*.neemu.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c7:cd:62:18:c7:08:1f:53:47:67:bb:e2:a7:a0:f0:2f:4a was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.neemu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c7:cd:62:18:c7:08:1f:53:47:67:bb:e2:a7:a0:f0:2f:4a
Serial Number (int): 416438335831082533560791305219583817822026
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:65:5c:94:a1:d9:62:b3:59:f3:a3:bf:49:eb:09:d1:ac:f0:1d:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:c8:9d:cf:58:a5:b1:8b:0a:7a:de:34:ad:92:95:b2:45:00:fc:30
Fingerprint (sha256): 16:03:75:3b:ca:fa:48:3b:ab:af:cf:a0:bd:58:92:ee:43:1d:01:92:2c:f7:c4:48:ad:6b:c6:30:93:b4:a1:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.neemu.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.neemu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.neemu.com
busca.adcosprofissional.com.br
busca.autoline.com.br
busca.compraunilever.com.br
busca.drogariaspacheco.com.br
busca.lojaadcos.com.br
busca.lojanike.com.br
busca.mateusonline.com.br
busca.minasferramentas.com.br
busca.nike.com.br
busca.ricardoeletro.com.br
busca.universalautomotive.com.br
busca.www-unilever-hcp.infracommerce.com.br
search.farmagora.com.br

Other certificates including the domain name neemu.com

(limited to 100 certificates)
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
busca.lojasrede.com.br
*.chaordic.com.br
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
raas-suba.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.chaordicsystems.com
busca.shoptime.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
log.neemu.com
*.neemu.com
*.neemu.com
*.chaordic.com.br
*.neemu.com
*.neemu.com
*.neemu.com
omniplat.io
*.neemu.com
*.neemu.com
acom.recomendacao.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.common.linximpulse.net
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
wishlist.neemu.com
raas-cultura.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.staging.neemu.com
*.neemu.com

Certificate

The complete raw certificate details for *.neemu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXDa5HFFY8haDyRHvNVy
mx5aTGMTdb1Yvu3FpH7X+P9xDLVpklsuMB1u6ixa+e2K4GVrnMKsN6JZVi5Z+TiV
gom16BNEap/IPTryr1OZ3+KSzw/1l1l7fQXJaDrK83JcrIuODZgrBb+RC7V2eCez
J8LHLwISvbUI2KGl6oA4bC/PjqTMtDovDr+uAAtO52C5z1Sk24yzEGRCAN3zvh7P
1Mfp+XuFuM/lK9trP/lbg/pjSHn0n1gE3vEkxNAJRnavdCQJ2fMnT2KcMRmC+L2W
pom0pHwh4Q9E2e/CWMhAt9wuFRT9JNk07dtNPGvRaaFFsbzn54uzMKnV6n7QXkQ0
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416438335831082533560791305219583817822026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 20:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 20:06:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.neemu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24419643756881434521124447672254836591664054722974973857436067075729653296352166560388812479807468778562862560541944773684033626696297709908570562198109615405850905935558516871651277205024034647479164563017700018866386581670293494222032740346355855286205583648106115031332792555533461658522720298959521192456500086376998595519167820478005263886451701314206499691448964388742590841145071511472876116214836901549641831548787000893898028192010566039861983860113275338345571109242496302348289002007282462796127345955625495171985847836014465556103379119773435936704925755383626501107150146701099147132410989050330570044507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31655c94a1d962b359f3a3bf49eb09d1acf01de2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.adcosprofissional.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.autoline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.compraunilever.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.drogariaspacheco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.lojaadcos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.lojanike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.mateusonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.minasferramentas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.nike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.ricardoeletro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.universalautomotive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.www-unilever-hcp.infracommerce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.farmagora.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c68c0d2c600000403004730450220372a359590434e693399c72c75fe84f0c86222bdbfe0f059fa02a27551c16ef902210097355b14b9bcc6332ca1367219e6d29daed0255e25db09949018a4666205340e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c68c0d4ab000004030047304502201755913973f7b083978ebb10b3a5a44dbefe6ea38f0a47dff519f89d3e7c333c0221009df3dc1b308ce341927d0b33bec887566daa33a922013c4d7d64921aa68e84e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000fdd0b564be9c103f0a82b1912b9530b2b4313822d5a9b1fbc2166424ee907574d6f948255957509d209a1afc57a7b2d74bba4e39dd314245d9674896e953612708e7127531a33185514b37db37795db16621ad8b4f48faedea9619ac607d6fad42b2e89aca72ce5e32ad4b498a7c4881046939c3fdd5993b1067ecba13f66e7d5a66bd0c15ed00d3111413d4499f9fabfe04a9deb2cf5d9da8ffc81bb729dadc60d1432180aba3353c4fb2245ea00bf15745d39ac4cbccdeb5ee57a1e85c339add364a07f3898b0f21b88259ecfd1b304ff59cc738282169a09ec5a4365ce702ad3f9fc1f1e31ca8bef94e7bc8b26ab505634df3b8d068fe8094c01f5889e8e