openpay.mx

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:73:cc:e1:f4:bd:25:4b:bf:43:9f:d8:11:bb:b8:80 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=openpay.mx

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:cc:e1:f4:bd:25:4b:bf:43:9f:d8:11:bb:b8:80
Serial Number (int): 4588953639724968947397940468350957696
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f4:8b:47:69:9a:1e:c7:a7:0b:34:46:8f:a6:19:62:52:55:db:da:84
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 5f:ed:3e:d5:12:75:92:66:06:6f:32:db:b9:dd:77:f3:d6:94:31:3f
Fingerprint (sha256): 9a:d3:df:24:c6:3a:46:a1:f6:94:49:bd:99:07:ff:cf:5a:f3:9b:27:ab:94:02:3a:38:6c:8d:c7:60:9e:2a:27

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate openpay.mx

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openpay.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openpay.mx

Other certificates including the domain name openpay.mx

(limited to 100 certificates)
status.sandsiv.com
foxtrot.status.descartes.com
status.ivey.ca
status.sandsiv.com
san-37-s12.tlsprovisioning.exacttarget.com
status.sandsiv.com
tls.automattic.com
marketing.openpay.mx
tls.automattic.com
status.sandsiv.com
*.openpay.mx
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
www.openpay.mx
status.sandsiv.com
systemstatus.clinisys.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
systemstatus.clinisys.com
tls.automattic.com
status.sandsiv.com
*.openpay.mx
status-namer-gtassurancetool.gtil.gt.com
marketing.openpay.mx
status-namer-gtassurancetool.gtil.gt.com
leapstatus.gtil.gt.com
status.sandsiv.com
status.sandsiv.com
*.openpay.mx
marketing.openpay.mx
status.sandsiv.com
status.plataformasintese.com
systemstatus.clinisys.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.etosoftware.com
*.openpay.mx
status.sandsiv.com
*.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
status.ivey.ca
san-37-s12.tlsprovisioning.exacttarget.com
status.sandsiv.com
status.etosoftware.com
tls.automattic.com
status.openpay.mx
status.sandsiv.com
status.ivey.ca
san-37-s12.tlsprovisioning.exacttarget.com
tls.automattic.com
status.sandsiv.com
status.plataformasintese.com
*.openpay.mx
marketing.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
statuspage.e2open.com
openpay.mx
*.openpay.mx
status.sandsiv.com
leapstatus.gtil.gt.com
san-37-s12.tlsprovisioning.exacttarget.com
status.sandsiv.com
status.sandsiv.com
status.openpay.mx
status.sandsiv.com
status.sandsiv.com
san-37-s12.tlsprovisioning.exacttarget.com
status.wilsongirgenti.com
marketing.openpay.mx
status.extrinsec.com
www.openpay.mx
marketing.openpay.mx
status.sandsiv.com
tls.automattic.com
statuspage.e2open.com
status.sandsiv.com
*.openpay.mx
status.sandsiv.com
foxtrot.status.descartes.com
marketing.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
status.tesseract.co.uk
foxtrot.status.descartes.com
marketing.openpay.mx
openpay.mx
foxtrot.status.descartes.com
status.extrinsec.com
status.plataformasintese.com
status.sandsiv.com
status.extrinsec.com
sdesk.openpay.mx
san-37-s12.tlsprovisioning.exacttarget.com
status.plataformasintese.com
*.openpay.mx

Certificate

The complete raw certificate details for openpay.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc6HOrTAtZ604QpYlIgg
bciZLw5qFa6z64ZUaKP4KVQm3QyJaxwQgnoopbfJKClo3AQw+FrgGjHjZBsE4YPZ
IQ9H9n+7fsBOMHrC+0j6YjHBPGk0FU86j72GpJur7ZYuDoMmYcBsPdnqB+B6+4lh
p7hNFOsfcQLWeBfaYsVOVaexsESboscFE9u5mm8tWv1mDBcOed+glzIpU8ad/4OH
2xZVSxs66E+cm5fzWTl+OFGEnuugCNKhVWSfJKOj7q21KnSwfkd1J/s42u2j6Vpq
m0YulinKDeiA3QsOPoKpkS6M+HYrKHTtt2YG6ykNvlRvi8WZ2p5RkRQ0V1VLFzh/
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4588953639724968947397940468350957696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openpay.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22950976069506334985382982815987956021319768163397440329443936370060152152571446053259137500173555559985034823701482851378060334357364319339905634253186267025024773805973925388103601112640642178574881429309214658089556190387233798445484752653935669488941968573386447232251052486669254190750191778990904543442226124336462425610998668459933414394731446937010820126860334563019760409533247414283283539535653909601738077731160325973302038024242376908317983333938555795146567702458945353495731430530546059471475171981689759675135313242331289007686727050834514939097681106208748808891216447825619666836062590625509222678527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f48b47699a1ec7a70b34468fa619625255dbda84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openpay.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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