declaranet.gob.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ce:77:30:a5:c5:d3:8d:09:31:a4:16:80:2e:f8:9a:43:44 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=declaranet.gob.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ce:77:30:a5:c5:d3:8d:09:31:a4:16:80:2e:f8:9a:43:44
Serial Number (int): 331593456105012682530794166656228094788420
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:78:c7:b5:44:3e:e7:f0:cc:3c:7c:df:0f:35:9b:76:70:1e:78:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:98:e0:ef:6c:33:2a:21:fa:54:37:ea:07:b2:c6:c3:33:02:13:75
Fingerprint (sha256): b3:61:31:8b:26:39:fc:d0:65:04:0b:f7:07:d2:6e:f1:3c:ed:21:dc:0b:7a:72:be:a9:fb:7a:18:dd:80:47:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate declaranet.gob.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for declaranet.gob.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.declaranet.gob.mx
declaranet.gob.mx

Other certificates including the domain name declaranet.gob.mx

(limited to 100 certificates)
le-507.dkla8s.funcionpublica.gob.mx
declaranet.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx
le-507.dkla8s.funcionpublica.gob.mx
declaranet.gob.mx
declaranet.gob.mx
www.declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx
declaranet.gob.mx

Certificate

The complete raw certificate details for declaranet.gob.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobdc3OOaod+deW8lsO/2
jhYzmSlWgGP4yHhxQeti7j0Xdi+ydA7L2a6yyMvXbPYoJJPqQy6miQXREr9PPMDh
i3WA6MztBicaQZz57secu6pUQA+j/JFKYvVDLkBe1PjmIP2oy9dMjLjOvMARoXRP
Oj0GdJaDS5UClIdZPsWdLhJuaiN8CoxMHM8VJLVJ94kN7A+drCOPlwuu8EGq2TVy
X35McyyP+2KOiBPOg/3BTfGG5ujGeJ2bUiDRQ64qyZ3wCd8qONQl6GcNufE+6YtM
zmB52PUD3kJNjablCxBrwzbAA18jFZSP9mCEHiwzxeeQJ+XFSE1GqFEZ9rw+0PPu
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331593456105012682530794166656228094788420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 01:53:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 01:53:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'declaranet.gob.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20414786639323813248226603150479769306857558362470541671117404887421272386624578659715471927544457651109933982040235078773842134467508553307221555135110885897538280994373555822053873289706483308266794677035945333485606677845752498011122603837951601801807726368321382303272976799359592289118058602680312712625316549290457371598773353085558392558979627929744453339966467007441334268326213690064199035776617134272778548615136083907036032798661836074380162785494053065898031447219328597325417771809928193895572176344497556123734508233178979484754921278942673041277263599488585933507548042994656778406559405239265175793271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed78c7b5443ee7f0cc3c7cdf0f359b76701e7828
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.declaranet.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'declaranet.gob.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a6c29728d000004030048304602210088aac7469f3164ad6fbed0fe4b9c50a9019268776f24ee718b702b2846c4935b022100c3c7398a91d75f154b57e03cc5b2d1ee58a4210f24e4a2708be7828204aa70c5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a6c2974a90000040300473045022100b88bfce8c98c4cbcbe1ef7192d6913c7cd527a8bbfc561394d13f19a1e0b440c02200b20eb3fc26d432f58bab7ab9f25fe38210f233dc6bf87a19c501a4b6aced55f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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