
desk.exltech.com.au
haciendacompostela.com
haciendacompostela.com
www.haciendacompostela.conexionrh.com.mx
recluta.mx
haciendacompostela.com
sss.conexionrh.com.mx
conexionrh.com.mx
conexionrh.com
desk.exltech.com.au
conexionrh.mx
haciendacompostela.com
conexionrh.com.mx
sss.conexionrh.com.mx
haciendacompostela.com
conexionrh.com.mx
sss.conexionrh.com.mx
desk.exltech.com.au
desk.exltech.com.au
conexionrh.com
sni244456.cloudflaressl.com
conexionrh.com.mx
sni244456.cloudflaressl.com
conexionrh.com
recluta.mx
sss.conexionrh.com.mx
recluta.mx
conexionrh.com.mx
conexionrh.com.mx
conexionrh.com.mx
tienda.conexionrh.com.mx
conexionrh.com.mx
haciendacompostela.com
conexionrh.com.mx
haciendacompostela.com
conexionrh.com.mx
tienda.conexionrh.com.mx
conexionrh.mx
tienda.conexionrh.com.mx
haciendacompostela.conexionrh.com.mx
sni244456.cloudflaressl.com
*.conexionrh.com.mx
haciendacompostela.com
*.conexionrh.com.mx
sni244456.cloudflaressl.com
sss.conexionrh.com.mx
desk.exltech.com.au
conexionrh.com
sni244456.cloudflaressl.com
tienda.conexionrh.com.mx
conexionrh.com
conexionrh.com.mx
sni244456.cloudflaressl.com
desk.conexionrh.com.mx
haciendacompostela.com
haciendacompostela.com
haciendacompostela.com
haciendacompostela.conexionrh.com.mx
conexionrh.com.mx
conexionrh.conexionrh.com.mx
*.haciendacompostela.com
support.digitalresetus.com
haciendacompostela.com
www.conexionrh.com
conexionrh.com.mx
conexionrh.com
haciendacompostela.com
conexionrh.com.mx
conexionrh.com
desk.exltech.com.au
conexionrh.mx
conexionrh.com
conexionrh.mx
haciendacompostela.com
haciendacompostela.com
conexionrh.com
tienda.conexionrh.com.mx
conexionrh.com.mx
desk.exltech.com.au
tienda.conexionrh.com.mx
recluta.conexionrh.com.mx
conexionrh.com.mx
haciendacompostela.com
suporte.grupocsc.com.br
recluta.conexionrh.com.mx
conexionrh.com.mx
desk.exltech.com.au
conexionrh.conexionrh.com.mx
conexionrh.com.mx

Certificate

The complete raw certificate details for conexionrh.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHjLOX5UF9gAPJnDMc2a
NCcdaCJ3r+9Vrp2B5tRFdA0UHlDIUFe9HnCq6qKsBb0WhW6lwAgcJVMLs95B5J26
gljvQYJTG40A1sQA2HS7BvYZB8MjewKxsEpEA3PysMzbwLBn6yfHOrl404ukvDdN
duNTncXmm5mqRfWBhJXF4h6TnWaaMy94H3/I7YKHnZX+jcXHWLJ2frYlaqdftMsb
lSKhcHICB4KTB10Bba/ObhG55HHM7ONrRxdtUYAIlP/3ZftFSzrEGNaSnlCyetPY
pzJfoDhmOf1RXq1m0ronAHkF2CI6eloMwFQ41hXzaGKBeRVCi6Fkzo3z7CA6s7LB
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2556766906711338938125858380506119217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conexionrh.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23792366999139536007983561077225276523209474916115280342012548417641101792843546340100009011247467676658229060262349559223392827968318328866210167370351928783745652508173205849594313637006049491912810038617059853204675585403408805585180157228433577877978170010578175322932895321421166609249249003710120935169533538236054796286066349166574021233830111780136277226504777944693776560678455270921581485813743016057494321555040680490021065386194767360281464184281430360693516498087533780316216442972317526769911869790347028372419429204985509010257608192017684525572106302539282629167597295256973100213062122496793427231071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							610447872f208b0c0f99867825cb93840a903834
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conexionrh.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conexionrh.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e04157df8000004030047304502201783c1760f73e586f258d1722932269fa2237b5e07b7f55c3e8e8e2cf7ec2606022100f1f5d105ca73ca22f8387efb1c62b520530a804f13638df88d6e173c860b516c0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e04157dec000004030046304402200d93952d289fefa49c1d2b6768f8af6b6ea040818023ad1b368139975885cc3f02204bc4055ec0715a1407941ccb91da305d6ad878bb45ae2f64f56e18dd08056eff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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