shopcarlaguimaraes.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:29:af:5d:9d:ac:35:f4:19:c4:5a:8b:73:88:e6:a9:c9 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopcarlaguimaraes.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:29:af:5d:9d:ac:35:f4:19:c4:5a:8b:73:88:e6:a9:c9
Serial Number (int): 306309539127378253564496496167912032610761
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:09:dc:e6:13:7b:66:38:cb:0d:52:e2:18:65:b2:26:93:cb:0f:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:d9:25:d9:b4:2f:1a:94:06:73:87:9c:a8:5b:af:b4:5e:83:e0:1f
Fingerprint (sha256): 16:1f:d5:d1:83:44:4d:ba:eb:e9:47:2e:08:67:d4:e4:2f:b3:18:b6:ed:fc:bc:78:3f:d6:7b:36:14:21:b4:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shopcarlaguimaraes.com.br

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopcarlaguimaraes.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.shopcarlaguimaraes.com.br
cpanel.shopcarlaguimaraes.com.br
mail.shopcarlaguimaraes.com.br
shopcarlaguimaraes.com.br
webdisk.shopcarlaguimaraes.com.br
webmail.shopcarlaguimaraes.com.br
www.shopcarlaguimaraes.com.br

Other certificates including the domain name shopcarlaguimaraes.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for shopcarlaguimaraes.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISA4Qpr12drDX0GcRai3OI5qnJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDIwNDE1MjNaFw0x
OTEwMzEwNDE1MjNaMCQxIjAgBgNVBAMTGXNob3BjYXJsYWd1aW1hcmFlcy5jb20u
YnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HA/h93O3Sl0ZKN3C
BzsSrXNwmMlWtCzPDcD+jcNxvDFl3izbzhxg3ZV6/SeL/xzom9vp0EG9owZcy8MZ
ANpGLbwteY7RvgjOZyOPnciir/Jhq10zPQSBK60ntT1GefrWtWiFzCc6SpxCzSxl
7cJWng/2jrWKgEpxvpBB+KDNCMOcif46nVxgCh0LWJYKJG2lGEuhm+FCGONHoAnc
l441xrebqG0dbjFT+aViN0IdhpvoVZYB1yuTR2Up1uhfVWMPrRL8FM4Ks+hz/q4r
9wGTwS/eCIvxFG0Jy1dst6N2B25OGeRXWtuSJYszsdAoucrZauBBpuDeUn4NwHvm
zZs/AgMBAAGjggNBMIIDPTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEwJ3OYTe2Y4
yw1S4hhlsiaTyw//MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wgfUGA1UdEQSB7TCB6oImYXV0b2Rpc2NvdmVyLnNob3Bj
YXJsYWd1aW1hcmFlcy5jb20uYnKCIGNwYW5lbC5zaG9wY2FybGFndWltYXJhZXMu
Y29tLmJygh5tYWlsLnNob3BjYXJsYWd1aW1hcmFlcy5jb20uYnKCGXNob3BjYXJs
YWd1aW1hcmFlcy5jb20uYnKCIXdlYmRpc2suc2hvcGNhcmxhZ3VpbWFyYWVzLmNv
bS5icoIhd2VibWFpbC5zaG9wY2FybGFndWltYXJhZXMuY29tLmJygh13d3cuc2hv
cGNhcmxhZ3VpbWFyYWVzLmNvbS5icjBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AG9Tdqwx8DEZ2JkApFEV/3cV
HBHZAsEAKQaNsgiaN9kTAAABbFDBCh4AAAQDAEgwRgIhAL9K4IOxxUJ8H3eS7S+M
eOGB+jKSil3w1P4Zz2VxZBEEAiEAmcm8htRjwDSo2p2x8IYp8+8TsFxSX/s3Bb7A
ZFka+8sAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWxQwQkN
AAAEAwBHMEUCIQCKf1fnImStdtGG4a2fuxIFFkLad7pEZNT6N6P1muFC8gIgFFBT
Fo7RSMvxC7PmEuM6+iUW4ufIViiYxrQlaVva1eMwDQYJKoZIhvcNAQELBQADggEB
AHNacK6eEPFxZTjg0+LxHhpCTN9kJNU+cOboVTTyt45vqO1Kj1BP8Ir7VzNanlKW
mYs9aoEQNQ/jLn7kNuK8GfBGzXrEywH9otywtwdoEo2reP3fddT+eRGEeemByYh4
k3NOwzRkF5Lcx+APoD1UEX8DDviZTmfoe5VuUCPSPW+v8t0IIw7gyyMPXZsdiMYi
dEl7Ti4cLE4+XKPe9VZueDx2WRNZYYQ0rOtyXgEPkQF2FAJmxjyGxzuyZCNTt0dj
VLASMhVpohJeLQ4N6Q8gcyzsNtp5m9piqujVcLC9inVgL0WvDMVz2HsAMlvhISU/
5y7YEYJhcrNqRtB8zfYFMlo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxwP4fdzt0pdGSjdwgc7
Eq1zcJjJVrQszw3A/o3DcbwxZd4s284cYN2Vev0ni/8c6Jvb6dBBvaMGXMvDGQDa
Ri28LXmO0b4Izmcjj53Ioq/yYatdMz0EgSutJ7U9Rnn61rVohcwnOkqcQs0sZe3C
Vp4P9o61ioBKcb6QQfigzQjDnIn+Op1cYAodC1iWCiRtpRhLoZvhQhjjR6AJ3JeO
Nca3m6htHW4xU/mlYjdCHYab6FWWAdcrk0dlKdboX1VjD60S/BTOCrPoc/6uK/cB
k8Ev3giL8RRtCctXbLejdgduThnkV1rbkiWLM7HQKLnK2WrgQabg3lJ+DcB75s2b
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306309539127378253564496496167912032610761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 04:15:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 04:15:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopcarlaguimaraes.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23115447717310140549094168075743615243002864699976933964296187944714056307360860778949420025826040018029693233296276541666884282768082285042511243576809498568491953866444510645911762706862209486464812970247088564796288997541994727368548775362671589435902255029708008441875788816953376156299933929727196830707794852614078492372822507847433384756399348974597409705157601996274388168846625844633846939070334192035622294450259905537466430335254475676104633357920153689433535971906710086330121834884586071823993980490372902170258153964349780320732732344761975294813718438117705854645822443876281065395529066918472248564543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c09dce6137b6638cb0d52e21865b22693cb0fff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.shopcarlaguimaraes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.shopcarlaguimaraes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.shopcarlaguimaraes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopcarlaguimaraes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.shopcarlaguimaraes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.shopcarlaguimaraes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcarlaguimaraes.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c50c10a1e0000040300483046022100bf4ae083b1c5427c1f7792ed2f8c78e181fa32928a5df0d4fe19cf657164110402210099c9bc86d463c034a8da9db1f08629f3ef13b05c525ffb3705bec064591afbcb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c50c1090d00000403004730450221008a7f57e72264ad76d186e1ad9fbb12051642da77ba4464d4fa37a3f59ae142f20220145053168ed148cbf10bb3e612e33afa2516e2e7c8562898c6b425695bdad5e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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