openpay.mx

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:c4:b3:c1:41:33:5b:57:e8:1c:cc:f6:d0:0a:ed:5d was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=openpay.mx

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c4:b3:c1:41:33:5b:57:e8:1c:cc:f6:d0:0a:ed:5d
Serial Number (int): 6338248029945520820960167215648927069
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 11:80:a7:b6:e3:38:59:03:c3:b8:29:2c:d1:f3:34:d6:4b:6d:f9:eb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): fe:f0:4d:aa:5e:0d:3e:b6:9e:d2:7b:50:97:23:d1:00:53:e5:fb:1e
Fingerprint (sha256): 6f:e3:8f:27:35:e3:bf:94:b1:41:9d:dc:8e:b8:ed:2a:38:43:4c:60:29:54:98:ce:dc:86:59:e9:c7:31:68:fc

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate openpay.mx

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openpay.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openpay.mx

Other certificates including the domain name openpay.mx

(limited to 100 certificates)
status.sandsiv.com
foxtrot.status.descartes.com
status.ivey.ca
status.sandsiv.com
san-37-s12.tlsprovisioning.exacttarget.com
status.sandsiv.com
tls.automattic.com
marketing.openpay.mx
tls.automattic.com
status.sandsiv.com
*.openpay.mx
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
www.openpay.mx
status.sandsiv.com
systemstatus.clinisys.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
systemstatus.clinisys.com
tls.automattic.com
status.sandsiv.com
*.openpay.mx
status-namer-gtassurancetool.gtil.gt.com
marketing.openpay.mx
status-namer-gtassurancetool.gtil.gt.com
leapstatus.gtil.gt.com
status.sandsiv.com
status.sandsiv.com
*.openpay.mx
marketing.openpay.mx
status.sandsiv.com
status.plataformasintese.com
systemstatus.clinisys.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.etosoftware.com
*.openpay.mx
status.sandsiv.com
*.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
status.ivey.ca
san-37-s12.tlsprovisioning.exacttarget.com
status.sandsiv.com
status.etosoftware.com
tls.automattic.com
status.openpay.mx
status.sandsiv.com
status.ivey.ca
san-37-s12.tlsprovisioning.exacttarget.com
tls.automattic.com
status.sandsiv.com
status.plataformasintese.com
*.openpay.mx
marketing.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
statuspage.e2open.com
openpay.mx
*.openpay.mx
status.sandsiv.com
leapstatus.gtil.gt.com
san-37-s12.tlsprovisioning.exacttarget.com
status.sandsiv.com
status.sandsiv.com
status.openpay.mx
status.sandsiv.com
status.sandsiv.com
san-37-s12.tlsprovisioning.exacttarget.com
status.wilsongirgenti.com
marketing.openpay.mx
status.extrinsec.com
www.openpay.mx
marketing.openpay.mx
status.sandsiv.com
tls.automattic.com
statuspage.e2open.com
status.sandsiv.com
*.openpay.mx
status.sandsiv.com
foxtrot.status.descartes.com
marketing.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
status.tesseract.co.uk
foxtrot.status.descartes.com
marketing.openpay.mx
openpay.mx
foxtrot.status.descartes.com
status.extrinsec.com
status.plataformasintese.com
status.sandsiv.com
status.extrinsec.com
sdesk.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
status.plataformasintese.com
*.openpay.mx

Certificate

The complete raw certificate details for openpay.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qq+CIUekytttMxUkDnR
DKHsK+aUmZSDSCR7SVgZWIn/22tn+pmA3D6B9Qv0s0gCGrz/qrYVi8Iq3ZjQzkMz
hIJuDshi21cmaTEeYnlXuF+FBerPq7pHbPYM51yO4uIREBMJMSx/B1WHeG372bvP
B5m+h8aB54pT/hxdXDSMzzC66l+gUR2YH5Mw2670zWJgmSbl7X/ssm5NAkoiY22X
JdPiicUfPg3JERmzdHlgERrlhxWZTOj8I8EX0kiWSpuHyhLEUxuMrDVcOdIMwZvU
xB9ybhcP48WwBZ8YqHvCUQ9ixbH6CYBl4ZtPblgxtJ42rgL8GId7e3crT1/Qyl66
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6338248029945520820960167215648927069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openpay.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27903962631691218650503605625962964830064617718813527904031532766126753684418145108403875538701309209662029214406387613152110991881626411962543126634178254621063738380525278487402316610527387916165929926147407190641787325363822106189570766031849679071767607442426798301535600262178261483606921910518832883425615163333741085359002484175331771178128703915476530013486610227367446027638964044121987223814936010614277899787748729406127021606221472490677975306200177570875444608485141876834037551041101951206525816619823924529054942214989258478331978486340223080246928651044174232415657181991975752282285905221772415777513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1180a7b6e3385903c3b8292cd1f334d64b6df9eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openpay.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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