contadigital.vivo.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:e6:1f:17:f6:47:89:2b:da:5c:80:a8:3f:c2:ff:b9:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=contadigital.vivo.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:e6:1f:17:f6:47:89:2b:da:5c:80:a8:3f:c2:ff:b9:4c
Serial Number (int): 273212342156833481056172659216307518945612
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:1b:7e:54:65:82:4f:2d:43:25:08:69:b7:3a:19:7b:00:8c:23:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:82:84:86:33:99:48:e0:8d:85:fc:fb:c5:9c:da:fc:32:bb:91:be
Fingerprint (sha256): 0a:c4:10:48:21:30:44:c0:86:f1:48:79:aa:3b:82:6b:c8:a7:35:25:29:02:0f:7b:4b:99:b7:41:b1:ad:7b:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate contadigital.vivo.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contadigital.vivo.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

contadigital.vivo.com.br

Other certificates including the domain name vivo.com.br

(limited to 100 certificates)
appstore.vivo.com.br
www.portalsva3.vivo.com.br
web-cert1.vivo.com.br
tracking.vivo.com.br
auth.vivo.com.br
web-cert2.vivo.com.br
scc.vivo.com.br
dashboardbnachml.vivo.com.br
autenticaint.vivo.com.br
denodo.vivo.com.br
protecao.vivo.com.br
image.serviciokia.com.ec
www.loja.vivo.com.br
consorcio.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
*.cpq.b2b.vivo.com.br
image.serviciokia.com.ec
vivo360.vivo.com.br
click.vivo.com.br
extranet-bancos.vivo.com.br
web-cert3.vivo.com.br
auth-esteira1.vivo.com.br
tracking.vivo.com.br
easl2.pre.gestaocontactcenter.vivo.com.br
hml1036-meuvivo.vivo.com.br
configuraraparelhos.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
recarga-api.vivo.com.br
homeassist.vivo.com.br
sni.cloudflaressl.com
auth.vivo.com.br
api.digital.vivo.com.br
login.vivo.com.br
lojaempresas.vivo.com.br
movimenta.vivo.com.br
homeassist.vivo.com.br
celular.vivo.com.br
sni.cloudflaressl.com
accounts-api.vivotools.com.br
lgpdfront.vivo.com.br
spdt.vivo.com.br
accounts-api.vivotools.com.br
vivostore.vivo.com.br
autenticaintx5.vivo.com.br
sni.cloudflaressl.com
callidus.vivo.com.br
joguejunto.vivo.com.br
lojavirtual.vivo.com.br
autenticaint.vivo.com.br
www.vivo.com.br
appstore.vivo.com.br
mvms.vivo.com.br
integracao.vivo.com.br
segurancaonline.vivo.com.br
sni.cloudflaressl.com
meuvivofixo.vivo.com.br
servicos.vivo.com.br
*.mve.vivo.com.br
author.lojaempresas.vivo.com.br
esteira2-mve.vivo.com.br
gedoc.vivo.com.br
image.serviciokia.com.ec
loja.vivo.com.br
vivoemdia.vivo.com.br
mvapp.vivo.com.br
director.virtualdesktop.vivo.com.br
pre-meuvivo.vivo.com.br
mvapp.vivo.com.br
sni.cloudflaressl.com
mve.vivo.com.br
image.serviciokia.com.ec
api.digital.vivo.com.br
accounts-api.vivotools.com.br
vivostore.vivo.com.br
www.vivo.com.br
iqdirect.com.br
author.lojaempresas.vivo.com.br
mve.vivo.com.br
sni.cloudflaressl.com
autentica-esteira2.vivo.com.br
minas.vivo.com.br
contadigital.vivo.com.br
internetgratis.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
portal.virtualdesktop.vivo.com.br
joguejunto.vivo.com.br
mailbr2.telefonica.com
servicos.vivo.com.br
seguros.vivo.com.br
cognos.vivo.com.br
sni.cloudflaressl.com
meuvivo.vivo.com.br
aceitedigital-qa3.vivo.com.br
autenticaintx5.vivo.com.br
sgrs.vivo.com.br
sni.cloudflaressl.com

Certificate

The complete raw certificate details for contadigital.vivo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273212342156833481056172659216307518945612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 12:19:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 12:19:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contadigital.vivo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745023096196528557965123216042885200803774964988965458638718644628299174893606468009223601592319030664233749071444609549931964177003212002294462760521818197470075628200195869516628940838905744786713662712068143119410314760497594700816059367219539411023764155817195242543439994158343472659291166951976062124438911883359575995218390500742238281735416128096515683998498828968871064634244567840571480404780520058423271641181072174506642495243598238814412515314157674050612621412265343164067287249715669254657661977393125038633009352384076360978576592362747365215470259801518481306368649406028542155659809173034388911647051511379249193016112630549243797297270866491145037413379838379825955412204322565540426969757080187724685430236225663108462960940058856989840722198339596603746756457926474411395591229146892801154316974998257230498330766761133150405916635005995974451301521453415464132896830015661128776311267977883803686886056785177912555312805847142197810576503564464548577972551234743366527744814720852526729553572098104684916910897658908077727261485815100024956332949101374326947487013329914492660470238970459212370947450327883350321067371611239219667308091837214034629019595562403352206097530738617207136312470447719252709799489429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e1b7e5465824f2d43250869b73a197b008c23b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contadigital.vivo.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163450ed3830000040300463044022032eb18a1b1611e511050b89f64b23d09bee428ada43fb997c21c0623a4795a150220402be33640b5d9ca39fe63c7f2f626ab20d8a4641f4d9867e95aa0b8facb9363007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163450ed3a3000004030046304402201f2ad9349cbcc6c154423d88e27e3c10720cd818ff9b1fd25e8fcaf496e1f0250220433694dcd7b3323b99c07b6bb1df703778d20f5dc5d8e2086f8356aaad88fa97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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