petroil.com.mx

Issued by R3

About this certificate

This digital certificate with serial number 03:03:93:32:84:90:8b:d1:3b:2b:d2:85:8f:7e:6f:52:4e:a0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=petroil.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:93:32:84:90:8b:d1:3b:2b:d2:85:8f:7e:6f:52:4e:a0
Serial Number (int): 262553363714997059150324137662300361477792
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:04:f3:c8:97:4d:34:57:4d:06:47:6d:b7:82:6d:76:21:fe:ed:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 28:89:1a:e8:fb:38:03:52:4c:07:69:b2:2d:09:e6:ec:af:9b:72:09
Fingerprint (sha256): ba:02:46:ea:7a:53:62:18:55:13:f0:3c:f4:f3:b3:bd:1b:eb:47:bc:39:71:8e:0e:35:ed:53:74:25:75:ce:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate petroil.com.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for petroil.com.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

petroil.com.mx
www.petroil.com.mx

Other certificates including the domain name petroil.com.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for petroil.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxI8EDzb2vdqnzqfJIXFw
2q1Ro0POKf+/18GjqI88FlTUvdMrkI5bsLlrxJEcWAii+wtBb5emHFMoZUHNGTuE
+OrAsC6NrTgYeLLvn0lbb8qflMluP1IweNMUpqsIHV3G/TU0gQkuuHAkrul2Cei8
KT0n0+JMG4+clwytw7IX5RQGPjy9tZXofCmEoF5LFKMVV3ra/iJJdc+jqzTUAvY3
gR9Et3eJe9sWEsSPt47JLKw8Sa1SaNkSNlYmLiAc0ysDt2L1PzcREBItmJptecVL
1XpgOUribNSymj8J+tmzu5O5dryQkqZXldLlJ1whUCuDpNjSQ8mAVeInIz00TkIo
G+NX3vpmB20G+yIQ6vfhJU0FZgOnoWUYBorGKMrswPCh8dYcBT4JLo772uKURByG
iBgTvLqc+hH90WqTP2M5/6GpyqKHC44uKOGJgrWsWZiVL8ixfjlzc/8jJx5AvM6P
1Jw0uFk36TFPVnEw569bYwfcFiY6KdjmAJicC7FVQHdcLmqySrHQ01fw351jzM+4
0YCbZCIuMfgStGLGcX7GBzlmPuGVD0QPMGuOD3OjwprmVJColXdkxwzumyfmgred
1eGpRVACpxg3lrEM2yY55fBjnJNJOOUXHaqekZTF3/v2zSLGWX2zJOrTLznOHHPI
SkCkI+l8pbztNcE6neljMH8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262553363714997059150324137662300361477792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 02:55:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 02:55:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'petroil.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801889353711972960045705035865097953447415614645895379920328928583269248168935811661539488337894671733096250316174844779482789716903180404466570061087969509641676019092556584635242156815608704599400155427658446298025346967689440431910973135959893007334185201297221371248605548934749940406101128567008159274192080151427379006348185373578829264051477090289776418616313673803760243780387044668442699844075613767212155430282221193131986110054488988109861218404755451690908178302419811078898740469671525935159002599960258629659137076144752453831855794056678543032548762503046098073107360388821881070328647487791419885165391385603208757981778633184041282907584396402099248474480900117008945327350630201597123947460463273754312015952102951994131163868802774041025394148674150938587770772034757883809405002560721613625373207583564595409412273477430270803594114532932959934830528652911073146875450735380301279661815501499151898686912623341716929852971200295084889258253919226630010269882192069118756394758572272756701803426662991519038178104204663942125899671034874465822195481017808775587093647969251027041972270107236136106256703141820497029152105726895689520427518462877850105298457935840382984253416112663487658185581238100045364564537471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9804f3c8974d34574d06476db7826d7621feed51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petroil.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroil.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc6d193280000040300473045022100e439d6d64d5d6e370ce3152074831789b9cbca6e47f9b1ccc0aae42064e79d0202207c72557f62060d8f4e5c35b7e2816595a305f828ae90822c68db670d07628498007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc6d1932f0000040300483046022100ed468fd522e95786a31a6ca925edb56e053567340a80ca7e58fda988b9dc6265022100f22afc163818c32e25a48d943df1c669dbf1171393c7b81da32eacb516824c6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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