www.hotelcriol.hc1.mediatasoft.net

Issued by R3

About this certificate

This digital certificate with serial number 04:72:91:fd:9a:56:8f:ad:d9:2e:09:a2:56:ad:ff:6f:05:9b was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hotelcriol.hc1.mediatasoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:91:fd:9a:56:8f:ad:d9:2e:09:a2:56:ad:ff:6f:05:9b
Serial Number (int): 387435388396871160999039368715962046940571
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a7:ea:85:4e:bb:65:b2:7d:cc:4e:7c:4e:a4:7b:0c:05:17:35:ef:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:f2:38:1b:b1:af:d7:2b:3c:17:be:fe:b3:6b:2b:23:4d:8c:4e:36
Fingerprint (sha256): cd:0d:bf:45:94:bf:8a:2e:e4:6c:8e:99:35:eb:7f:7d:a1:0a:03:f4:bf:d5:21:ef:37:af:84:42:3a:ec:62:b6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.hotelcriol.hc1.mediatasoft.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hotelcriol.hc1.mediatasoft.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.documentos.mediatasoft.net
*.envios-ms.mediatasoft.net
*.fidtail.mediatasoft.net
*.hc1.mediatasoft.net
*.invoiceauditor.mediatasoft.net
*.jfk.mediatasoft.net
*.mediatasoft.net
*.rems.mediatasoft.net
*.rms.hc1.mediatasoft.net
api.brainware-erp.mediatasoft.net
mediatasoft.net
uap.jfk.edu.mx
uap.jfk.edu.mx.mediatasoft.net
www.api.brainware-erp.mediatasoft.net
www.api.envios-ms.mediatasoft.net
www.api.hc1.mediatasoft.net
www.api.invoiceauditor.mediatasoft.net
www.api.rems.mediatasoft.net
www.hotelcriol.hc1.mediatasoft.net
www.pms.hc1.mediatasoft.net
www.pollirest-api.mediatasoft.net
www.pollirest-front.mediatasoft.net
www.uap.jfk.edu.mx.mediatasoft.net

Other certificates including the domain name mediatasoft.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hotelcriol.hc1.mediatasoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZZ7O7DcCETZ+OaLI+BF
u9lJ2LK6eCJONZM9fAV2zhXaxfickD/N0ELCANZAqqX0Wj38idvFbCoQ99GGnNjT
MdMfuK+sLt2x6rxeMqwbgZflqtkqOxaqJV/CBs3ImQ23aVNMCpQ6Nd9bt0BdyQtJ
Fl7u4cpde676DUJs7/XMPG1zuCeszLef1fDRLfnVoN4daZ/CwKPMPKHddyGRClrC
7ZclKRZbt3YoPWrSGDsK9yfKtEoqnnHVLMCUXiYGiamE7RL5tWE/hVe7XYEz7QCE
nruKtF/dFRj+H1K74ps5hsLXVv1FVsINd+D0Whi8obX+oyTOgB1PiNzsm1vTVYl5
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387435388396871160999039368715962046940571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 23:36:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 23:36:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hotelcriol.hc1.mediatasoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27467917311559072809170409189612387438277063319096633130287709987542230912334494647453886364400859736942800129095318325180149359097238822405273271188095457016154574753737360408187339168095866736910563328389531633841857290228872902593975940146060305926031093883303582781945299218109197060313190046211972297092509528732003041946849365218873953578386770417798072927555312514686166044568421922835432977975495054102314570691977969228403337999806845989148501008253823106133454315813109231031280893253319946531442625052210185304113119887772969806957817621758766930995093054044917796851780368854054938274147491102673561287133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7ea854ebb65b27dcc4e7c4ea47b0c051735efb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (686 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.documentos.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envios-ms.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fidtail.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invoiceauditor.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jfk.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rems.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rms.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.brainware-erp.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uap.jfk.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uap.jfk.edu.mx.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.brainware-erp.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.envios-ms.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.invoiceauditor.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.rems.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelcriol.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pms.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pollirest-api.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pollirest-front.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uap.jfk.edu.mx.mediatasoft.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018638c0ac78000004030046304402200850ce1b21f9ac7e642d600df314b5df80761123cc656e0d2c5930728c7e425d02207dea56bba123f6f8a9e1048f410459de4f261441bb5fe0868ca2cdf4c9c3ae78007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018638c0ac63000004030048304602210091b8c3d0ff2afbd5f70d74de4faf74c2b4cfcdad57d75bf946df8ad2c5400b89022100b12344fdbbea2b05c2f862eea3308e8a71f9451eb1d9bdb4ed1134d738586ac0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00923e4f289fc515fdd7942a5a7a080c897049bbf42cafad52cf5cf9b51ec96ef32474e2216dda60c246c2b35e66e07849146b1d04f9da26865961eb4d38d8542b91cab33067b7a438cdac3ca2ae3ecc4e933630358bacd96f80eb8ea8e5ccb00511e3dd14a421c509c500c63c79e56911e5b867eb0ae791dd1cf096c7d4a79baad405d796dd3c8afa8e553018ee370173170becffac7649ef532eb416c1fddfc83ef097697ab67b291cc6464426656fc6169ecffe160ef79e4d335f623604956bc1c050aeccb0800b2fa4e6e08b14c9b5267c0a8b12ad2cef7d406a13925c3d1551390269f0e9f059526e44d7085087058f32e5e1b9d395330ccaa8fa129423dd