DV SSL/TLS Certificate for cri9.com.br

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the cri9.com.br DV SSL/TLS Certificate

This certificate with serial number 05:c6:9a:54:5b:f0:32:60:bb:fc:20:95:b0:35:16:4f:a6:4e for cri9.com.br was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for cri9.com.br provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:c6:9a:54:5b:f0:32:60:bb:fc:20:95:b0:35:16:4f:a6:4e
Serial Number (int): 503142477438163667099644312272336929662542
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 58:42:31:2a:ef:74:3d:d3:fb:b8:4e:b5:c4:f8:82:1e:13:89:b1:64
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 6e:38:d8:ae:2c:88:45:60:24:18:6f:b0:4a:3c:a1:b3:5d:93:07:71
Fingerprint (SHA-256): 66:d7:57:5f:0c:50:fe:2f:36:b2:7c:a3:a8:d8:37:21:99:19:40:c0:b6:9c:b7:18:df:e0:ec:ad:b3:44:5a:ba

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/79.crl

Check the revocation status for certificate cri9.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for cri9.com.br

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for cri9.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 503142477438163667099644312272336929662542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 02:19:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-11 02:19:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cri9.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845907912033169454424800407214306333265494837825393219461751893676161663769686851591144980968362490808757711024364532208825486912329911697463909987893648374638130579486413516370385405379781092900932846866538166350833401377710553305521043412046633765384786046112340511941181996973469249572623562586453503562237369015644604088375881307192779159276897225370728987097538680151673191172036496513288835996472384008501591277834074597969638667191680450139422848138958610746204015693480145352094796475314213495135093912768127303192644213330249580578302540984078698113361190451654283429813367506111741162508075058685643002980227194882933018907929539682465255443262048518871911353940909785949542294244185400988653781101417121925136892463392921426480294849476978235897344085260776350405177083271011891481201884818209716748700044969050954531629047778934876918270085669114381566958457085651128700863302621196797286613944024168544836044507228391750524841855139973708411130472920449971366193621676139293778317376914747854095756830207240064620239458279969585326442486178211789620520394930117100582795905162667878866358570524265440047816770975595923717325176144214369464819732778689232652486800908399855544332160508072837558506515952827463168186412553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5842312aef743dd3fbb84eb5c4f8821e1389b164
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cri9.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cri9.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/79.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000196c7a604f7000004030046304402203c9445fee7f5e178b7fde48d7b1127844af6d09bc6d31e105ab8d86b5222ff2102202ec652af51e2f6ca4f90342a3ee78f7ade9cbcf1c958a483e32179ab124768bb007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196c7a605530000040300483046022100ea28ac333ade18eae531f8dec26c303a305c18933850bb8633d95f49b0a47335022100b3f0f8b74dfebefab9c444c0a99226cdc082368b8f4a445743e0b41a986e1b52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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