elsoldemexico.com.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:29:fd:51:7a:65:fc:29:67:60:ab:07:98:e6:17:f3:1e was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elsoldemexico.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:29:fd:51:7a:65:fc:29:67:60:ab:07:98:e6:17:f3:1e
Serial Number (int): 297122319973484246019053164964458853298974
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:fb:8d:a7:0f:63:04:4d:0f:da:b6:5f:71:ec:31:b1:34:da:a8:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:0d:14:38:12:5d:31:9b:3a:25:84:34:ca:29:08:1f:a7:c6:d3:9e
Fingerprint (sha256): c8:c8:5b:3d:d5:f1:67:d7:a6:89:3c:d4:da:bc:29:55:92:98:fe:ef:e3:58:63:c7:1a:ef:8e:5e:36:3f:f0:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate elsoldemexico.com.mx

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elsoldemexico.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

editor.elsoldemexico.com.mx
elsoldemexico.com.mx
www.elsoldemexico.com.mx

Other certificates including the domain name elsoldemexico.com.mx

(limited to 100 certificates)
elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
*.oem.cue.cloud
test.clasificados.elsoldemexico.com.mx
clasificados.elsoldemexico.com.mx
elsoldemexico.com.mx
clasificados.elsoldemexico.com.mx
elsoldemexico.com.mx
*.oem.cue.cloud
*.oem.cue.cloud
diariodelsur.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
www.elsoldemexico.com.mx
ampstories.elsoldemexico.com.mx
elsoldemexico.com.mx
www.elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
*.oem.cue.cloud
test.clasificados.elsoldemexico.com.mx
diariodelsur.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
*.oem.cue.cloud
elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
*.oem.cue.cloud
*.oem.cue.cloud
*.oem.cue.cloud
ampstories.elsoldemexico.com.mx
*.oem.cue.cloud
diariodelsur.com.mx
*.oem.cue.cloud
staging.extra.elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
diariodelsur.com.mx
elsoldesanjuandelrio.oem.cue.cloud
diariodequeretaro.oem.cue.cloud
staging.extra.elsoldemexico.com.mx
www.elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
extra.elsoldemexico.com.mx
*.oem.cue.cloud
elsoldemexico.com.mx
elsoldemexico.com.mx
*.oem.cue.cloud
elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
elsoldemexico.com.mx
development.elsoldemexico.com.mx
elsoldemexico.com.mx
test.elsoldemexico.com.mx
development.elsoldemexico.com.mx
*.oem.cue.cloud
*.oem.cue.cloud
*.oem.cue.cloud
elsoldemexico.com.mx
elsoldemexico.com.mx
www.elsoldemexico.com.mx

Certificate

The complete raw certificate details for elsoldemexico.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISA2kp/VF6ZfwpZ2CrB5jmF/MeMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA4MzAxMzU5MDBaFw0x
NjExMjgxMzU5MDBaMB8xHTAbBgNVBAMTFGVsc29sZGVtZXhpY28uY29tLm14MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwM9Et7oN6nMHeSJVHwJRMeP
JvZk46AC1+f9Jkh86q8/nk47+IltVEBaDBP4QgDmv5OEGVVKEShlxajJU34O2Q4J
FB97pULQMOSHgWSUV85PSmSKAayoAUoyKb70YFhRWK3ezl2pNmTmj+HEcXu/wgYX
qQQxvqbAuLxLQHqCHD8ttu17H603AeYOndcN5go1ud6kThXWQpyMspMi4brSidFG
HylesDFS+eTzkA59mXF0Axvu/y5U+lmt6h4wKOtitG1ma7Xh5XPOiJzULB5V41sh
eFVFBbR3RUhMZqgJAjhiQ3qxuB6VP1Bu/0kUddY6FyUh8pbaHiu6jGm4347UewID
AQABo4ICTDCCAkgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ7+42nD2METQ/atl9x
7DGxNNqoQDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBwBggrBgEF
BQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzBWBgNVHREETzBNghtlZGl0b3IuZWxzb2xkZW1leGljby5jb20u
bXiCFGVsc29sZGVtZXhpY28uY29tLm14ghh3d3cuZWxzb2xkZW1leGljby5jb20u
bXgwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH
AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u
IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg
dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy
eXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEACMvmSFpKzA6D
1AWdWg5yIkx9ZoVOWjGlGm+GbQqO7rycJ7DlikJFS9t+fHna0NbTwZ/PR9swRdOR
cZznYKq2h8/yn8kYmxffmPMbBWFfGtgHUnG2+yOYVhTJb8vNAns5P9rwXnmW9pbZ
KHlWBT7vSiJFXuPFbyzIJKyL+kVIcQf4QxcCUfZVWImt5pVE6LgoASSh948FCl8T
XyBsWKeLSf6BPF5IDw/bw4mOBV2kpg6LtLvOsStunTur3Zt13PqOb1i6sWRt0QX8
G2SeZgU1odHPcsWWdt8+tcaPjpk4hpYz191PdFL0s+qvBAQ8MvDMeQIaYQ6LHaf2
8frI8u0j6Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwM9Et7oN6nMHeSJVHwJ
RMePJvZk46AC1+f9Jkh86q8/nk47+IltVEBaDBP4QgDmv5OEGVVKEShlxajJU34O
2Q4JFB97pULQMOSHgWSUV85PSmSKAayoAUoyKb70YFhRWK3ezl2pNmTmj+HEcXu/
wgYXqQQxvqbAuLxLQHqCHD8ttu17H603AeYOndcN5go1ud6kThXWQpyMspMi4brS
idFGHylesDFS+eTzkA59mXF0Axvu/y5U+lmt6h4wKOtitG1ma7Xh5XPOiJzULB5V
41sheFVFBbR3RUhMZqgJAjhiQ3qxuB6VP1Bu/0kUddY6FyUh8pbaHiu6jGm4347U
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297122319973484246019053164964458853298974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-30 13:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 13:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elsoldemexico.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26132926125964873777502383949886016620951020183409490557732871077450238254633573833537992944062837288593730729274164518027830028093022395301901803425362304444220226480735811872203539676986028729633084072853396973736171045350911909503903327685074174076432032465578726615478167654799107502117278377735594927907997671110237367675487943644015788339894677894014637669131095105916207808158030110836636469875206597507883049304426604629557849879237714452538841108347407841993523798780901114947989626340855133804132164189499445407084665603518129513407716401276835045009748521777829377836637544311269553836014819055650923795579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bfb8da70f63044d0fdab65f71ec31b134daa840
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor.elsoldemexico.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsoldemexico.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsoldemexico.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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