credenciamento.stone.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:80:0d:d3:1a:53:fa:10:25:44:d5:90:7f:7e:45:5d:73:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=credenciamento.stone.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:0d:d3:1a:53:fa:10:25:44:d5:90:7f:7e:45:5d:73:86
Serial Number (int): 392023662765499442619678065735342915154822
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:e4:8d:70:f1:20:a4:89:c2:8f:a4:58:1b:31:32:73:f0:13:b0:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:27:a1:64:36:8f:0e:06:e0:5d:62:02:fb:40:fb:ca:44:a8:ae:41
Fingerprint (sha256): 01:e6:96:7a:5e:33:2d:26:03:5b:25:17:c4:4f:ea:ff:0b:8e:f7:21:5a:a3:88:68:e7:8f:fb:82:91:59:d3:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate credenciamento.stone.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for credenciamento.stone.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

credenciamento.stone.com.br

Other certificates including the domain name stone.com.br

(limited to 100 certificates)
sni.cloudflaressl.com
helpdesk.azdelta.be
www.fatwestie.com
infraprojectsbuy4.stone.com.br
sni.cloudflaressl.com
sdkios.stone.com.br
bots.hyra.io
alpaca.status.merchlogix.com
credenciamento.stone.com.br
gateway.stone.com.br
sni.cloudflaressl.com
login.sandbox.stone.com.br
conciliacao.stone.com.br
conciliacao.stone.com.br
sdx.ton.stone.com.br
bots.hyra.io
*.stone.com.br
urlshortner.5tigerjelly.com
sni.cloudflaressl.com
split.stone.com.br
helpdesk.azdelta.be
*.stone.com.br
fsus-3.freshservice.com
login.sandbox.stone.com.br
poidownloadmanager.stone.com.br
bots.hyra.io
split.stone.com.br
jobprog.com
sdkandroid.stone.com.br
split.stone.com.br
bots.hyra.io
login.stone.com.br
alpaca.status.merchlogix.com
tesuga.atosium.com
sdkios.stone.com.br
alpaca.status.merchlogix.com
lp.stone.com.br
minha-stg.stone.com.br
bots.hyra.io
sni.cloudflaressl.com
pardot.stone.com.br
bots.hyra.io
helpdesk.azdelta.be
sni.cloudflaressl.com
bots.hyra.io
minha.stone.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
bots.hyra.io
split.stone.com.br
bots.hyra.io
redash.stone.com.br
bots.hyra.io
*.openbank.stone.com.br
sdx.ton.stone.com.br
bots.hyra.io
conciliacao.stone.com.br
sni.cloudflaressl.com
bots.hyra.io
cliente.peepi.com.br
sdkpos.stone.com.br
conciliacao.stone.com.br
joybit.org
login.stone.com.br
stone.com.br
sdkandroid.stone.com.br
sdkandroid.stone.com.br
bots.hyra.io
helpdesk.azdelta.be
www.duasxicaras.com.br
online.stone.com.br
stica.stone.com.br
portal-iso.stone.com.br
*.openbank.stone.com.br
finhance.io
alpaca.status.merchlogix.com
helpdesk.azdelta.be
sni1c614gl.wpc.edgecastcdn.net
bots.hyra.io
dev.banco.stone.com.br
ton.stone.com.br
bots.hyra.io
alpaca.status.merchlogix.com
apps.onttplay.com.br
bots.hyra.io
microtefdocs.stone.com.br
sdkpos.stone.com.br
ton.stone.com.br
emprestimo.portal-staging.stone.com.br
pix-h.stone.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
stica.stone.com.br
emprestimo.staging.portal.stone.com.br
alpaca.status.merchlogix.com
alpaca.status.merchlogix.com
cliente.peepi.com.br
cliente.peepi.com.br
stica.stone.com.br
bots.hyra.io

Certificate

The complete raw certificate details for credenciamento.stone.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzUZii5CTejy8P6Z4TwE4
+UADUopSBQBUyqBVUs4Wb+V8yXu2GKchza6es1Ay0xNlgyjVSg+lkyvrC483wO9e
3JqWgx38G8H3koshjm0K0HYGEza/eVYyaQMgEXkY3RdvvM4iygpMY4vVPhyWDpW2
s6wmV/sQ1mEEsG7cR8N5bU/zdaoPAEm14OvDyQdCxFecQaPiwQuiJB+tVdjmtihq
yBMIpAo/Oez5PdxnOgYj0+uwM2/14Re7smr2fBdcDa0gFuDALKVHndmJaWawA0L6
u5oMEH05wnD58tZeeF/Yme+wibtmYBInlmBaXcRZl8tOM9r+sTfyf76i2sztCMwW
4wR4jB1uy9Hq9Q/Pi4T71FpqnWeZKNG6BUYcyTRkCxvkfyzv/chZxyaji79dT63X
jAC88OzbDHtk/+XXGKymLoL1wmptdmOf58ItjdfBNAenvQGAGqmUHkv4YABNoe+j
VKS2jC1z4osUzeoEP8wTSKLxtW2LC2yofDr/JV+lM0aoYYgowLYW8qOT9A27SYo/
QKmpT3GOXRGGfBDYYPMft8E0Uqoqyt6JGmpg5Jd3aVFXlRvmvuHDFnH+9vP7jJTr
OGacG7XeKeS+KzNxTfxJ9yjY0S9QjKDcTnHt+H9uGCw/Sgvb2NGwj8VZ4A3vjB+G
UqN3ZAhdP4OGGv6RVm9XyWECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392023662765499442619678065735342915154822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 09:51:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 09:51:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'credenciamento.stone.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837448696098312277251205731839026576470062389903954655617211793046924774844176502052193452177529999553294725063297666304087913449717093574674436172752949138287454359684897283026943688041367639534322807515126133860481282948172951470301400178998346003897422754609734428678107826055858087963923715874295882088246847921745985232736424587247567587584958226136109604107055197403363981917273469542637390496648586387321050106693340753257489249174676824091380966097523807187536741775751141818900815104159032574552723172224029681184831502806828506318913910282121631567948532131213336515668615835754752122803503285994869473137516045997592174986027553924056978743224169454895909911563577793684794095987962741223764942464408857415241369396495596000061933822918508965032787286554737154581960187096233331493253056853336136881073707050065844086920049009298455275193529230968525321081561806249519080898393549063158188593039129983868231217403761696156064213852940482865237333987902015254779844677466155865034515692304166532736762653444048576348197484706195663333484018008727542594097862601229414178361432671085830264912036975128809585714646630860937957011820808293025951376703236749619268486648317919541847364995696618792454246495065840706284391221601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62e48d70f120a489c28fa4581b313273f013b0ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credenciamento.stone.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c668e660d0000040300483046022100cf0b28344f67135cf0d7984206fe6d2197bcbf15c6b1c36729921d378cabbca4022100ca6c334ed31eaac6fd89b565c75d163a1ca902df796290b9d7501d87272eecc500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c668e65cd000004030046304402200e72cb9bfc646852469c3eaea8178bbc0f6f473e860b0e25272fea57dc4792fc022050dcc221f2a5e15c0b23005339a380c8a924e39363b979608a3c300617933e9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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