transparencia.timoteo.mg.gov.br

Issued by R3

About this certificate

This digital certificate with serial number 04:b8:bc:97:ae:f0:84:5f:52:87:16:35:60:d6:3b:ab:3c:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=transparencia.timoteo.mg.gov.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b8:bc:97:ae:f0:84:5f:52:87:16:35:60:d6:3b:ab:3c:ce
Serial Number (int): 411311781688721864104623687674947493903566
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:87:19:ab:4c:8b:da:83:72:be:17:25:95:68:18:07:12:09:dd:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:03:30:b1:67:a0:f3:ac:12:ae:00:f6:63:49:96:c5:cc:89:58:f6
Fingerprint (sha256): 11:48:6c:02:38:3b:f5:dc:1e:e8:9e:d3:d3:a9:38:3b:d5:8e:03:51:0a:32:1a:b8:33:8e:91:e9:2e:0f:6b:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate transparencia.timoteo.mg.gov.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for transparencia.timoteo.mg.gov.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

transparencia.timoteo.mg.gov.br

Other certificates including the domain name timoteo.mg.gov.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for transparencia.timoteo.mg.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411311781688721864104623687674947493903566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 11:33:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 11:33:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'transparencia.timoteo.mg.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2932896208808899032622678815921008894695616096530083099744929464927797254380247726283210743229125352239312363066322626921116116834818933291668740142831304939670783323772746930593983969668434915537810659492481572959448844581257833694458412808263470572973224449405657943572689083975950086653628244197359616192296475094180152274892155996486063077370536434313002551207681123951228061225217804101096461777464403002508373090129431870994772835752551288269770938351195684517406594411919582180210127986932322957310443620988159162174918075649573880315246182742829969370609869806468671117990188749532577050974418210241846368461854754063934752222345810347091572064830331969029547556444097346904887058808335229690757489594688102845735948941292442064816215331875648181825237454513609411175061865943383094796956587446000233334231743433651624591630644224336716465110491369035866608645243711418672468908153914461943452416153168108647437686701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a28719ab4c8bda8372be1725956818071209ddcb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transparencia.timoteo.mg.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186e01c9c5e0000040300473045022100b671364ff84f978bb18a240b51fc92837f4f1d09cdee179fd4f6dcf6c4a8b69c02204cb17c92b0e948894a38d8dbdd6b05c5e4867924018407fabbec6a3b59007bc2007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186e01c9c5300000403004630440220736bea5283f6f0a3dab912d535c5722692d0270abbfe0a679bc2c55dc00a0aab02204225d5a78c016a62577f099e9b75648eed21b38274abef888998ce1c248f72d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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