correioadm.barradalcantara.pi.leg.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:0b:8d:0b:07:bf:7e:2c:f5:8e:81:ce:6b:21:cc:ce:b1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=correioadm.barradalcantara.pi.leg.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:0b:8d:0b:07:bf:7e:2c:f5:8e:81:ce:6b:21:cc:ce:b1
Serial Number (int): 323283602420422594727114661375710457548465
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:d7:b4:5c:14:03:28:fc:a7:74:56:e1:e6:1d:0c:3e:c1:1e:10:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:35:f5:fe:95:06:a0:8a:bf:ae:30:59:b9:59:0f:d6:ee:ad:91:96
Fingerprint (sha256): 0b:bb:32:a3:c7:ee:0d:07:60:58:99:65:43:61:c4:1d:b0:51:80:91:99:57:98:d7:9b:b2:20:cb:8f:43:b2:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate correioadm.barradalcantara.pi.leg.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for correioadm.barradalcantara.pi.leg.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

correioadm.barradalcantara.pi.leg.br

Other certificates including the domain name barradalcantara.pi.leg.br

(limited to 100 certificates)
www.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
mail.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br

Certificate

The complete raw certificate details for correioadm.barradalcantara.pi.leg.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApZTc8S7YBR5OY0tfbkNj
Wcpfw1fvXDz6gO2gwmnG21PEkFF1pVPLqBdGVlgLDGcPqLMsH641u52D/B4j0+zd
AN07YkxQW9GE5U5gpYHzT8+gFX/v3Eb0fOITme5+P5GzTnkWYgCTqTWMj0pyNSWv
nX7Bbh2a368N1J6D0dk0eAhMBPW1WqVJN2+QBa3nuTlQIOiqxrHcxwQMMldr9Qp5
VN0gJcYfkF1cNPcpC5le8i/J3i2iMVHHNvxoe0k7F7ClyFqJzi895IZc7mQXHOIA
qEQJTNOCojlVOS7u+0N/aYIy1YfuNAgCTh4/mnZ6pAsY1PRQDxtCwf0GsentKTUk
HHexVabUnqNPWO+zJkS5hYPTHJi84Z9wN5C6FzK4jXBfvtI9UE8vvGXgQ/No8qyQ
0ejUcfXvEY7X+A8lsZ7PN0ceXJcYVUO+6wLBx0c+uLygCTJSPX/5Zq2TJkBO6yZx
eRMHFfCEdbnHweQLJXWIFN9oqbdeABPXcnX3jwfZeFaavK35KiQYb0TVYnqMYDzu
HWJQCxTdqAC1FG3oVcdDyeAcuTGujybapaDN1lxUz+Dm0DbjPMnptIk21Js9zoFl
QwTaLjgcMXItteqIGKBZN7RclaihoM0I4Gh5tJerOA/JNPRcqrvlMsnzwCq3o84x
LvG8ad/7z49iVMF9rObjs2cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323283602420422594727114661375710457548465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 13:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 13:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'correioadm.barradalcantara.pi.leg.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675513569191805185743194910354550770847268936351562618458900689522402118765095953801210697851488170229590046912362525010197948052634643748331331809501164929771925539934435909427231161792700064654196686192795774852002179671663752283571715101331869850930366460489804670923506492438128701305424848126672109085457972821681668114632411001271079014243821773358139762815869170493050888734047683751257054540065277280725563454903351568091230708661897154720244134810396840863194489116099488967951062730841656311563839066230488072574572144386564423272784639056459116734040825963875648129384400969939844169112981379079230677264968473167020157092169760416546492460730398677347624981670778817216157273294907138719012022446370176592928040326325468013067433514254451716718444768465661297731751192033321709779047105195181145474440123533722553039497134541602635226823218644330309793647940777210913585488420679448933984684290014075987718709151527603222574394025718915908666583376653096373792323704908842392161812197749971608759299668122500869202605708351911604508890380080447303453914887219389598764920280809674946085531138924022700527727189304425379463754608490757777605305289964770883869683406918291821643051379690207785019632873578419600136427778919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18d7b45c140328fca77456e1e61d0c3ec11e106d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correioadm.barradalcantara.pi.leg.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170f32125850000040300473045022100855781600a951a9d64c18f692b138111c6a7469b2ad14b39a2343ccda932dd9402202d6f6cae97d84ddbb7e11bc7353b202a6b7776d046f931ecbeef69df46b0a69200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170f32125c30000040300473045022100a61794834b5d48306f2d6a87af3fa5810fe77281ff7b7970fba7a1821ccd11f702206d4b89f85ce4c3b073d1bdc48b94ba9fdd07f8d71a1a096e743d7bde24c24a53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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