hpainformatica.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:ce:1c:c5:00:0e:a5:ea:82:5b:06:61:4b:88:90:1d:67 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hpainformatica.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:ce:1c:c5:00:0e:a5:ea:82:5b:06:61:4b:88:90:1d:67
Serial Number (int): 331368713361156081884570477659773490699623
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:5e:53:52:ce:75:fa:b5:fb:f3:99:c8:9f:b5:f7:05:a7:03:f8:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:4d:7f:07:34:31:70:79:39:2e:2e:fa:89:e5:85:69:60:3e:65:8c
Fingerprint (sha256): 1e:39:5f:1e:43:4c:14:87:07:00:b4:ca:1a:fe:53:ff:ad:90:ce:7f:80:a0:f5:80:27:63:15:4f:89:ee:60:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hpainformatica.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hpainformatica.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hpainformatica.com.br
www.hpainformatica.com.br

Other certificates including the domain name hpainformatica.com.br

(limited to 100 certificates)
helpdesk.travelleaders.com
helpdesk.travelleaders.com
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
hpainformatica.com.br
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
sni.cloudflaressl.com
helpdesk.andersonmt.org
help.windownation.com
support.japara.com.au
helpdesk.travelleaders.com
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
servicedesk.guardianalarm.com
helpdesk.andersonmt.org
hpainformatica.com.br
helpdesk.themetropolitanschool.com
sni217035.cloudflaressl.com
helpdesk.travelleaders.com
helpdesk.andersonmt.org
sni.cloudflaressl.com
helpdesk.travelleaders.com
servicedesk.howardbrown.org
sni217035.cloudflaressl.com
helpdesk.pvasatx.com
helpdesk.travelleaders.com
helpdesk.travelleaders.com
sni217035.cloudflaressl.com
sni217035.cloudflaressl.com
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.travelleaders.com
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
hpainformatica.com.br
helpdesk.andersonmt.org
sni217035.cloudflaressl.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
support.goodwillny.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.westernglobalairlines.com
sni217035.cloudflaressl.com
sni217035.cloudflaressl.com
sni217035.cloudflaressl.com
sni.cloudflaressl.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
servicedesk.howardbrown.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
sni217035.cloudflaressl.com

Certificate

The complete raw certificate details for hpainformatica.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331368713361156081884570477659773490699623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-31 03:30:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 03:30:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hpainformatica.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893489257276275400115846737591891244847452543487347766689889722966049233545458313126310718800142616476756312335335823103072303774300655906309255816346390712159584663782373686104624534319932587425675662640227601439282489190829214626707424420308338948271366987092086822670654297130950467007009189697397730658821126281858735998106200521297367812196586569037845206242976159136538667739631648568872758300357076857489848119618198033372410719922104599372959860228264560704389733337471465116819816577410482670197264041746545471074827238269552593023718278432668373417417033429495105978970707642084057111421219247768537415065232825218586114229576359832231979506704851764912397826965276834074423537131083421546521904637992332883490353722587125413746176540467269204010706946998417896950765267087399509030374442637765229691486535480236338015764610391687108606773409012990234478778846988711833390220812201307489557055637586274679193888692297412420478059273669206453807922771243183704314701741980817819628917946759497780015424990395546891782176356807611646590432964396340134829033460733135924077095759680202409288212941247365860031412848111006560645233203120249620162064746567766282669555651738231856547657616069699142736424954164017702766579019859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							695e5352ce75fab5fbf399c89fb5f705a703f892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpainformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpainformatica.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164ee9a4150000004030046304402206d21dcd11a42c5572df577b1d99d0f3561fa95157ac72f88899a9a23a7c38e2d0220792b1acb9bbd7d14914b2d09abc633973c744dc30881c65cb48fc288890492ce007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000164ee9a40590000040300483046022100bcc1a9dff48dc532a28ba8032b94620283370825791d3e2f40fb052f061eda99022100b51ba45e3afd15230511042c4d2bdbaba5dd2b1cc80251823857e3052a3cdc8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0099df2ebb1f8f319181a3fef614b84daef885c29b72ab71d8cca6a9b9a3490ef038460e9095d895d158b96f1af5990edd29d6d17372872eed135942400a677b73a7a8efff12f38190cf0982953721870a8228b934431e743bf68d89f4155582c68f0eb7c06532d09ee0211e7bd91496b34aabe23bb351def83162c8d4ad14d82f62f9c712eecf1eab712487d812b35b461b213f062686d5058506d6e1d934cc8d2e190212eb0e65d5ef3048981111fcd28590f054c08ff79aa83f44e32898ba3baa6fd41989c1233291b026a3557c2ecefec755d9bea6cebef23316c7c46cc61a542f01279ab2f4884a50c07ea6552319228afbcffb017c05f56243d4c0b3f66b