techpi.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:e5:e8:02:fc:da:fd:eb:49:66:a5:57:35:0a:30:54:d5 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=techpi.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:e5:e8:02:fc:da:fd:eb:49:66:a5:57:35:0a:30:54:d5
Serial Number (int): 341608811906205295531051023999242639267029
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:a9:e5:3e:a1:53:56:bf:b2:b4:6b:03:23:f7:fb:76:35:a1:c1:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:27:c0:3f:42:43:a1:e8:3a:12:ea:25:69:c8:3d:4b:e6:db:d8:31
Fingerprint (sha256): 0a:21:9e:1e:5e:d0:56:bc:c4:26:97:3c:cb:ab:f6:a2:98:f7:b1:a4:6d:ed:68:73:49:b7:7e:76:d7:af:cd:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate techpi.com.br

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for techpi.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.techpi.com.br
cpanel.techpi.com.br
mail.techpi.com.br
techpi.com.br
webdisk.techpi.com.br
webmail.techpi.com.br
whm.techpi.com.br
www.techpi.com.br

Other certificates including the domain name techpi.com.br

(limited to 100 certificates)
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br
techpi.com.br

Certificate

The complete raw certificate details for techpi.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu30BZi6JMHCax9QHrz5d
pcfz7aHE1P3FRpMuHsdHHp06EF/V7s/f90esUDj1NuCUAwWO/lyNIFPjqA4lXaCs
RJdNiLRuedcin4diNuws7ullXz5KbQfmnOnHhPvXutfpnmk/zO/2Rxv+O85chJue
4AuY7sDwZz8KhDSQPmOZ9vV0nB9UUf9VOIcAYsJ3Aaa5+T7C+6cd5RgyA2cfD8vP
t6S9kz+R+vsz2bm3LFtTE7raGVke098iJAUOj0ydB384Ph7DFpLYLZmGHl21KYml
6bHMqvVEubryFo7qUJeAr6S9OjbeklM5L2qOBAH+I9y0ug7Fc8EGP/lRQBNagTjQ
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341608811906205295531051023999242639267029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 04:01:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 04:01:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'techpi.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23668205521098838686521185798194007315998638337846189834456602043196071066553217495767287838234743439427672326853712435721434699806823209380369592031057999109431006369357009120651179704654904563702729230123760285610229485458946262053418265869747960816248090984888527945750207540380766145276340207224424081324570383486957882020571002770796949674749294312627739883418012415918509421027883160296937251140895672937628463904553500962859680103874346942323127533123377165778118806643928428174860346634111314909505067135245519944250097412995153083832106660881784253354614250640100850457636897429656804564119210905785691852909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8a9e53ea15356bfb2b46b0323f7fb7635a1c13b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.techpi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.techpi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.techpi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techpi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.techpi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.techpi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.techpi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techpi.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016449eb42ff0000040300473045022100d5e1a2e414260f857d8da81c305b924a60d44bb63045c41bad8c57804221a84f02206a658e1060b1269fba390a37cb9c58a09f31a1078f0bd69eebd413accf17bfa3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016449eb431200000403004730450220499f2d87dfba65d04a1c1586e0126ac56991e4405171e03f3cc09b5d01f3eba3022100cbde68ec4db3d8c472773acb88c4a154c380587e7e3e5cbebc01e06e22273fc8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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