www.megapratas.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:30:1a:f5:fe:3f:e9:91:ca:3c:be:74:11:93:77:1e:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.megapratas.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:30:1a:f5:fe:3f:e9:91:ca:3c:be:74:11:93:77:1e:77
Serial Number (int): 268206448066549593173647785134290036530807
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:55:e6:c8:ac:15:eb:f2:90:5c:e4:1c:af:8d:15:f1:fb:f5:46:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:34:b4:e0:03:b7:42:64:1b:53:da:6a:86:a9:10:91:d9:08:bb:2d
Fingerprint (sha256): 1e:61:7a:70:91:c1:c5:3a:a3:60:49:03:f6:7b:46:aa:73:3a:46:64:74:04:e4:57:ae:d2:38:cd:49:f3:15:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.megapratas.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.megapratas.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.megapratas.com.br

Other certificates including the domain name megapratas.com.br

(limited to 100 certificates)
www.test.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br

Certificate

The complete raw certificate details for www.megapratas.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268206448066549593173647785134290036530807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-08 05:55:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 05:55:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.megapratas.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698811002724951662479394855739933426697109303419586351482291330333400369472960601210891860477955282025362146138563360919596103949162024437413802684909357385828368536850438460944529341120093705847062402261091477540373538026481375115455576277149221779685018329226288325592814912216897300257059534139958771587200838898776178775814079110184270556427824045057762149290691989347718665021989032036849816163392552781893066619407233440500941326899140151703733536541116075010857273639578205806251563198573373080550788270247583396839110528916004187619672770986128654059894418707704458617564086805977491473713113807054733017209505083716263496417845557910577301803361175425660834978408655263702382566089326597730679030084720132665952574899482096369325008792064999336584748947130587571417046037745419679336061059608054424385197023508798445234835018669480928101144938033222185312320213165033434422340754221733179240565015446005590555196271602007009743087881171850270573183169358331474442006553551036090270382600567073453401796049980162925259502737137808563214227315853238946549562795341154934020178653387138360233710157124233791388129583406807010725120286101832578895958518428160454718820177310373603592431333175621087842983963515540929789428115053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d655e6c8ac15ebf2905ce41caf8d15f1fbf5469d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megapratas.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165b7f709250000040300473045022100c84e0fc31efa19ad516d58cd960e31ecb215cb420d56a4172f8445e749a1c6e70220519c8770f5397d396b4cd2cb7baa32d7784d909d143a34fb0cb72e2dc450c96d007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165b7f709410000040300473045022100b9cad6bce7b65213ad9ccc5e0f2d5dfa46697a531d437e4b506c0f04b563343f02206a6ce7a0695ac2c0a474824fa8b929cc10b16da0f0ed58b510d06793474a168e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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