www.amcg.org.mx

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 71:fe:22:f4:8c:50:1d:7f:3c:13:5f:b1:53:b1:78:49 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.amcg.org.mx

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:fe:22:f4:8c:50:1d:7f:3c:13:5f:b1:53:b1:78:49
Serial Number (int): 151522315902786272229320620328889710665
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): aa:bd:af:95:3c:75:e1:89:ee:e3:1b:89:dd:e6:a3:3b:99:1e:81:b0
Fingerprint (sha256): c8:67:fc:1e:1d:4d:92:4e:b5:1e:e5:78:e7:78:e3:25:ca:5a:4b:90:c0:00:91:bf:c2:a9:23:08:dd:af:29:53

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.amcg.org.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.amcg.org.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.amcg.org.mx
amcg.org.mx

Other certificates including the domain name amcg.org.mx

(limited to 100 certificates)
test.amcg.org.mx
carrera.amcg.org.mx
amcg.org.mx
revistacirgen.amcg.org.mx
congreso.amcg.org.mx
educacion.amcg.org.mx
contabilidad.amcg.org.mx
old.amcg.org.mx
1.amcg.org.mx
test.amcg.org.mx
educacion.amcg.org.mx
contabilidad.amcg.org.mx
amcg.org.mx
1.amcg.org.mx
revistacirgen.amcg.org.mx
nuevo.amcg.org.mx
revistas.amcg.org.mx
nuevo.amcg.org.mx
old.amcg.org.mx
congreso.amcg.org.mx
1.amcg.org.mx
test.amcg.org.mx
nuevo.amcg.org.mx
contabilidad.amcg.org.mx
museo.amcg.org.mx
old.amcg.org.mx
congreso.amcg.org.mx
academia.amcg.org.mx
nuevo.amcg.org.mx
www.amcg.org.mx
educacion.amcg.org.mx
sni.cloudflaressl.com
carrera.amcg.org.mx
amcg.org.mx
nuevo.amcg.org.mx
museo.amcg.org.mx
test.amcg.org.mx
educacion.amcg.org.mx
museo.amcg.org.mx
nuevo.amcg.org.mx
museo.amcg.org.mx
nuevo.amcg.org.mx
academia.amcg.org.mx
test.amcg.org.mx
nuevo.amcg.org.mx
contabilidad.amcg.org.mx
educacion.amcg.org.mx
educacion.amcg.org.mx
carrera.amcg.org.mx
museo.amcg.org.mx
museo.amcg.org.mx
educacion.amcg.org.mx
1.amcg.org.mx
www.amcg.org.mx
nuevo.amcg.org.mx
1.amcg.org.mx
amcg.org.mx
educacion.amcg.org.mx
revistacirgen.amcg.org.mx
revistas.amcg.org.mx
museo.amcg.org.mx
carrera.amcg.org.mx
amcg.org.mx
amcg.org.mx.amcg.mx
museo.amcg.org.mx
carrera.amcg.org.mx
old.amcg.org.mx
old.amcg.org.mx
revistas.amcg.org.mx
congreso.amcg.org.mx
congreso.amcg.org.mx
www.amcg.org.mx
carrera.amcg.org.mx
revistacirgen.amcg.org.mx
www.amcg.org.mx
revistas.amcg.org.mx
museo.amcg.org.mx
amcg.org.mx
revistas.amcg.org.mx
nuevo.amcg.org.mx
museo.amcg.org.mx
nuevo.amcg.org.mx
revistas.amcg.org.mx
test.amcg.org.mx
1.amcg.org.mx
museo.amcg.org.mx
educacion.amcg.org.mx
contabilidad.amcg.org.mx
educacion.amcg.org.mx
nuevo.amcg.org.mx
contabilidad.amcg.org.mx
academia.amcg.org.mx
old.amcg.org.mx

Certificate

The complete raw certificate details for www.amcg.org.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsva/E8ELXjJpJJrz3siG
WkFR+SZxUyfe0XKLnAMb/cRSCXZ19rEZz2WArI2EgKsr6iAh/UxU9DK0cyzjUui7
Oo5Xy9k1Jh8aVCkTxftzaEY1kW8Gt3YFUa9/Z4DUxtnamMuCO7apBxPNGkWxOcPK
zeYxwxcyszSFTcm456H5uvPJh3+n5FGeodtwkYWHNv+p7baE4vCrcld4eHWtwdxB
QiYx+grEKbNlXoRaqzr+gboa2mmcJdRFdThjh/w+6In5+Nhbnrtr+nnEfFk5DoGi
dodcoyfKceOJ7qrHieqk7VDu4uPNKolC5IucSzIzNJprloY0R0iqxAzGYBn+AlGz
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151522315902786272229320620328889710665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.amcg.org.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22592093466314556382002053205780427060889636610371759013997102872168838919489870472453277718547470878661989939880163341864464742633329796045072842889580111829712874421622303060918561598060838628692656767432418314932610900385537203514332984749419730421710602938801823654892457184217916508947150552324050826203841585883603847906833989563208032655877459667154708381785424409046166390389545706801130075770072593496440036871150267285876734733263140080977940102408358077135888994213212674160439588464522936808077114147793015339434530940895665061667304658181627385267465018543364136570516306687620096752845814881381380109091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amcg.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amcg.org.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159944948620000040300473045022020812d80f9da5028a056b07237808a7d99eafcd89aad924ec68891780c00434c0221008f029d3df29d7cf612cbe7ec5a828a21da7b8b5f6efaf4e17e38d66ac8520c64007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001599449489b000004030047304502203a4437b55da16754b1a62aab39a8e8a7ba5211c582c909e50dfdf4ea2f35c2230221009e96e52c82ce651315d90c19b0ed351a76d256456e46fcfd01873519a48bc5e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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