rocket.groupsoftware.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:a7:19:bf:d1:3d:16:6e:0b:28:67:e6:53:d6:7c:d8:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rocket.groupsoftware.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:a7:19:bf:d1:3d:16:6e:0b:28:67:e6:53:d6:7c:d8:1b
Serial Number (int): 331997422521150372162839461238862442715163
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:81:4e:dc:36:6e:ec:ef:4a:82:2f:95:4d:e9:13:81:a1:68:41:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:dd:c5:03:76:fd:15:cc:03:92:7e:26:94:df:b2:18:aa:63:c6:59
Fingerprint (sha256): 00:b5:11:44:e0:14:c3:d4:35:87:74:53:ef:02:26:ef:b9:c1:81:9b:de:b7:ed:d2:0a:9d:19:82:80:90:83:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rocket.groupsoftware.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rocket.groupsoftware.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rocket.groupsoftware.com.br

Other certificates including the domain name groupsoftware.com.br

(limited to 100 certificates)
soporte.m-studio.one
rocket.groupsoftware.com.br
grupocondominios.groupsoftware.com.br
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
support.lpros.biz
sni54771.cloudflaressl.com
support.metaco.com
support.unboxpaint.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
support.drsofa.com
sni54771.cloudflaressl.com
support.intellitechsystems.co.za
mundi.groupsoftware.com.br
support.utg-solutions.com
trellix.inflowtechnologies.in
suporte-obot.outth.ink
desk-test.oniwa.co.jp
support.snapcastweather.com
portaldocliente.groupsoftware.com.br
sni54771.cloudflaressl.com
support.prefr.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
tktdesk.qtesting.online
uplexis.groupsoftware.com.br
support.prefr.com
lgbttazewell.teamjpindustries.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
support.xeroxuae.cloud
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
aurora.groupsoftware.com.br
sni54771.cloudflaressl.com
ticket.savvyhawk.net
sni54771.cloudflaressl.com
support.snapcastweather.com
support.intellitechsystems.co.za
stylo.groupsoftware.com.br
gprint.groupsoftware.com.br
sni54771.cloudflaressl.com
support.getuscrm.com
sni54771.cloudflaressl.com
brubank.lirium.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
support.automated-control.com
support.intellitechsystems.co.za
conteudo.groupsoftware.com.br
support.maxopolyworldnews.com
support.getuscrm.com
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
support.intellitechsystems.co.za
moradadospassaros.groupsoftware.com.br
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
support.intellitechsystems.co.za
support.roomnet.com
sni54771.cloudflaressl.com
demonstracao.groupsoftware.com.br
support.realtimemed.com
support.vidigami.com
support.unboxpaint.com
support.converting-systems.com
support.converting-systems.com
jpcarmello.groupsoftware.com.br
sni54771.cloudflaressl.com
sni54771.cloudflaressl.com
support.cloudpso.com
faatsistemas.groupsoftware.com.br
support.vidigami.com
sni54771.cloudflaressl.com
soporte.avp-ec.com
support.clouddistributie.nl
help.tkdscore.com
support.filenorthcarolina.com
almeidaemorais.groupsoftware.com.br
sni54771.cloudflaressl.com
support.intellitechsystems.co.za
support.drsofa.com
support.itp.mx
support.metaco.com
condominio21.groupsoftware.com.br
support.metaco.com
sni54771.cloudflaressl.com
ssl6543.cloudflare.com
support.supergrp.com
support.prefr.com
patrimoniall.groupsoftware.com.br
support.periodik.co
survey.musegravity.com
support.intellitechsystems.co.za

Certificate

The complete raw certificate details for rocket.groupsoftware.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331997422521150372162839461238862442715163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 21:07:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 21:07:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rocket.groupsoftware.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794159333305244868111528098600159620557685503169384659936233957999262184226771560702642429806367621656227870757347992750642791357720509166223141672383262418686745852406691760801963549570991887234323680545989000766446253555804034176067306300658073422535584754453779415739722118372850032461122494785156152842885313374141886990914103046924167929778954188154674420722920126367010975412560813992902106298916432216859541978021916250967748330319749916404068324831148198411712640615853702499256886633012396811384300079778709386241620119311730666509603634425631311131761432428946972712062064616933820206815697582925002103836635034728811393854478240313340698915791835563260074951497900092876304426929737047239611614165372679137061675695766070126905197587935289155571271697242037791936567684725635027914592026572609475203352632825194296548484868800205327566562675433188434998409664224647298919099420233632119962174936473614733067468486559459187745687218005504643346139735654880464359384396976014148920091171973078800600951996522386879771616669744273683122951466241053745421185818832023325092366523251034922365911652684480107053495293544509952773709799129938840829703914260885152145480500690078496320680322228533269283372209479436451750083001671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73814edc366eecef4a822f954de91381a168412a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocket.groupsoftware.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a60d66058000004030047304502201650451289a66c0753411d5f79e527e8f11a96f863c739448f730c44b8ed9bf4022100fc6988cd62e8cf40fad30c825d25fedc883592a690ee9266ec96f9252c8697d0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a60d66242000004030046304402206bd62c12304353d6a526f0e235a7b8f2b9aa89cbda806326f5252a8e11af805902206c0af306078b2b22801ae9273bd0d1a50a359bbee5920ad179fb111f670670b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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