avnida.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2c:6c:58:dc:ad:06:c8:31:a1:6e:3f:52:c4:79:6a:87:e7 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avnida.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2c:6c:58:dc:ad:06:c8:31:a1:6e:3f:52:c4:79:6a:87:e7
Serial Number (int): 276453299961309038159297005364860074756071
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:bb:4e:21:9c:e7:d3:43:72:d4:18:ef:3a:cd:ce:ba:98:2b:8b:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:a3:3d:cf:0c:f0:71:6f:80:65:76:40:fb:aa:73:03:08:d5:28:8f
Fingerprint (sha256): 18:66:ca:3f:2b:e2:dc:76:20:b6:65:54:fe:59:be:79:43:a0:b4:96:bc:c6:4d:35:69:7f:06:47:6c:7e:4a:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avnida.com.br

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avnida.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avnida.com.br
ba.avnida.com.br
mail.avnida.com.br
se.avnida.com.br
webmail.avnida.com.br
www.avnida.com.br
www.ba.avnida.com.br
www.se.avnida.com.br

Other certificates including the domain name avnida.com.br

(limited to 100 certificates)
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
www.avnida.com.br
avnida.com.br
sni206984.cloudflaressl.com
sni175095.cloudflaressl.com
www.rolhalivre.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
play.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
cloud.avnida.com.br
www.getpaar.com
sni206984.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
cloud.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
painel.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
painel.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni206984.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
www.emcantomeu.com.br
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
se.avnida.com.br
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
cloud.avnida.com.br
sni206984.cloudflaressl.com
sni206984.cloudflaressl.com
sni206984.cloudflaressl.com
sni206984.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
se.avnida.com.br
cloud.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com

Certificate

The complete raw certificate details for avnida.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vyP/8Z5hqQgqBjjBjaC
9BNZZBzP/E6HMXxPKSIr3gly+oD+zqQBQg136H2e4+Nt33GZ4Hz5h9E0LuCGtK1a
hcx1f+qhVlc5zEyrzlwJwMWnfmB1EKx1XLzsCEg2HFJoBSQsORhlukkewLDCSK/+
bWbnLMi50v9UI1ucBepFPyvYZYbx5A4B5OlTGoUSTcg9myuanjgP/gn7j0mW8Nrf
zqdwMqKUnX0cxhQTFCCMFhejA5Nx2SJtEQhymTkgdbvoz3+VeDeblIziFb9QRBf3
1T3TBHobmk7bzc5CzSZ8eVYUwg6LyxaD3CP10QQFR7TYgmXissGE9ajPAjIF0xeN
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276453299961309038159297005364860074756071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 02:47:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 02:47:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avnida.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27644493691449012108285078311372294779283391376694764682780102031598252255759871556747773977705201142128874495706881887716283359192560025183880824332732322541757818117412593090227762140922554771195205606460087076571658917681845137755134732319492660976424230963212293249938568887956923256772880946662861483136023078634613488653271022580538826501536787113811718525068562583556111542876340587899381279659204740145221245597744469159111825168320044756887172338891152607323362390789446121078587815487619914730855522890086948173489122427998322859106453060793071203148050599232272330766821530820632691022420473267354391252383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06bb4e219ce7d34372d418ef3acdceba982b8bcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba.avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ba.avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.se.avnida.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e062cb4880000040300483046022100925ff269d0cd86cb5e1dd66a01903df0972b74f5fa0ae26998e953101f4177ff02210095eb1851ae0f6a4c63f40252d0778d38e57ed4575e32ce88aef2eb79c4b43abb00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e062cb4ac000004030047304502201f8092c0670e96e6d139e043fc24f7e223d214bc91f6a1f71d4dd8cd0ca3d1e4022100abf01a255c196972e73f4c9848328077e2ff2b73836c57dfbf8921075696aa97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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