tvazteca.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:74:7e:a1:3f:7b:37:2d:33:0e:ae:6a:30:f7:7e:38 was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tvazteca.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:74:7e:a1:3f:7b:37:2d:33:0e:ae:6a:30:f7:7e:38
Serial Number (int): 1934102790365694843341564130994126392
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b3:31:3f:e6:e9:36:df:11:96:91:07:fa:21:72:34:c6:24:2e:50:9d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b8:88:1e:14:f9:3f:63:1c:95:7b:2e:b1:67:2c:75:7d:07:2b:fa:15
Fingerprint (sha256): b9:29:19:66:ae:75:72:88:ed:fa:4a:5f:df:8a:2a:a5:77:68:17:30:56:83:a9:c8:28:d2:af:86:ef:c5:f8:1f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tvazteca.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tvazteca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tvazteca.com
fundacionazteca.org
www.adn40.mx
*.fundacionazteca.org
movimientoazteca.org
www.plantelazteca.mx
www.aztecanoticias.com.mx
www.aztecauno.com
www.amastv.com
live.adn40.mx
www.redsocialazteca.mx
esperanzaazteca.mx
www.limpiemosnuestromexico.com
www.aztecanoticias.com
www.aztecadeportes.com
redsocialazteca.mx
www.ritualnflfantasy.com
www.azteca7.com
ritualnflfantasy.com
*.tvazteca.com
quevivalaselvalacandona.org

Other certificates including the domain name tvazteca.com

(limited to 100 certificates)
tvazteca.com
tvazteca.com
*.tvazteca.com
tvazteca.com
tvazteca.com
colosal.tvazteca.com
www.azteca.com
*.tvazteca.com
tvazteca.com
tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
tvazteca.com
secure.tvazteca.com
tvazteca.com
tvazteca.com
*.tvazteca.com
tvazteca.com
*.tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
www.azteca.com
media.tvazteca.com
www.tvazteca.com

www.azteca.com
*.tvazteca.com
correo.onuriscp.com
tvazteca.com
www.ventas.tvazteca.com
tvazteca.com
colosal.tvazteca.com
www.azteca.com
colosal.tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
www.azteca.com
www.azteca.com
tvazteca.com
tvazteca.com
tvazteca.com
tvazteca.com
correo.onuriscp.com
www.azteca.com
tvazteca.com
tvazteca.com
tvazteca.com
www.azteca.com
tvazteca.com
secure.tvazteca.com
tvazteca.com
tvazteca.com
secure.tvazteca.com
tvazteca.com
tvazteca.com
correo.onuriscp.com

colosal.tvazteca.com
tvazteca.com

Certificate

The complete raw certificate details for tvazteca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKsjy6vslXOFvnEJsH/s
NJQkkbV/Y67THDw1eFoV33CgchJLDOeT2ryeZguraDozKGl287yoQPvsAv4IRorg
2IlI4VpSyhXTyOuCJ8B+RuHpAtEgK7LjjPUR4pqajD90vqEQ6aF5MFiBCWsjubJx
T8aVyTq2Ixb6BUaTxKskVBt3wvKmfl/Ec4j4+pIcD7w7Q9f84tLSlYYDoslmPkIt
xDgqosozdJH4evF/NIC9+fBOTlrqdzq3gIUG2Yn3B+jgv4LaAxEgGOY1xSrhXpJu
ON+flhPqKjTydow6B9WEkFiRkK+kMZ0gofykgJlJ1kijxBaPqryjatA16zK73PUN
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1934102790365694843341564130994126392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tvazteca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23312240307557684156687151618812500278020987402159784926670848004778623636455364389168256417332970419844857747937114605924826902109888953482394299204252956016613263111999001281636166199681646575304494401873877893200569800444975043105930310405387773535662966898914191495808864885183289805330517807506434936809973454946574248566434435002518356335204480917405421343329254010378052958113739206789883589848911583897949052103378063162602629660013644656959896725821292021927001977315602454338735482571714072908203149344173410298811665704077252786632436423421574846251386812549218503229760297367242929609923137548854903508363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3313fe6e936df11969107fa217234c6242e509d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (451 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvazteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundacionazteca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adn40.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundacionazteca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movimientoazteca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantelazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecanoticias.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecauno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amastv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.adn40.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redsocialazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esperanzaazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limpiemosnuestromexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecanoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecadeportes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsocialazteca.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ritualnflfantasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azteca7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritualnflfantasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvazteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quevivalaselvalacandona.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ece2396620000040300483046022100d9e5bc8a0ab612e144a6cbe86e6a47d618f91e497a8bd714955c8c695ba062c60221009ead07cd10c7877efc3e8031a78c4a41d051a8295ea32922de67dcaebf2769730076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ece2396fe000004030047304502203c8235421f876a4322a3ca5a8981477498ba4f05d810c3c8b366ec56b868d2ea022100b9963a8198595264134949c1259b1fb7c05749122adddfe4a5f982df9f3f08eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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