membros.conquistadigital.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:ed:32:1f:95:4e:d9:cb:42:48:98:1e:2b:1c:db:8d:cd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=membros.conquistadigital.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:ed:32:1f:95:4e:d9:cb:42:48:98:1e:2b:1c:db:8d:cd
Serial Number (int): 263353556920313481115807403172094528949709
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:28:d3:7f:c8:b6:8d:e3:35:e4:b5:5e:3c:5d:88:13:e4:1b:e8:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:71:6f:80:cf:5c:32:70:f0:ee:d1:0c:94:fd:63:3e:81:45:4a:de
Fingerprint (sha256): 0f:f2:4f:37:bd:81:ba:0f:bc:bd:04:d8:30:8a:0c:ef:ea:8f:5d:21:b9:dc:e8:9f:67:7e:be:b3:b7:df:64:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate membros.conquistadigital.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for membros.conquistadigital.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

membros.conquistadigital.com.br
www.membros.conquistadigital.com.br

Other certificates including the domain name conquistadigital.com.br

(limited to 100 certificates)
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
sni.cloudflaressl.com
sni219994.cloudflaressl.com
mkt.best-of.pt
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
membros.conquistadigital.com.br
conquistadigital.com.br
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
lp.conquistadigital.com.br
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
lp.conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
mkt.imediato.pt
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com

Certificate

The complete raw certificate details for membros.conquistadigital.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263353556920313481115807403172094528949709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 02:17:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 02:17:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'membros.conquistadigital.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733216942124462094859625347194910496540380198722275884468666887075288689494027116949880584816149682309711847997918326689759553948366434211056431145411962162524879562228920338347477509686500483563651436313197068086833305316141758665273636942103356209964647135639366715009410077948304162106760311543111503166811206815327284143541978505662759388707006292079665099549318023303315062085742132180840399499740910291066910378948753603800995653139263876946254423110371141190987621279105256812107740370738092588625909989873427847411461911829735829818933148366397891878273231819688462811192110819657038867660675430442149222803891151451250561858162821523560121665550532504223537559628819509298415396570748626528686844413073546230154311062233883298940235898908388048702555878862693144357573858642360037318710102290678445832869924507704068032742176823552430502859881306161896010184738281399840723585255135122042982208156167443285446368796915711234321466845520639220496485160600249057201352395788184742987759265139589569845670629191718120432016170343738223462525589005438675957882697223651661324017511574630067233844507051746959943891194688782521614643773563045995612621449270770507552952779279108594611852927385499983185039595368078052531198478873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7228d37fc8b68de335e4b55e3c5d8813e41be832
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membros.conquistadigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membros.conquistadigital.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001699e41344f0000040300463044022052fea0a40d6dfc2dd8da141c94922eedbc8b401ca12d3a8fa5b51a1ed1c3bafd0220378417ab493a9840a8b442e4672d356500b088431aeb1fb1af63dbfaaa493a7a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001699e4134520000040300473045022100c44520f6f7cf3ed4174789192559b4523fda245dd5cc5843d51b838b0064cd3102203f1d2475267dc38eb5c56b16e493900b13e2d7f6c7dabf4e96d4013f6bc80270
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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