cantinadokau.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:86:43:52:b6:74:38:22:85:cf:40:65:06:27:5f:19:8c was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cantinadokau.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:86:43:52:b6:74:38:22:85:cf:40:65:06:27:5f:19:8c
Serial Number (int): 302008925571810198853480568561028262992268
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:d9:38:8d:dc:35:a3:a2:c2:d1:5d:e2:d6:ea:b2:7f:f8:0a:b1:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:05:53:ce:72:79:30:9e:0f:c0:4e:d0:b1:d1:0a:ce:5f:ea:03:4e
Fingerprint (sha256): 01:e7:05:d3:9c:5f:39:66:c3:a1:51:3c:be:32:7e:db:61:58:22:3d:75:a7:ff:b7:36:26:dc:c4:aa:e5:f2:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cantinadokau.com.br

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cantinadokau.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.bronzeamentobrasil.com.br
autodiscover.cantinadokau.com.br
bronzeamentobrasil.cantinadokau.com.br
bronzeamentobrasil.com.br
cantinadokau.com.br
cpanel.bronzeamentobrasil.com.br
cpanel.cantinadokau.com.br
mail.bronzeamentobrasil.com.br
mail.cantinadokau.com.br
webdisk.bronzeamentobrasil.com.br
webdisk.cantinadokau.com.br
webmail.bronzeamentobrasil.com.br
webmail.cantinadokau.com.br
www.bronzeamentobrasil.cantinadokau.com.br
www.bronzeamentobrasil.com.br
www.cantinadokau.com.br

Other certificates including the domain name cantinadokau.com.br

(limited to 100 certificates)
cantinadokau.com.br
cantinadokau.com.br

Certificate

The complete raw certificate details for cantinadokau.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy+T0SyBHC3lQPE3K7EC
E0Rq9IVvQ2623jSPYsIzzy2nxUsAI/1siPf1Mdyy4V+exGJJABnQXiDSzGIg0P/P
n3K9BVmvaBf16487RjRTca2A/v6MDpywXKcJhRgQbFmqkvA+uz9VUYQrX/2ALGMM
h04ZJyDFA7Mn2sJnQdZQJMwRZA10Y8RMQz5nUSuonEItikMy+xIg4aQvA6HuN8x6
tyELFu6TpIbbW3dtEBpjPw7fh+6hokOwGGW1T8geGcdRv/uffGIA5P7SHGYW72eZ
miVM77k2GvI4E6/Qd9wllbX/P+UhHXXN968xdLAvXgZOKAclGwWmAlJBtx5fGPSo
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302008925571810198853480568561028262992268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 10:36:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 10:36:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cantinadokau.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20600305004994425966266074606400177155438625657113220430837887513236223362101679887324799872405236649472086065172104308668461915407004949866679138904709072059302639865164547686393474965303034399022924799222956299318379765528844949134621387159991200663274314186776258975767090121526904755180239319479133181115784413161910153891178099807273204886268216485265529849332958907789478984308433609234989906937247707006353979984382723670345579891792804742653895879361079865487626322659340214323576090816485697489040282197287718888441524742176046332151146156472214253394056129005169653462551709204165376354813786320291778308239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51d9388ddc35a3a2c2d15de2d6eab27ff80ab19e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bronzeamentobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronzeamentobrasil.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronzeamentobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bronzeamentobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bronzeamentobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bronzeamentobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bronzeamentobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronzeamentobrasil.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronzeamentobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantinadokau.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b6f85c12000000403004630440220115f0184f33f44b3d75740b158781c9946404ab664887b763fb34e0e1558c77a022006a16a16cbe46760aa81a2f8bffa962004e2aaae5bf6c6461cfdbc0ce5324d10007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6f85bf460000040300473045022100c5840963c40bd521c44ef00189c723ac94fbe33bdf879ea1f20aea850eb9fbd802205a0cb0fa5efcd2f78d91684216a7a0873a515a44e842cfc2670daa061e9d9f86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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