oralfoz.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:9c:ae:71:c5:32:67:a1:b8:5a:f3:85:37:b4:db:b1:7b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oralfoz.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:9c:ae:71:c5:32:67:a1:b8:5a:f3:85:37:b4:db:b1:7b
Serial Number (int): 343553173557758574332226415458560425832827
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:19:84:32:f3:07:14:db:68:b7:ee:48:c4:0f:5e:43:42:cd:3c:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:45:3c:3e:cb:38:3b:ca:f1:2d:00:48:ec:22:50:49:69:96:28:e8
Fingerprint (sha256): 08:9e:ae:87:dd:84:30:df:46:cd:f2:b9:4f:58:a9:a6:01:1d:b3:44:da:de:17:e7:c2:ee:88:41:d8:09:36:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oralfoz.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oralfoz.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oralfoz.com.br
www.oralfoz.com.br

Other certificates including the domain name oralfoz.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for oralfoz.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343553173557758574332226415458560425832827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 15:56:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 15:56:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oralfoz.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 902962997869897807941040465211877331615939531718401723251230959688476111924475556311595726073014999374162829684408354828231015999156148537417706474863146055803270881273639431131326351728415716212494296939135369744130786732471189114030013680623986524372124061140637536730023930164927408881447763401382853914062483778829051954759441988087430057039324640771316194180754327149276939304865256196528999664668832572312963111139707100554858200371894296134008606493618676273104816397372395262553720686744346451154876565903459039822944111055785738843549894000428640720163654968853351824912247306756739890689220596663665397079615343849864873802699679768529787394030227204063077073152663365482243971036744823544995419272182339699727003395556118989857413704713367300697344136543560488568696765123218739855742759453393516635258935922791247131137537254757699502725990860755861578613499217011755872167718529556402186775081343526672493246603402289608916962052341381601516677487353757053791935903935106988933808758922787175467846904166680371029423352667630308931736199178005814905192569989579523161784880151988856965746528845119575873642916546569829507201303594254146774539449992032005606849465443281081033518723125797091846692863544983753442712169737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2198432f30714db68b7ee48c40f5e4342cd3c6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oralfoz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralfoz.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c5ef5544e00000403004630440220658372074f843d21177ed1350a9b6ffa2cb040d438ad6a7d2f10f2aa71ce054f02204298a1725280f23638cae6b6a4acfe45c09695d5ef77e5505040a4cb9dcf970d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5ef5548c00000403004730450220501a845a45840a84d8fbe60cbc03c6ce42f12cc6bb87ea578fadf0d2350be635022100d2a49928f9c28a50545d3712ef183f80a550744fe06129dad3301f05a1cb2438
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ad302bf71901c373dad1bed99aae212062bd719ad6ee8984ad2163357de523e82c8858466aea2557d076f8886a1f30c713251529c14e0a93873504c68538abea8178467b6298dc0047ecd4ab82636b7f4f5121824371babe92862fc5335824c94619294ec641608a403b134dc52e7e5154ab83b7faa7f148bbd0ee4f61202bef958438bd2daf278691c38a13494b113d8865696f74b98a06a2a9c0feaa9db1d6b52eb6ef135d89f9c9fb707077ea7c78145cc355dba28ad0bb5e017cc783bf4162d6aa29d98cc7716f16a1b28886e93cc74ed8fc35870d24b4dfcffee4fb8b9b681680de4be368fbdef122f038991d0258aa3acc0966fd562afb6db8f79fb70a