*.brumafix.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:62:4d:fb:38:e9:26:4a:3d:4c:61:e1:e0:0f:2e:00:7e:ee was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.brumafix.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:62:4d:fb:38:e9:26:4a:3d:4c:61:e1:e0:0f:2e:00:7e:ee
Serial Number (int): 381900470661766836620529022001673960193774
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:44:92:ff:6c:32:ac:f7:51:27:05:4a:d6:a8:cf:d1:3a:23:5f:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:98:ac:cc:4b:91:e8:f0:fd:45:32:2e:f7:60:ad:c1:84:9b:3c:96
Fingerprint (sha256): 0c:17:cd:79:3c:15:23:60:4c:2b:42:2a:05:bd:7a:d3:77:82:bc:71:e0:5e:09:23:5f:83:5d:87:7c:c1:a4:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.brumafix.com.br

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.brumafix.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.brumafix.com.br
*.com.atelieronline.bhz.br
*.com.br.atelieronline.bhz.br
*.diretrizcont.com.br
*.mercadomineral.com.br
*.microfisioterapiamg.com
brumafix.com.br
cpcalendars.pluro.com.br
diretrizcont.com.br
mercadomineral.com.br
microfisioterapiamg.com
whm.pluro.com.br
www.bemerbh.com.br.atelieronline.bhz.br
www.bemermg.com.br.atelieronline.bhz.br
www.brumafix.com.br.atelieronline.bhz.br
www.diretrizcont.com.br.atelieronline.bhz.br
www.looksat.com.br.atelieronline.bhz.br
www.mercadomineral.com.br.atelieronline.bhz.br
www.microfisioterapiamg.com.atelieronline.bhz.br
www.pluro.com.br.atelieronline.bhz.br

Other certificates including the domain name brumafix.com.br

(limited to 100 certificates)
*.brumafix.com.br

Certificate

The complete raw certificate details for *.brumafix.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q8n2JRF7gBucbxF+H3U
0WIUTJUAn6uUH4g98VOMA7oEU9fN1UfeydDe5JuIuDh4IbYl1Dn2NKWRWncLvjlS
ELCXjRia6zIhBFZBijA997UiivSCCX8tAURHLKiojvoe6FXHxxymUfz/0WHQ7slt
CeY09NxcWGMnnq5MrVeDo610EyCC1kfWgqaYV5ntLPPDTM62DdYDZmBfN5Y+KENr
i0ISPBZBh6BBvXIspNiOQzchaMJOZFw08sr6wfktOA8MTjGoxwdBjPQaxTjyu0XJ
DTmDAN59gBXiW+PywJebgS1YQbY2KlfnCFoT/h7S3HDJeYCxiaIBB0NAf5YueP1Y
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381900470661766836620529022001673960193774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 02:38:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 02:38:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brumafix.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27606322952015348115330581018816829076464548636503578638283027458457772190473135453997591654881865590781893109010396885167917198280432881624433251141179827418010755594847256464333556067854914185985599530413724213700031424313870682768493095926144467450470446587891647769336634443721552564612224315966740417762235336519484870438734142774053763097769436809029930503265912478799092958150179936864642677044298026438236710750240557635560264360321002791291738677943529796945496409978326037282026299317830864962491502456750825776327735496246934896972121690974141829341997213053595547128693023141305428482223355715160043771937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f64492ff6c32acf75127054ad6a8cfd13a235f25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (635 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brumafix.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diretrizcont.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercadomineral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microfisioterapiamg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brumafix.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.pluro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diretrizcont.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadomineral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microfisioterapiamg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.pluro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bemerbh.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bemermg.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brumafix.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diretrizcont.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.looksat.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercadomineral.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microfisioterapiamg.com.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pluro.com.br.atelieronline.bhz.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d24f3109a000004030047304502206006f817ab8c9c166c27bd6893f884da8f89f6fc08248b853a4f0b319836c1440221008eccc80b3d53b114c9050a15f54fc059a583e6432ef321f5813e82747b264efd007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d24f310ed000004030046304402202464adac859ecd281dfb8553e20a8044079cc711b95ee4944364350a9ee2e8b802204b7c3a878fc68cec664ede18a4b851e337c1442ae298fc29e4433b8c8ccd66d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f9a0d24a8df4a5eb5c78617a4830c6816caf32661be57d448f2515349d88c8cd059ec3a8d65de2795298ec6b1ebe825e2105e7e29a23bec34fcc553f02514dca58187fd88944bf4a7e17be2b405544f1d91601ca6b44ba16ef45bb83137e9bc12fc55d4eec7c4ae93d55acb5ea8f293b888a66d0956d81677737d391a5ab27e42c0a6fce0fbea92952c2bffc277072c3e9d4bfd78a55b24ca1352b8081200320b559b352e6303d32accae5906dbb305740a41865bc116460809d7965c3cfbd99e37afac153045375d33329aed66d9c6ec30b5315ede1fb8d1df0f1f5c9a0c578a142ffcd6f6bb31d03020236b22460462d1142c75f5cbb55e7adc76a0a3a7f0