clinicasaintmichel.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:a9:e8:5c:3f:7d:85:d1:51:92:86:c6:19:58:6e:3a:99 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clinicasaintmichel.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:a9:e8:5c:3f:7d:85:d1:51:92:86:c6:19:58:6e:3a:99
Serial Number (int): 307160540977857230082687807056516804917913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:4c:bd:83:69:02:0c:f0:01:67:87:c8:41:8b:88:8e:bd:f9:c1:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:23:1e:29:a2:9a:6d:5b:53:6b:08:ae:2f:04:18:68:13:2a:b3:d8
Fingerprint (sha256): 12:12:29:16:e1:57:2d:fe:a1:14:55:23:cb:56:5b:c1:7b:c2:60:7a:cd:46:04:6e:65:28:c2:73:32:f9:85:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clinicasaintmichel.com.br

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clinicasaintmichel.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.clinicasaintmichel.com.br
clinicasaintmichel.com.br
clinicasaintmichel.vdon.com.br
cpanel.clinicasaintmichel.com.br
mail.clinicasaintmichel.com.br
orallisodontologia.vdon.com.br
shiftperformance.vdon.com.br
webdisk.clinicasaintmichel.com.br
webmail.clinicasaintmichel.com.br
whm.clinicasaintmichel.com.br
www.clinicasaintmichel.com.br
www.clinicasaintmichel.vdon.com.br
www.orallisodontologia.vdon.com.br
www.shiftperformance.vdon.com.br

Other certificates including the domain name clinicasaintmichel.com.br

(limited to 100 certificates)
taffacil.com.br
clinicasaintmichel.com.br
clinicasaintmichel.com.br
doiszero.com.br
multiclinicadom.com.br
clinicasaintmichel.com.br
clinicasaintmichel.com.br
doiszero.com.br
doiszero.com.br
clinicasaintmichel.com.br
doiszero.com.br
clinicasaintmichel.com.br
clinicasaintmichel.com.br

Certificate

The complete raw certificate details for clinicasaintmichel.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiM2u4/u6/LMBJKta5b7
r+hL5CPKUll2hAeED7bA2ZJKXNcPuHUX1TOm5sISB+/KzmPxlrs2U4gCTKRkAaoc
xoLbafYTaeTfK/w7TadRj6aTTU39L3q8nP5oOah6xfRpkK+q0q7ZmIc7NK+4W17O
Qu30gksCaDwRyIMzzJJHjXjczEqELTiNZ5fKIsHUXzHUPzid0YE6GnKFOBiZjGW9
0sdTt+xq3BI64G7tvJfiJYzfrm6U158lHsKi3PNU/H21HEsYixNIhi0Mpkdfa8ns
bu7fS8JMXP5//sXtvHE6vcHfAgAD3rCb2PX5UnNCx96wO093Fo6X88A5a2G1+BoR
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307160540977857230082687807056516804917913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 02:48:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 02:48:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clinicasaintmichel.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23497689295393316510169557259688888057937054409025777116491403873289780672341201932396899054062010515229939351585785843708811349378960844560177213969856947913681277346052865160842665774307895000028461482789059053173199668055401045060951113543020545791643262592945988751493603740602103367994156401234354581154446118577937421704125681789442074972530728635838877939088674891278756415925542606246528902171351756097580658967684575101620095184387015535886249082395693855478155145749554637538097989761884760501632379504202430907196724276964517714166054651391880839376118621902992427891145344024320623222667714542537704870373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a44cbd8369020cf0016787c8418b888ebdf9c187
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (469 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicasaintmichel.vdon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orallisodontologia.vdon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiftperformance.vdon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinicasaintmichel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinicasaintmichel.vdon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orallisodontologia.vdon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shiftperformance.vdon.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168a205e17e0000040300473045022052f35ebbbfe6e758bc2ecee732d78edc240b7965928e4d654e9f7cd4b5b4df5c022100fbc417d8913382bb55fef57f4d62598f3aaa45468963f0357e849ba6e8b96c9300750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168a205e17f000004030046304402200d1d8fe132f15f56a673df7745406d2ddf38a976bec4219ea26aa85b44d7cd23022025472342606f4d93f0a82560a318eea7bd8dfd0ae99e2217bee6d12bbafeffa0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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