kentek.com.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:be:b4:80:16:fa:ac:4e:cb:b9:bf:58:6f:45:da:74:8f was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kentek.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:be:b4:80:16:fa:ac:4e:cb:b9:bf:58:6f:45:da:74:8f
Serial Number (int): 264652889628171884798393527705629672240271
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:08:f9:9e:56:4e:86:b7:98:1a:35:b4:bf:3a:7c:a0:83:ea:e2:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:c6:29:6b:ca:0d:38:52:a1:c2:45:7b:0e:64:8f:08:f8:8b:3c:74
Fingerprint (sha256): fa:f9:54:43:90:b1:3e:13:78:b2:9b:53:97:7a:54:a0:08:fc:c8:7f:aa:d5:74:d5:65:00:73:7a:7e:d0:cb:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kentek.com.mx

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kentek.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.kentek.com.mx
autodiscover.liftek.com.mx
cpanel.eliasterrazas.com
cpanel.kentek.com.mx
cpanel.liftek.com.mx
eliasterrazas.com
eliasterrazas.kentek.com.mx
kentek.com.mx
liftek.com.mx
liftek.kentek.com.mx
mail.eliasterrazas.com
mail.kentek.com.mx
mail.liftek.com.mx
webdisk.eliasterrazas.com
webdisk.kentek.com.mx
webdisk.liftek.com.mx
webmail.eliasterrazas.com
webmail.kentek.com.mx
webmail.liftek.com.mx
www.eliasterrazas.com
www.eliasterrazas.kentek.com.mx
www.kentek.com.mx
www.liftek.com.mx
www.liftek.kentek.com.mx

Other certificates including the domain name kentek.com.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for kentek.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C1RW4gFGtWs537XPoWy
kbC5xwVL8wipBdUCId4bcZBygBHUjzlzUFPhgOU/LW4Hm9xFYPLCwLeRvP9XPZlO
4KHLqGi8NZfI0xIcaLXh36t4Ey93zDxV4SRcnao3Y9z6VuXT/wR/flhj8/pzOCPK
bqVbHXh3Ve5BDBEJAyLXvhlS4EPb/+RFrSXlhLyupm1eFsU8ad+OJZZJwwdt/sd5
u+ZQxJSoHyege0UNKa8spUVkNz0Z/xRyqYmZZNda69JkylzkbDKcaGdzY59qk1cY
PWnjHPg5zXjcQfWgq1/tkwzQ+vzTUOFxhV6ZHFQ/LL8OsincrcpCCy3LVY246ECO
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264652889628171884798393527705629672240271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-29 02:34:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 02:34:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kentek.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26279914474439388742488186566226970289730366630035109609477037404202361818472803640462519501983894702328348085599755860852274068197579212757837670114223163354626311290144971847057687200457117099555515056340578239713618585273035929326775669405697163303179636757982935679915448945290862641690781206446428386788605082926543734256207563747057198287830023608868544222411483746299794655042180628105121067452446596218568100007598368921091482271030831035842589506872404734316082350372368841693471039013064159277308489416735882791637933754261379335653853630934610077930627313400566088684911587943371754809503781540038979915361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df08f99e564e86b7981a35b4bf3a7ca083eae250
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.eliasterrazas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliasterrazas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliasterrazas.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftek.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.eliasterrazas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.eliasterrazas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.eliasterrazas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliasterrazas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliasterrazas.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftek.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftek.kentek.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016623646fea0000040300463044022072080332365072c11fbe340fb2ac269b853855dd5746afa21db7cfb3e12bc91702206eeae7eea8d09957a5d3c623027f4d973a05a57095981f51195073294c22ea11007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016623646ffb000004030046304402207242d0c89aee3107715c56fdda3e3509dadd29b5c8a5e8a0ff6647c570ad7059022033d1bab8bfa6ebfbba8c95e7016528ed4791a1d637f5d9ef868d9ea7b45416f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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