DV SSL/TLS Certificate for www.lucasnascimento.me

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.lucasnascimento.me DV SSL/TLS Certificate

This certificate with serial number 06:83:8a:66:aa:bd:55:5a:ab:eb:2c:5d:84:5d:5a:a7:eb:9c for www.lucasnascimento.me was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.lucasnascimento.me provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:83:8a:66:aa:bd:55:5a:ab:eb:2c:5d:84:5d:5a:a7:eb:9c
Serial Number (int): 567434672197912478713325667882259798551452
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: e2:a7:94:2c:d8:b7:79:6d:ab:c2:dd:e3:ee:42:22:3f:98:f9:4b:01
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 70:af:4a:e3:19:c8:c8:0c:90:ba:3d:37:88:b6:18:30:61:cd:a8:bb
Fingerprint (SHA-256): 1f:f4:e3:f1:ad:9e:1d:08:8a:0e:09:84:70:0b:5a:f1:86:ce:2b:76:ed:1e:2d:5c:3b:42:5a:21:21:84:4d:8d

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/29.crl

Check the revocation status for certificate www.lucasnascimento.me
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.lucasnascimento.me

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.lucasnascimento.me

X.509 Certificate

The complete raw X.509 certificate details for www.lucasnascimento.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCoXFLntMDVwcJY496v2
nNPuI/H+DxgKzq+2zXKaWYEoTT914eyQhtyvdf8u4iTgmlQs3So7At+zN9VF8bXh
PWruLoFF7r8E6X5e5TimX6wJQr97HqqwkeuKIaOKN8ydA6aHe3QMRxQetFPsx8V8
fE0FwXkTlzF+k8lpD9bLixi6hyuaBPMdXYQrwje+wsLFac5GCmQqJowCHzBeVtjB
+QVvTq0DwIGf3wSTugDyGDnSTUZfdwP6tACauWjwF0YrKvEztKtPGKQ5D1RHXbdu
XDuWwfdb7CV6dtnoOVWnTIakZUxA7ifMKY4OA4bcgWsOWybOf1vcG3u+aqhYrBXn
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 567434672197912478713325667882259798551452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 21:53:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-26 21:53:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lucasnascimento.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16684211686985140861101132165730687345207888558046783428012932838849010385490875553489604988496471232596149670202943712644283881589941279011559063973277937805624946614615249885191510461174070123948018811100642249572907089434021744079071512914517355081279307151474801995442126416252029011128805103470010598754607300595264551388156829733692391423155229424119524593263921114424463158118234938960946092985865030232678697894069757492184285520639544980957026008903206689666864019601115440622660410616342236106988395016106508315450738821364762174109768586787294528007644889242438884055945952488521997704302820015303023781757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2a7942cd8b7796dabc2dde3ee42223f98f94b01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucasnascimento.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/29.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001971918bf8b000004030046304402207f5acd71ae19a1bdbf39e8b09b0dca33a5a90e2827104e617e2e654a37e08730022066985f74a1a27db3d411f7ecab1a9e6d7eb19e89159e09c14973817b231e75040075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001971918bf91000004030046304402200e96c2c8c4e6107211b1841a2fde569ae3f67124419eb95c56ec4bc1ad3c36120220501ee4dc7c80787f2212e8724bba0384264ba28568c74cf94a5d797b295fb9c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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