giulianogenaro.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8f:4e:69:fa:47:bb:d6:ff:82:fb:ce:a4:7e:3a:b9:41:d3 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giulianogenaro.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:4e:69:fa:47:bb:d6:ff:82:fb:ce:a4:7e:3a:b9:41:d3
Serial Number (int): 310101466316102043875133797519759190344147
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:4c:8f:7d:50:82:28:81:7e:b3:c6:b5:95:41:a3:b5:67:38:ca:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:6f:25:3e:d6:15:94:b2:88:fe:d8:09:f2:54:f1:e6:82:d5:49:25
Fingerprint (sha256): 0a:cf:3f:09:14:66:38:5f:1a:89:3c:bd:81:1b:06:c9:96:04:d4:e2:67:28:15:76:af:85:3f:dc:8c:9a:13:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate giulianogenaro.com.br

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giulianogenaro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.giulianogenaro.com.br
cpanel.luconsultora.com.br
cpanel.prontosdf.com.br
giulianogenaro.com.br
giulianogenaro.imobibrasil.net
luconsultora.com.br
luconsultora.imobibrasil.net
mail.giulianogenaro.com.br
mail.luconsultora.com.br
mail.prontosdf.com.br
prontosdf.com.br
prontosdf.imobibrasil.net
webdisk.giulianogenaro.com.br
webdisk.luconsultora.com.br
webdisk.prontosdf.com.br
webmail.giulianogenaro.com.br
webmail.luconsultora.com.br
webmail.prontosdf.com.br
www.giulianogenaro.com.br
www.giulianogenaro.imobibrasil.net
www.luconsultora.com.br
www.luconsultora.imobibrasil.net
www.prontosdf.com.br
www.prontosdf.imobibrasil.net

Other certificates including the domain name giulianogenaro.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for giulianogenaro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6/gFmLFL3CY6uB9Hl15
l2MGZLEKIKBLG6KHfP3750+xsWdWTCa5Z+xljHSGC6B7/9bJ5UpOaqF+rgYPKvB4
0xSBN+yf1rw1eDPg5c8t68cws7Lv7re0gg4x71gkeTRRX/bN4ainA0nZaTQT7EKy
hgccuuXnKkY2uVp7sJeGAVvDuIlHwtgLUunlwsBtPPQjuGs4h7A3L7KqiVYhcXB1
as30kBwds0XtGn8gT4Za2ELQNp+V8rgOc+d08Ij7RRl+QAQuh0Hr6iEFLTZQSgDA
w9xca5g3v5SaA9jycPmfAkLcUbGB0DsyH7HZVyxhP176oJLA9CjmcOv18Hu78qLJ
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310101466316102043875133797519759190344147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 17:28:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 17:28:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giulianogenaro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24703196831687884816148242730952095628575468622213246925764385609974700398559278459245865822805617190048760397075425042424067495879744666738858704114325842874395900027597376900074111057844116092923796647503315747057385704550697068514572078683213196937204377036929397289322578210150750208471555126053790737661050189315851188143078431496924124877330669602461497199661715296633167824029449115080627058394719447808643368364750671990690231613734120159146938167603759914924988562307764315833316731077828116609876661314697348823242000841666037596866137798689662348887820429279892162203610055672952447344319380590325007567349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							754c8f7d508228817eb3c6b59541a3b56738caf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (662 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.giulianogenaro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.luconsultora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.prontosdf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giulianogenaro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giulianogenaro.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luconsultora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luconsultora.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.giulianogenaro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.luconsultora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.prontosdf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prontosdf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prontosdf.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.giulianogenaro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.luconsultora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.prontosdf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.giulianogenaro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.luconsultora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.prontosdf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giulianogenaro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giulianogenaro.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luconsultora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luconsultora.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prontosdf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prontosdf.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cdea2c7ed000004030046304402201d7239a10ec957e87d5db53d0ce4ef490db2b2b2ab8b12afa6ac36ebb1b9ea5002205276891960a217526b27468d3cccf9f41e8605f4fab892ae1896b9882c32bda8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cdea2c61b000004030047304502206abbdc1bd78dad74e42cc37db01c9f80c5c04fe6e6f630565cb35b3cd6c8a268022100bfacc17fc08ad5c23af900d906ff40b2a731e621c74b40a8754bb5e6912bb171
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008cabf4a33c527b95626d4ec975c8c1e5026b88b1058446f075fc140a923494347134e3732e5f8c83ab0bdff1818c798a51ba53fcf541d9b12ae276ee6bce3eb16e563992a42497f3cbc665e21d681d9bd1555c05a2e28079df041ca658a24c5dfb1bf18b66e05e024568681d42dc31deb715969aa11993cc1fe58540189d2e53c2851fe79d3250d3f58354224b49cffaad3240feeb4710f6af3099247e301d848b7c07d72968030d396d6a4bcc6b2bafb4952bc50264523f29c2486c8a8b008ac656bbe16c07b6be431ae12639336c1a255b93d45ad2899f620b3663e3e533b05b6c2fd8552b16c8575161435399bb8535c6beae8ef864655f991e662edfdd66