gm.api.client.inovamind.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:99:25:a6:ff:eb:cb:4f:be:fb:0f:2a:9f:b6:83:23:9f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gm.api.client.inovamind.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:99:25:a6:ff:eb:cb:4f:be:fb:0f:2a:9f:b6:83:23:9f
Serial Number (int): 341166499040275348720631913323489438933919
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:10:80:e6:a8:7a:a4:d1:29:6b:19:18:9a:81:c1:78:90:59:42:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:d4:19:b3:bb:b5:71:f3:a8:a9:83:bb:57:12:31:7f:9f:58:c3:4a
Fingerprint (sha256): 07:79:88:02:af:bd:1b:a7:69:a0:a9:2f:34:a5:ed:b9:20:ec:e9:26:bd:59:5d:2f:7b:f6:92:53:c6:7d:57:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gm.api.client.inovamind.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gm.api.client.inovamind.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gm.api.client.inovamind.com.br

Other certificates including the domain name inovamind.com.br

(limited to 100 certificates)
inovamind.com.br
gm.api.client.inovamind.com.br
inovamind.com.br
ws.inovamind.com.br
xpi.regtech.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
painel.inovamind.com.br
filemanager-hml.inovamind.com.br
aa.client.staging.inovamind.com.br
eudora.front.inovamind.com.br
quiz.inovamind.com.br
bgcveiculo.staging.inovamind.com.br
rocket.client.inovamind.com.br
*.inovamind.com.br
aa.client.inovamind.com.br
bgc.credilink.com.br
ocrprd.inovamind.com.br
aa.client.staging.inovamind.com.br
sni190869.cloudflaressl.com
mikkel.full.inovamind.com.br
sni190869.cloudflaressl.com
full-dev.inovamind.com.br
painel.staging.inovamind.com.br
aa.client.inovamind.com.br
poseidon.client.staging.inovamind.com.br
anubis.client.staging.inovamind.com.br
anfora.client.staging.inovamind.com.br
show.regtech.inovamind.com.br
backstage-pagon-aqbank.inovamind.com.br
crt4.regtech.inovamind.com.br
sni190869.cloudflaressl.com
legal.inovamind.com.br
orchadm.private.inovamind.com.br
inovamind.com.br
xpi.regtech.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
bgcveiculo.inovamind.com.br
moira.admin.inovamind.com.br
sni190869.cloudflaressl.com
inova.regtech.inovamind.com.br
anfora.client.staging.inovamind.com.br
poseidon.client.inovamind.com.br
sni190869.cloudflaressl.com
www.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
eudora.front.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
dashboard.inovamind.com.br
a2.client.inovamind.com.br
bgccredil.client.inovamind.com.br
liveness.app.inovamind.com.br
*.regtech.inovamind.com.br
motorbgc.vb.hml.inovamind.com.br
hml.regtech.inovamind.com.br
bancoob.regtech.inovamind.com.br
projeto.inovamind.com.br
moira.admin.inovamind.com.br
poseidon.client.inovamind.com.br
*.legalfinder.inovamind.com.br
sni190869.cloudflaressl.com
inovamind.com.br
inovamind.com.br
spartacus.staging.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
spartacus.inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
consultoria.regtech.inovamind.com.br
eudora.dashboard.inovamind.com.br
devportal.inovamind.com.br
sni190869.cloudflaressl.com
painel.compliance.inovamind.com.br
sni190869.cloudflaressl.com
full.inovamind.com.br
*.dashboard.inovamind.com.br
*.pservice.inovamind.com.br
crt4.regtech.inovamind.com.br
eudora.client.inovamind.com.br
inovamind.com.br
ocrcnh-stg.inovamind.com.br
consultoria.regtech.inovamind.com.br
full-hml.inovamind.com.br
anubis.client.inovamind.com.br
anfora.client.inovamind.com.br
cloud.inovamind.com.br
*.dashboard.inovamind.com.br
bnp.regtech.inovamind.com.br
sni190869.cloudflaressl.com
poseidon.client.staging.inovamind.com.br
inovamind.com.br
inovamind.com.br
rocket.client.staging.inovamind.com.br
easy.regtech.inovamind.com.br
sni190869.cloudflaressl.com

Certificate

The complete raw certificate details for gm.api.client.inovamind.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341166499040275348720631913323489438933919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 13:42:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 13:42:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gm.api.client.inovamind.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 959891281890327282832323545219031120649207848254564257564418626682203739974009584644754789987382239129233824683016491296070232192300343432488780862103546616467890293162340718225586826236417452157346137290359828178064905532040734100925188904992216023061460964989133656888974154711118418862440693679620878818605855323243417717779543930038412349097743965912366402341877944314625791834098941075285536546901642367113444727899247659985233385268447263666869679425748141862253777306451938612534958586449584274079973784031537688379740847999698759345433515344053094110043784126420458610294979680358876024262840642175319765473351798212044118130282854238853119907615901085978067452057047783924631061748841627558883520682284217547480712480102683791346341754241302134344178708339303083336913932653274577016123351764978737750619709857753818240043426195295646345917880705318519020232208337393102712495737038839234961562169255624280726688942549670517877761610101355113805965507686565269399874542360378839703422580920488005068701122941551218678588486432407999545496818925616992805238473012264676752256822631183770567084781522145572632656228492576346473711990169517689675756041745946786005763175167984145213897187967333884209465102234003783364192421541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							461080e6a87aa4d1296b19189a81c178905942b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm.api.client.inovamind.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001683d5d46ad0000040300473045022100d2cfe69d4d66c5b374a1e18cf06ca1d9221979da2214a88533135537d6a7352502203f08b2a9a5812a56b8e69ad28e3b1c207616ab730e96e578f4bc83bad80a5e2b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001683d5d48eb000004030047304502204b56166b5be310e8cbdc942d2d35fd97644bc0d15d781de54effb187a724821c0221009be6adb6855088d0f4ee686ec98f1e82f0e2412ae14098da673f2e5dab60aecc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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