ggem.ufv.br

Issued by R3

About this certificate

This digital certificate with serial number 04:3f:80:db:9d:8c:e2:35:13:0f:ea:98:ab:1c:92:90:9d:3c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ggem.ufv.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3f:80:db:9d:8c:e2:35:13:0f:ea:98:ab:1c:92:90:9d:3c
Serial Number (int): 370058214335032856444286429929406137933116
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:c6:c3:59:a5:03:34:43:88:47:e0:42:f6:ef:cf:a3:78:c5:38:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:21:d9:8c:aa:b1:ce:34:bc:67:4e:c1:a3:9a:58:cc:e7:49:54:74
Fingerprint (sha256): 1f:88:d7:a7:52:81:c0:aa:5c:8a:68:d7:db:9a:dd:94:c8:4e:44:31:ff:96:e1:28:40:5f:d6:9b:b6:98:ab:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ggem.ufv.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ggem.ufv.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ggem.ufv.br
www.ggem.ufv.br

Other certificates including the domain name ufv.br

(limited to 100 certificates)
beta.siadoc.ufv.br
labmanufatura.ufv.br
revistarea.ufv.br
sicon.ufv.br
wifi.dti.ufv.br
tls.automattic.com
gestbio.ufv.br
maurilio.cpd.ufv.br
campic.ufv.br
www.gdma.ufv.br
beta.cota.ufv.br
gestaoempresarial.ufv.br
www.nero.ufv.br
www.ufv.br
centev.ufv.br
insectum.ufv.br
www.asben.ufv.br
dpf.ufv.br
*.crp.ufv.br
www.infectario.ufv.br
tls.automattic.com
periodicos.ufv.br
revistarever.ufv.br
mcena.caf.ufv.br
chapa2.ufv.br
www.asben.ufv.br
www.sgs.ufv.br
lcp.ufv.br
r1.srv.ufv.br
comepe.ufv.br
www.gdma.ufv.br
tls.automattic.com
tecnoparq.ufv.br
www.jornalismo.ufv.br
cead.ufv.br
renobmg.ufv.br
www.mipufv.ufv.br
robotica.ufv.br
vidaememoria.ufv.br
tecnoparq.ufv.br
www.jornalismo.ufv.br
www.petedu.ufv.br
dpf.ufv.br
www.petedu.ufv.br
www.workshopdogrupopesquisa.ufv.br
mipufv.ufv.br
posgeografia.ufv.br
tecnoparq.ufv.br
www.deq.ufv.br
deq.ufv.br
*.cead.ufv.br
ufv.br
workshopdogrupopesquisa.ufv.br
ufvbaja.ufv.br
r1.srv.ufv.br
ssaca.ufv.br
*.guardiao.ufv.br
tls.automattic.com
comepe.ufv.br
edifica.ufv.br
jornadaprocardio.ufv.br
posmicrobiologiaagricola.ufv.br
rbas.ufv.br
insectum.ufv.br
gestbio.ufv.br
ambiagro.ufv.br
*.certificados.ufv.br
vet.ufv.br
posmicrobiologiaagricola.ufv.br
w2.srv.ufv.br
www2.ufv.br
grasp.ufv.br
pergamumweb.ufv.br
www.fitoclinica.ufv.br
sei.ufv.br
www.biomolanalisesclinicas.ufv.br
ccbioenergia.ufv.br
edifica.ufv.br
www.periodicos.ufv.br
ain.ufv.br
alfa.central-servicos.ufv.br
www.fitoclinica.ufv.br
cep.ufv.br
git.dpi.ufv.br
alfa.gespe-cadastro.ufv.br
tecnoparq.ufv.br
bbt.ufv.br
campic.ufv.br
www.pet-epr.ufv.br
www.cead.ufv.br
edifica.ufv.br
ggem.ufv.br
req2.ufv.br
www.workshopdogrupopesquisa.ufv.br
periodicos.ufv.br
www.labmanufatura.ufv.br
t-rex.ufvnet.ufv.br
www.dmb.ufv.br
adt.crp.ufv.br
periodicos.ufv.br

Certificate

The complete raw certificate details for ggem.ufv.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370058214335032856444286429929406137933116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-31 02:04:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 02:04:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ggem.ufv.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738266104329965014093448456245308602771364595249607544951247021739338543830279801209844196248684320287339365351685211826514574463692530463531402556133100530055350834140259115954235633517394114273103960110340638528297638944590963600651866839051577938020306001076352422433754471781669229612427424946041477441714335298505784547394336728737743336595012850165149818627033844617117873684100058329444585196006996418016131445995791023461844150361038072883893005993390934186539300367690618418514234762750915400336447966513760415989939958366895668917397446107801173107560003012334828286611353087312708516325116560865726506228979280268915076080899489433524483660167183811790582815369412835115212588371525499102775630536321912677209549465315013674826643757364580163098292547040961419306338176228244419992660736845847102806489966971914998803668941436141595299147227245145506570072378545659519185153857833554648319363599117466174660042181932201607908639818314308735972575461880694283478467757471544428480484434909211995376759348012404241866760748931829131685690190887293016300307969315405200648815860565358876287640241284635196531846630253185759691957005815266151408688192275975718816706332963324387819994548459657831570217684922213792632449153973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1c6c359a50334438847e042f6efcfa378c538c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggem.ufv.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggem.ufv.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187359fd81c0000040300473045022045ea90b819cd06d3b1f93924f87ffd8b58a8adf1ba651944158a841a5a4e8c2f0221008ca4fe36e69802675db1adbf503320d6a602b48e316843582ffb0aeae2675206007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187359fd8670000040300483046022100d186743c315565105f626a332733ad44a00f4f7f36d8d9fa525a736657491127022100f49ce60d9733456a159648b34915e0cd2ad98fa4e379ead8dc8622d1149b85fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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