*.cofiasa.com.mx

- Abastecedora de Fierro y Acero S.A. de C.V. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0c:4c:ea:99:22:31:06:8b:19:a1:33:1d:6d:5a:22:f6 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Abastecedora de Fierro y Acero S.A. de C.V.

Organization: Abastecedora de Fierro y Acero S.A. de C.V.
State / Province: Chihuahua
Locality: Chihuahua
Country: MX

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:4c:ea:99:22:31:06:8b:19:a1:33:1d:6d:5a:22:f6
Serial Number (int): 16350108727005515147166844066792612598
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fa:e5:a1:f2:08:17:fb:3b:cf:9b:cc:f0:9c:cf:83:f2:0c:87:e8:9e
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): ec:bc:4e:a3:93:b1:b1:d1:58:78:1c:c7:11:41:0b:b6:dd:d5:4e:7f
Fingerprint (sha256): 86:a9:e9:ef:50:86:a4:40:6e:e4:c9:7c:0d:38:b3:e8:f8:0b:f5:83:53:53:53:cd:51:65:44:ab:12:7f:07:ef

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.cofiasa.com.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cofiasa.com.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cofiasa.com.mx
cofiasa.com.mx

Other certificates including the domain name cofiasa.com.mx

(limited to 100 certificates)
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
www.cofiasa.com.mx
cofiasa.com.mx
www.cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
*.cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
*.cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
mail.cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx
cofiasa.com.mx

Certificate

The complete raw certificate details for *.cofiasa.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16350108727005515147166844066792612598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chihuahua'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chihuahua'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abastecedora de Fierro y Acero S.A. de C.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cofiasa.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 632957471866885207941140934637819258477010371305569320668613964999442496070400481179612971841391241237797369718788826504793681496593407069440909251204184190590490145987520455849295309097420057464515884351049758622542402353628008156558948655181682579843933917288727557349310848066929182758818830137316167835568294042701155144513208646531012962388205840091838956372565970482155290867146932843192433230224335407309565297944285201059807167179913305455842999999750054903692016527966663437996278203383392543420766130746425259571191833099121679122615807834486899426143477730477112221523152887791073352805777971749725199418407321438764790179232419685000299459093179541095531457396011488332150360167712304764513640331270571648781166985060135396207539825123548008629733634584234552579768398050596015700370232742713775983016779235457190382720020402984311999893235879632747730665352046877474373416018947947498063560551141429207468035467260383280017200142326105373767028108055984675077620066065462024972535097896179574200070132104887920074934816933638549397302558557667745062105595629867571062143458739962543948337811424215594605078641969897289958911409966328901389405624958482770697581998957299470014392276714693113516109822671991028927311025923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fae5a1f20817fb3bcf9bccf09ccf83f20c87e89e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cofiasa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofiasa.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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