lgpdtotvsux.nuvemx.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:7d:a4:67:17:38:c2:bb:c5:7f:71:f3:6d:4b:6f:3c:a5 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lgpdtotvsux.nuvemx.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d5:7d:a4:67:17:38:c2:bb:c5:7f:71:f3:6d:4b:6f:3c:a5
Serial Number (int): 421096295008286796992873302538067551141029
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:c0:eb:e6:f8:00:48:cf:d1:2e:7e:d9:12:c8:2e:95:91:90:84:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:06:74:0a:f3:ed:d2:13:a3:4a:2c:cd:a3:b6:54:0a:b6:4a:fe:e3
Fingerprint (sha256): 1a:61:3b:53:67:20:2e:df:92:87:fe:2b:19:ee:76:9f:b9:d9:3f:24:b5:df:ec:8a:00:b0:ec:ba:6e:48:1a:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lgpdtotvsux.nuvemx.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lgpdtotvsux.nuvemx.com.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lgpdtotvsux.nuvemx.com.br

Other certificates including the domain name nuvemx.com.br

(limited to 100 certificates)
lgpdavonale.nuvemx.com.br
lgpd.mmcorporatelaw.com.br
businessgenesis.nuvemx.com.br
grcdemo.nuvemx.com.br
lgpddata.nuvemx.com.br
everest.nuvemx.com.br
lgpdalbertsabin.nuvemx.com.br
lgpdtotvsux.nuvemx.com.br
lgpdconceicaorioverde.nuvemx.com.br
lgpddemoux.nuvemx.com.br
lgpdpostopresidente.com.br
lgpdpmi.nuvemx.com.br
portallgpd.lojasmm.com.br
lgpdmutua.nuvemx.com.br
lgpdteste0715.nuvemx.com.br
portallgpd.stoccheforbes.com.br
vivver.nuvemx.com.br
businessnec.nuvemx.com.br
santacruz.nuvemx.com.br
lgpdunipam.nuvemx.com.br
lgpditauna.nuvemx.com.br
lgpdcoqueiral.nuvemx.com.br
lgpdband.nuvemx.com.br
lgpdmpevazia.nuvemx.com.br
lgpdbelago.nuvemx.com.br
lgpdsinprosp.nuvemx.com.br
lgpdsonda.nuvemx.com.br
lgpdsuporteemx.nuvemx.com.br
lgpddediccar.nuvemx.com.br
businessembol.nuvemx.com.br
cedro.nuvemx.com.br
lgpdbasicdebleison.nuvemx.com.br
grcvazia.nuvemx.com.br
portallgpd.bbmlogistica.com.br
portallgpd.tppf.com.br
portallgpd.defensoria.pe.def.br
lgpdmpeparceirovazia.nuvemx.com.br
portallgpd.rfconsultores.com.br
lgpdhtb.nuvemx.com.br
lgpdabr.nuvemx.com.br
cs.minhaitatiaia.com.br
portallgpd.taua.com.br
lgpdpmi.nuvemx.com.br
precavida.nuvemx.com.br
csc.pluro.com.br
portallgpd.fibracem.com
lgpdtotvs.nuvemx.com.br
lgpdtvanhanguera.nuvemx.com.br
lgpdexcellence.nuvemx.com.br
lgpdquintera.nuvemx.com.br
portallgpd.defensoria.pe.def.br
grupocataratas.nuvemx.com.br
ouvire.nuvemx.com.br
lgpdcobasi.nuvemx.com.br
lgpdteste0823.nuvemx.com.br
lgpdpoclgpd.nuvemx.com.br
lgpd.gndconstrucoes.com.br
portallgpdraf.com.br
ingra.nuvemx.com.br
aprs.nuvemx.com.br
lgpdiosr.nuvemx.com.br
lgpdcarglass.nuvemx.com.br
portallgpd.pitchonimoveis.com.br
lgpdagricolaalvorada.nuvemx.com.br
pjus.nuvemx.com.br
nexusliga.nuvemx.com.br
faj.nuvemx.com.br
lgpdkinoplex.nuvemx.com.br
lgpdembol.nuvemx.com.br
lgpdclm.nuvemx.com.br
lgpdbreitener.nuvemx.com.br
alianca.nuvemx.com.br
grchect.nuvemx.com.br
grcnowcy.nuvemx.com.br
lgpdgloboaves.nuvemx.com.br
lgpddpmg.nuvemx.com.br
sd.nuvemx.com.br
lgpddemo.nuvemx.com.br
lgpdmatterhorn.nuvemx.com.br
portallgpd.emxtecnologia.com.br

Certificate

The complete raw certificate details for lgpdtotvsux.nuvemx.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAjMZ8hvzyZJ6qAg9Xxjuz
K/SnSAH2EyLnomLVvgXJWKtNvj7wTzCLWUauji0+or9/w0W+E8WpBUA8qd/PZt9v
Dr+MHXm3KEe1Qek7Uuha7ivTotVXuxSiFE2dHWLgY7wkCweKYmJxw3GIqBem5Si9
lpys50ojk8ciTD+vB7sOJd53vJl+/k6s6Ogng0d1aZUslMVgLdhnI7XAOyMUOW76
LgJRpCFgAThym4wMbQy7M0P6JBxZu7ty/QoNaeZ24gerdfFDzUbZic+nEgACv75S
DlqePAYAAlbHeeB+7fSAF/HrbKijGCSsubsdfHxMxcD1XX1g6x+MdttaDQ/6mlZa
uG2LWcxGI9pLxS3bvOj5yNcYdTM2UAs92y8QlF7MbM6n8T5aI8NpehxivqFoCbjs
eL/5JTFJVstpqdm/WO4zbJeFItnmyvEePVcyUxXZyonAgS+nNAh3R5OTRdCPGT6w
RzEuETWvS6DkWgiNgnDu2rUc0HULEA60g343EKXITMWnAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421096295008286796992873302538067551141029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 12:28:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 12:28:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lgpdtotvsux.nuvemx.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3194723615347425668747644759786469664480153400368978655987640352590713754932571590770284738073900075398990399404411286496216676508893265269643681315652653729613568538608014989618726561400508496384944871500788512514760362418345306751060619684830031543260209800281831616546404888913085078606498932525719857422257551937284344527347417981933312207028710010449463141010257033403325638201094774547362180033012063227692100171810872802145298459729171777308382874914607609847771323975102864355311323642852728123822653516012106854480016616672997505376167191593398054865685024595504301515997737820339093747713207731328773440241566552142158680146525810995546289001279154605817933227313589998114515275576188791395780072858694942205833023557367825290499075369308839396902031878752397998392615698414737623215832963472476372242827273291649794579313033495071384296436678047359401236675185580155211638333663055552115466180026746067202467480999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fc0ebe6f80048cfd12e7ed912c82e95919084d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgpdtotvsux.nuvemx.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6132d40400000403004630440220214f4ed1fcd971b44d55f557b65195c608fd0393752b2feef0d0e29c319401400220185888a174225776317f3dbab271d4045c282535ed034270abe74a9f6de4638700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e6132d4080000040300483046022100d9b7e0f371b91439a83891a079f5adcf808075cfa7ee9722b4b6b157903108a002210093a671594873faee25318fe31910e5133ad043100788cfae138087e1140a09d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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