www.asben.ufv.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:cd:20:32:b2:d8:c6:9b:59:c7:2e:67:af:30:03:91:11 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.asben.ufv.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:cd:20:32:b2:d8:c6:9b:59:c7:2e:67:af:30:03:91:11
Serial Number (int): 308908765718216749202889347474708062507281
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:38:30:93:5d:7d:d3:3c:d5:dc:32:cb:8c:d6:db:6e:df:64:56:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:dc:8a:2f:5d:b3:82:0b:0a:19:6d:b2:c2:28:a5:ea:47:fc:40:59
Fingerprint (sha256): 09:4a:d4:8a:62:86:b8:04:05:c1:13:8e:8b:b6:8a:fa:60:6b:47:e3:59:e2:5d:c8:d0:de:5f:28:76:cb:b1:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.asben.ufv.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.asben.ufv.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.asben.ufv.br

Other certificates including the domain name ufv.br

(limited to 100 certificates)
beta.siadoc.ufv.br
labmanufatura.ufv.br
revistarea.ufv.br
sicon.ufv.br
wifi.dti.ufv.br
tls.automattic.com
gestbio.ufv.br
maurilio.cpd.ufv.br
campic.ufv.br
www.gdma.ufv.br
beta.cota.ufv.br
gestaoempresarial.ufv.br
www.nero.ufv.br
www.ufv.br
centev.ufv.br
insectum.ufv.br
www.asben.ufv.br
dpf.ufv.br
*.crp.ufv.br
www.infectario.ufv.br
tls.automattic.com
periodicos.ufv.br
revistarever.ufv.br
mcena.caf.ufv.br
chapa2.ufv.br
www.asben.ufv.br
www.sgs.ufv.br
lcp.ufv.br
r1.srv.ufv.br
comepe.ufv.br
www.gdma.ufv.br
tls.automattic.com
tecnoparq.ufv.br
www.jornalismo.ufv.br
cead.ufv.br
renobmg.ufv.br
www.mipufv.ufv.br
robotica.ufv.br
vidaememoria.ufv.br
tecnoparq.ufv.br
www.jornalismo.ufv.br
www.petedu.ufv.br
dpf.ufv.br
www.petedu.ufv.br
www.workshopdogrupopesquisa.ufv.br
mipufv.ufv.br
posgeografia.ufv.br
tecnoparq.ufv.br
www.deq.ufv.br
deq.ufv.br
*.cead.ufv.br
ufv.br
workshopdogrupopesquisa.ufv.br
ufvbaja.ufv.br
r1.srv.ufv.br
ssaca.ufv.br
*.guardiao.ufv.br
tls.automattic.com
comepe.ufv.br
edifica.ufv.br
jornadaprocardio.ufv.br
posmicrobiologiaagricola.ufv.br
rbas.ufv.br
insectum.ufv.br
gestbio.ufv.br
ambiagro.ufv.br
*.certificados.ufv.br
vet.ufv.br
posmicrobiologiaagricola.ufv.br
w2.srv.ufv.br
www2.ufv.br
grasp.ufv.br
pergamumweb.ufv.br
www.fitoclinica.ufv.br
sei.ufv.br
www.biomolanalisesclinicas.ufv.br
ccbioenergia.ufv.br
edifica.ufv.br
www.periodicos.ufv.br
ain.ufv.br
alfa.central-servicos.ufv.br
www.fitoclinica.ufv.br
cep.ufv.br
git.dpi.ufv.br
alfa.gespe-cadastro.ufv.br
tecnoparq.ufv.br
bbt.ufv.br
campic.ufv.br
www.pet-epr.ufv.br
www.cead.ufv.br
edifica.ufv.br
ggem.ufv.br
req2.ufv.br
www.workshopdogrupopesquisa.ufv.br
periodicos.ufv.br
www.labmanufatura.ufv.br
t-rex.ufvnet.ufv.br
www.dmb.ufv.br
adt.crp.ufv.br
periodicos.ufv.br

Certificate

The complete raw certificate details for www.asben.ufv.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3CehO/Sv85khyD+7Dp+A
PFDD5sq+qkLQmoUd5gkaAZb9zXwFGEi7W2KOLxP4cMF+D3ZwyKGiosJmPpWa9RAU
8SFwUHh3N+xxSqgs4bQWJ8NsAJOsfWVjE8gvyZXf0RH9vpgSaS0MjlESKM7DY4h/
6O50/qTe5MyY4jLFVmf24kZ4iFAsWLZWvouBJpBbLdikOmCIMIr1pG2YrMihMMyD
PcXzf6UcV1S7rDqylgO59UPKUeSS91ZqanohCttJYbNIn4Ve+q8nc3JCeN56GyYv
BFl8g1xgKT4Vn9ZNnOHLjRp36/Ca8o66K72K6CclJMAmOqRv4LPn4T0QpXsQ36wp
vFKaSznr+kuDSob+RwROAXJ0j1nVfLgl+nUU50D++eTJU7eqkty5K5KtvXLaxBzc
ZBJA020rAz9JvYYLTxmm1gfiwHw/m38B3yzKwMsjrzWfBvhsynI7dJkhwToqg9nA
ZUzCe4w+0Ff8BfofyJYlsi2enxS6uO5CP03Wlwg3/n82k8CB5A1+7hqhXJQWErsB
ojftUBK2kEZQcBjn5jriaBLbr2iewtDK5RD/GjbOGV9rAChXORwaTk8XH0sOl1ZS
yoROoheEuD3B1vIH7SSDWYSonkNgg4az9gVZDeeQzqQSu0wTkSs9RrI3K8lmF/bx
BPbNtRWASh5Yz3m1GSLmkTMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308908765718216749202889347474708062507281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 05:00:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 05:00:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.asben.ufv.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 898153240138567688862026242745201806771651089504578701412161713142428258191968520861845475842256097712988734125536106211744695122481495554720032442077589056620674963108540433846945667519248618677284112132929975944435816284448607783992470558787405276885381163814799344577854883727146051881156981642782004590447359014650954876506277129995896547075888986072280870426797105724784138152904926997124300097250208829820961466615395722449532850629955061653613268308594409991721220491764864602752489830827627633315638747616219314382820107862237036662689343183491068834788003715327504119747387635389359706819837128598693023071368137556496156886351508186592069543937833121858210251109729307195257540797412200436143374668434785342161129645499258774104645389123892730570649458966256484024646534079108653697319790498848935724010263527472781194053002753689975833353185886906092062550114349356015829299393130682359177055318799135340100194360343990139449319614501716723809236260077691330063986682948238071628261274005877110714415310751189634370986132236678779886628310320086416734232901962680797098450834141145847709034605771464978180329489274814823225045171616698640637688911947645052929300246740461849050653073592514914075318036734971301122049216819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d43830935d7dd33cd5dc32cb8cd6db6edf645633
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asben.ufv.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aba13d3ae000004030046304402201432fc818d721970f3d80d1ea7b2d4a48ac0f686011ccdb90d8bf0f9c42c22550220526acd3547acc0d93e2f48a188afa77b29ada7be3685757a356b9d5e16382e2f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aba13d59a00000403004830460221008c498308e63e087519e2e62508c44b75ccbbf9e6ce9f78f0103a3381f32928bf022100eb850184d17d9a8e41518284977e88a89f4a2b14f2c3e9921b130d9a53a18bd7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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