comepe.ufv.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:e5:ff:62:d0:9a:4a:29:82:9c:a2:4f:76:75:c3:00:4b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=comepe.ufv.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:e5:ff:62:d0:9a:4a:29:82:9c:a2:4f:76:75:c3:00:4b
Serial Number (int): 307920978947465392395711103799340965232715
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:8f:18:ec:6d:29:48:1c:54:fe:b2:f6:25:27:e6:02:f2:52:79:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:a4:35:6a:7b:61:7c:a3:99:89:99:79:f0:ec:96:b4:e1:12:f9:c1
Fingerprint (sha256): 0b:0e:24:8a:2f:c8:8c:6c:dc:1e:1d:0b:9e:f6:2a:46:bc:0d:1f:5b:ad:b4:17:53:69:64:1a:54:0b:05:64:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate comepe.ufv.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for comepe.ufv.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comepe.ufv.br
www.comepe.ufv.br

Other certificates including the domain name ufv.br

(limited to 100 certificates)
beta.siadoc.ufv.br
labmanufatura.ufv.br
revistarea.ufv.br
sicon.ufv.br
wifi.dti.ufv.br
tls.automattic.com
gestbio.ufv.br
maurilio.cpd.ufv.br
campic.ufv.br
www.gdma.ufv.br
beta.cota.ufv.br
gestaoempresarial.ufv.br
www.nero.ufv.br
www.ufv.br
centev.ufv.br
insectum.ufv.br
www.asben.ufv.br
dpf.ufv.br
*.crp.ufv.br
www.infectario.ufv.br
tls.automattic.com
periodicos.ufv.br
revistarever.ufv.br
mcena.caf.ufv.br
chapa2.ufv.br
www.asben.ufv.br
www.sgs.ufv.br
lcp.ufv.br
r1.srv.ufv.br
comepe.ufv.br
www.gdma.ufv.br
tls.automattic.com
tecnoparq.ufv.br
www.jornalismo.ufv.br
cead.ufv.br
renobmg.ufv.br
www.mipufv.ufv.br
robotica.ufv.br
vidaememoria.ufv.br
tecnoparq.ufv.br
www.jornalismo.ufv.br
www.petedu.ufv.br
dpf.ufv.br
www.petedu.ufv.br
www.workshopdogrupopesquisa.ufv.br
mipufv.ufv.br
posgeografia.ufv.br
tecnoparq.ufv.br
www.deq.ufv.br
deq.ufv.br
*.cead.ufv.br
ufv.br
workshopdogrupopesquisa.ufv.br
ufvbaja.ufv.br
r1.srv.ufv.br
ssaca.ufv.br
*.guardiao.ufv.br
tls.automattic.com
comepe.ufv.br
edifica.ufv.br
jornadaprocardio.ufv.br
posmicrobiologiaagricola.ufv.br
rbas.ufv.br
insectum.ufv.br
gestbio.ufv.br
ambiagro.ufv.br
*.certificados.ufv.br
vet.ufv.br
posmicrobiologiaagricola.ufv.br
w2.srv.ufv.br
www2.ufv.br
grasp.ufv.br
pergamumweb.ufv.br
www.fitoclinica.ufv.br
sei.ufv.br
www.biomolanalisesclinicas.ufv.br
ccbioenergia.ufv.br
edifica.ufv.br
www.periodicos.ufv.br
ain.ufv.br
alfa.central-servicos.ufv.br
www.fitoclinica.ufv.br
cep.ufv.br
git.dpi.ufv.br
alfa.gespe-cadastro.ufv.br
tecnoparq.ufv.br
bbt.ufv.br
campic.ufv.br
www.pet-epr.ufv.br
www.cead.ufv.br
edifica.ufv.br
ggem.ufv.br
req2.ufv.br
www.workshopdogrupopesquisa.ufv.br
periodicos.ufv.br
www.labmanufatura.ufv.br
t-rex.ufvnet.ufv.br
www.dmb.ufv.br
adt.crp.ufv.br
periodicos.ufv.br

Certificate

The complete raw certificate details for comepe.ufv.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307920978947465392395711103799340965232715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 05:07:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 05:07:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comepe.ufv.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727605569022509550771108396047081257548580191013222214210730469986052880320047824826226591849682432922087735871091408789238409094893800516188535687715532002376739017736514926640452635069123568657918107874473413618927582252455145682960466018859276688114011519214369216236935991508016280944691514155914298550602886040841448356857838445534862015262882501531202890607896694052560111989541700451979578380045071443790736768447284978287555781250118442435719068231853939481166861095430002128112089290136398784872163840225024335952630509662339315506706402219202430555894395377758809000246064500534066391235580681155901954567954521864875915621316019674714693036884510643057084234355683722904160430416972874089471811646203519391559188542484543093622593592134855251459088624811723762826999858068343398686584230207136274674525451823916226821179151286502174969596064862127000434344000240819972495138469191316598845718457473065009758357958007304105420043516574750833860815622627491946446616684163032756422163795423632700195774692682108538939624318944011825631736989775821024849276830742748599713174456330647603390049050875301891195427731323869984580097038898319564529745723544547012031528858247638476379405211325802367445370322632568268322108313359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d8f18ec6d29481c54feb2f62527e602f2527972
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comepe.ufv.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comepe.ufv.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e7d1f877f0000040300483046022100d4f61778061d806cec8614e8cbad3b8b4b2b1bfb77ad0416331c6f7a5be971d1022100bf6b8ba73327a5de7a2b22be63c3095fc8e671178dd024781181d20c01e8fa7c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e7d1f87710000040300473045022100d02cc23414ddb928e2efbde0a1b8a4942a8659ec4fd231a2a4f95efecaecc28102200373ba81fb031943eab6f5ac63807224ce42d98c8d11d34d5534678ee743c224
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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