vetorsolucoes.edutivo.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:5b:e4:1d:0c:94:9f:c5:b1:68:05:26:9a:a6:65:e7:01 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vetorsolucoes.edutivo.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:5b:e4:1d:0c:94:9f:c5:b1:68:05:26:9a:a6:65:e7:01
Serial Number (int): 341085075835267127065742166450050366301953
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:b8:fb:9f:55:d6:4b:9d:c0:2e:50:c2:73:b6:a9:c3:30:94:5c:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:db:54:c7:bc:a1:80:02:e1:88:a1:24:f8:a0:98:d2:a5:40:9d:cc
Fingerprint (sha256): 0e:bf:0f:eb:8d:6a:be:bb:0b:57:e7:01:4c:5f:d4:22:8e:93:dd:b9:d8:81:60:0e:6d:74:ba:1d:43:7b:64:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vetorsolucoes.edutivo.com.br

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vetorsolucoes.edutivo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curso.institutovendamais.com.br
isacettep.previnsadigital.konviva.com.br
manlatrainingportal.com
portaldecapacitacionmanla.com
vetorsolucoes.edutivo.com.br
www.academiacorrespondentebmg.com.br
www.manlatrainingportal.com
www.portaldecapacitacionmanla.com

Other certificates including the domain name edutivo.com.br

(limited to 100 certificates)
*.ava.portalescudo.konviva.com.br
site.edutivo.com
vetorsolucoes.edutivo.com.br
vetorsolucoes.edutivo.com.br
master.us1.konviva.com.br
master.us1.konviva.com.br
*.konviva.com.br
vetorsolucoes.edutivo.com.br
vetorsolucoes.edutivo.com.br
vetorsolucoes.edutivo.com.br
*.konviva.com.br
*.homol.konviva.com.br
www.edutivo.com.br
master.us1.konviva.com.br
vetorsolucoes.edutivo.com.br
vetorsolucoes.edutivo.com.br
vetorsolucoes.edutivo.com.br
www.edutivo.com.br
master.us1.konviva.com.br
site.edutivo.com
*.homol.konviva.com.br
vetorsolucoes.edutivo.com.br
*.homol.konviva.com.br
vetorsolucoes.edutivo.com.br
vetorsolucoes.edutivo.com.br
*.konviva.com.br
www.edutivo.com.br
vetorsolucoes.edutivo.com.br
site.edutivo.com
site.edutivo.com
www.edutivo.com.br
*.konviva.com.br
www.edutivo.com.br
www.edutivo.com.br
*.homol.konviva.com.br
edutivo.com.br
vetorsolucoes.edutivo.com.br
master.us1.konviva.com.br
*.ava.portalescudo.konviva.com.br
vetorsolucoes.edutivo.com.br
www.edutivo.com.br
site.edutivo.com
master.us1.konviva.com.br
desenv.edutivo.com.br
master.us1.konviva.com.br
vetorsolucoes.edutivo.com.br
site.edutivo.com

Certificate

The complete raw certificate details for vetorsolucoes.edutivo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fUc3LjB+KFpZSB4MzsV
AMbMAGD6zbXARxu86NBn7vrsyQutbv4UAQe2ueZk7xQ7fiK2XFwtbqP1xPacoyxF
3/B1sDgEy/K5B6PjXspXR6j4sE/hG+y5AuK2ZU3LQnqjIXPGo+iZcr5WOEAzSfw9
pi+CIn9TqBSCzOKlTOoCOC01OR+bfnzP6TuXWajKWvVhimJU0enQq1INlDj7cSfn
2Dg86VDAeWOjr6V10orbvfui2HRW8gg/sWnbQEOTj35YgHuS6mMlHyAHrGUbNir2
RWbiLSyT/PxLW26vnonK+4a3+Ts9vD7iV27H4qTwnTuKfhyBBFIgXLbxPcaOflNx
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341085075835267127065742166450050366301953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 13:09:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 13:09:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vetorsolucoes.edutivo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27514581776053024351098352565505190671950553739210879834581640947621699816259313490331981412384419123710574090412659031421671325127462214755534601527059711852451187096131548273887420431015299169994227627779553103609047562308541401824961053948822079608544330497585629117980166488054313143725173621491381217286912591333592721598088080521753913661713614052267313447185846109076581582716295294613255367604863801952490129970081655686936248555821456155662774924860459239611049138599264282305026464759960939429485952774671420963828870532263201133600405627337705837895886412259102503357816255950373650552238083064841523917099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02b8fb9f55d64b9dc02e50c273b6a9c330945c5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (267 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curso.institutovendamais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isacettep.previnsadigital.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manlatrainingportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldecapacitacionmanla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetorsolucoes.edutivo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academiacorrespondentebmg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manlatrainingportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldecapacitacionmanla.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001658605002e0000040300483046022100abfbe761bc74c250c18387bbb8ec5433180a7fe628386542cb37be94ba541097022100bc1cfa5338eaec3b5f6fde926ed1c01ff595a59cb6c64d0d8da039cb476c18be007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165860500450000040300473045022041a6e87e58f929e304d2621112b437ff6062ff2f4f0ed9bf27df276507734d13022100f4d3eb5cd3d36ab8af49d080cd33ea4800a446fa79e154b27363cd1e61d70555
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001248280b0987e5904d27a78dab8c0b54114bfd04837950e941628c75124c363e48f7ca9455ed6a35c139be57f70cdde59c682ab36259eea3b2a831ae0a33561c8c073b12c270db2ebd86f5e5a9a2f0b50cf92a4fec7540eeab14f3fe44acb36c4d3c8dd996211f7db153499f495012c200baab9b77e4246b8f303e7fa2b3cf607b7939fe6f398f6ed827487648df0feb9221cb8fba863f678917534877d66b443806acbe5d0d50ee07a00797dcfbe4f58955c6ca56c8ca5d30f162968a5ca5e0b466840ca336f7329a009fd823174673bbe907ce7c27111773e40c52ecb630b5b63bacabaffcdd8c74654d7570ad9b916b0bdee223e37eaed44ec2821dec7b2a