micreditodigital.bancosol.com.bo

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 62:7e:08:80:e9:a1:d8:49:8c:43:e9:7b:e6:ae:b5:b0 was issued on by SSL Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=micreditodigital.bancosol.com.bo

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 62:7e:08:80:e9:a1:d8:49:8c:43:e9:7b:e6:ae:b5:b0
Serial Number (int): 130918745463884440598177690237866522032
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 48:64:59:82:89:d6:41:a9:07:d6:ee:27:b4:5d:c3:46:67:bb:dc:87
Fingerprint (sha256): 81:6b:a6:19:5d:c3:35:1b:14:44:4b:13:92:ef:1d:06:68:97:22:4d:52:8f:42:77:c0:45:86:93:f9:b1:a6:36

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate micreditodigital.bancosol.com.bo

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for micreditodigital.bancosol.com.bo

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

micreditodigital.bancosol.com.bo

Other certificates including the domain name bancosol.com.bo

(limited to 100 certificates)
portal.bancosol.com.bo
ach.bancosol.com.bo
aw.bancosol.com.bo
solmail.bancosol.com.bo
prtcnfhiper.bancosol.com.bo
vws2dmz.bancosol.com.bo
prtcnfhiper.bancosol.com.bo
adfs2.bancosol.com.bo
trnscnfhiper.bancosol.com.bo
vws1dmz.bancosol.com.bo
judis.bancosol.com.bo
sipexternal.bancosol.com.bo
sipexternal.bancosol.com.bo
cmentor.bancosol.com.bo
adfs2.bancosol.com.bo
solmail.bancosol.com.bo
cnf.bancosol.com.bo
fatca.bancosol.com.bo
cnf.bancosol.com.bo
solnet.bancosol.com.bo
fatca.bancosol.com.bo
cmentor.bancosol.com.bo
*.bdbpre.bancosol.com.bo
www.bancosol.com.bo
ach.bancosol.com.bo
solmail.bancosol.com.bo
cnf.bancosol.com.bo
solnet.bancosol.com.bo
solmail.bancosol.com.bo
servicios.bancosol.com.bo
testapppre.bancosol.com.bo
www.bancosol.com.bo
solnet.bancosol.com.bo
judis.bancosol.com.bo
www.bancosol.com.bo
fatca.bancosol.com.bo
solmail.bancosol.com.bo
www.bancosol.com.bo
servicios.bancosol.com.bo
aw.bancosol.com.bo
testwap.bancosol.com.bo
www.bancosol.com.bo
adfs2.bancosol.com.bo
testapppre.bancosol.com.bo
*.bdb.bancosol.com.bo
servicios.bancosol.com.bo
www.bancosol.com.bo
testapppre.bancosol.com.bo
sipexternal.bancosol.com.bo
servicios.bancosol.com.bo
testapppre.bancosol.com.bo
aw.bancosol.com.bo
www.bancosol.com.bo
adfs2.bancosol.com.bo
adfs2.bancosol.com.bo
solmail.bancosol.com.bo
servicios.bancosol.com.bo
solnet.bdb.bancosol.com.bo
cnf.bancosol.com.bo
www.bancosol.com.bo
solmail.bancosol.com.bo
fatca.bancosol.com.bo
solmail.bancosol.com.bo
aw.bancosol.com.bo
aw.bancosol.com.bo
solmail.bancosol.com.bo
portal.bancosol.com.bo
micreditodigital.bancosol.com.bo
solnet.bancosol.com.bo
sipexternal.bancosol.com.bo
sipexternal.bancosol.com.bo
judis.bancosol.com.bo
adfs2.bancosol.com.bo
cnf.bancosol.com.bo
trnscnfhiper.bancosol.com.bo
testapppre.bancosol.com.bo
vqrtest.bancosol.com.bo
portal.bancosol.com.bo
solmail.bancosol.com.bo
wo.bancosol.com.bo
sipexternal.bancosol.com.bo
cnf.bancosol.com.bo
solnet.bancosol.com.bo
judis.bancosol.com.bo
cvp.bancosol.com.bo
testwap.bancosol.com.bo
aw.bancosol.com.bo
testapp.bancosol.com.bo
servicios.bancosol.com.bo
portal.bancosol.com.bo
solmail.bancosol.com.bo
solmail.bancosol.com.bo
cd.bancosol.com.bo
solmail.bancosol.com.bo
testwap.bancosol.com.bo
ach.bancosol.com.bo
solnet.bancosol.com.bo
solmail.bancosol.com.bo
solmail.bancosol.com.bo
testwap.bancosol.com.bo

Certificate

The complete raw certificate details for micreditodigital.bancosol.com.bo in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdTFyJhvnIFXCP4lLydV
xWU30di5TJWIBtFn8WEM1nI2L3HC/DvhBm30vT3WYDspgclS/JZ4YH5FqKdPEi6D
udf+3wEBRXzwHR6VABA+CgXyIWzazDdPiXKTk5IphiWvAOeVGqAjizrRt4ia1tHL
f9O2pNd0RbSBiQa/OVrOYC4xodveIH6wglDdlUr9wz/FhgTScmfmTTfxiyO7rS+r
3ikZIiC3Ayj8G2h6SaRW6StvZdOjaayc8j8kC8kDtrdkViURJn3rCias9aSpc+du
viySCcOfrgGZjzK8fbXWiYhAg/3bmECxrzwVaNFeu7v9gDq1B8uSHmWwLezmEHaY
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130918745463884440598177690237866522032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 16:23:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-19 16:23:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'micreditodigital.bancosol.com.bo'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20934242395060391156744198672748288493216702303533603916319402815006681440135812603923580151653642236090355350590814911536177668594648481070489091171740158783628839617305569871560190324940180892796787049848558001893384047545261673097872823150223065812177646413193390360710270003492462856216008993948905404685389102894705717616773289930771989183053974142031905622537161459805954380475274147222936758382270752539899238275557975003245339838640274783555944502771959829809432139221169562493952580851836503467232363800533580858173110902829864340971795477148932968334101989723926460397402291046044822544525744875621383051377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micreditodigital.bancosol.com.bo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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