www.labmanufatura.ufv.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:28:27:4c:0b:ed:37:ca:0a:2f:4e:a2:25:39:b4:24:d4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.labmanufatura.ufv.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:28:27:4c:0b:ed:37:ca:0a:2f:4e:a2:25:39:b4:24:d4
Serial Number (int): 308008915225266243985085188037584908199124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:9e:3b:68:3b:6a:6d:83:a9:09:92:5b:11:00:d0:fd:35:82:13:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:87:a0:ec:40:e2:77:aa:02:fe:9c:3a:4b:98:d1:2b:2c:1d:26:2f
Fingerprint (sha256): 20:eb:b8:60:d0:34:6a:3b:b2:75:bb:08:93:31:7f:e2:fb:dc:5c:0d:8b:22:67:68:39:ef:ce:e5:f1:07:d1:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.labmanufatura.ufv.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.labmanufatura.ufv.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.labmanufatura.ufv.br

Other certificates including the domain name ufv.br

(limited to 100 certificates)
beta.siadoc.ufv.br
labmanufatura.ufv.br
revistarea.ufv.br
sicon.ufv.br
wifi.dti.ufv.br
tls.automattic.com
gestbio.ufv.br
maurilio.cpd.ufv.br
campic.ufv.br
www.gdma.ufv.br
beta.cota.ufv.br
gestaoempresarial.ufv.br
www.nero.ufv.br
www.ufv.br
centev.ufv.br
insectum.ufv.br
www.asben.ufv.br
dpf.ufv.br
*.crp.ufv.br
www.infectario.ufv.br
tls.automattic.com
periodicos.ufv.br
revistarever.ufv.br
mcena.caf.ufv.br
chapa2.ufv.br
www.asben.ufv.br
www.sgs.ufv.br
lcp.ufv.br
r1.srv.ufv.br
comepe.ufv.br
www.gdma.ufv.br
tls.automattic.com
tecnoparq.ufv.br
www.jornalismo.ufv.br
cead.ufv.br
renobmg.ufv.br
www.mipufv.ufv.br
robotica.ufv.br
vidaememoria.ufv.br
tecnoparq.ufv.br
www.jornalismo.ufv.br
www.petedu.ufv.br
dpf.ufv.br
www.petedu.ufv.br
www.workshopdogrupopesquisa.ufv.br
mipufv.ufv.br
posgeografia.ufv.br
tecnoparq.ufv.br
www.deq.ufv.br
deq.ufv.br
*.cead.ufv.br
ufv.br
workshopdogrupopesquisa.ufv.br
ufvbaja.ufv.br
r1.srv.ufv.br
ssaca.ufv.br
*.guardiao.ufv.br
tls.automattic.com
comepe.ufv.br
edifica.ufv.br
jornadaprocardio.ufv.br
posmicrobiologiaagricola.ufv.br
rbas.ufv.br
insectum.ufv.br
gestbio.ufv.br
ambiagro.ufv.br
*.certificados.ufv.br
vet.ufv.br
posmicrobiologiaagricola.ufv.br
w2.srv.ufv.br
www2.ufv.br
grasp.ufv.br
pergamumweb.ufv.br
www.fitoclinica.ufv.br
sei.ufv.br
www.biomolanalisesclinicas.ufv.br
ccbioenergia.ufv.br
edifica.ufv.br
www.periodicos.ufv.br
ain.ufv.br
alfa.central-servicos.ufv.br
www.fitoclinica.ufv.br
cep.ufv.br
git.dpi.ufv.br
alfa.gespe-cadastro.ufv.br
tecnoparq.ufv.br
bbt.ufv.br
campic.ufv.br
www.pet-epr.ufv.br
www.cead.ufv.br
edifica.ufv.br
ggem.ufv.br
req2.ufv.br
www.workshopdogrupopesquisa.ufv.br
periodicos.ufv.br
www.labmanufatura.ufv.br
t-rex.ufvnet.ufv.br
www.dmb.ufv.br
adt.crp.ufv.br
periodicos.ufv.br

Certificate

The complete raw certificate details for www.labmanufatura.ufv.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308008915225266243985085188037584908199124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 05:06:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 05:06:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.labmanufatura.ufv.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697117339450377657910252299946097698852002092728433495370571736801870533850570907484281783390633416378456863592704835704062277857844515857642230913126042655015917565115112091477594171505176978481275221701305076882627696380009272521402940721946763456824222249998244375843236419636982334084984933614744508337731749876081419255877398153261986784538206779866584235575229100240688960933307409650637037430207774120777216017556954935092396562727503610379965921516440749716454677344594252263976828379202431370150147126015235434994989233486791126563003801799961570434907223708248618386062011691654964041898220823981589394769524024981794270960080207765756056982950204966072785520763453383762168489466187427580229427591234464499960562189314654343013054209774353897098598034407472692174328079638362415640810597151128296561038136014824440576090905478431092255903638207523364337131941979080550204343986466449475931392096452910763607902786834375320191379553874791257996828822030210545937590915911394241236089784296696263742526375629710188224762318391087911605608801328709910891199340081983130526434441843037155332405319537788627619525804562471968968889987237979355778240372713299442183276178877519925418028775545135971631200725721923419664554513973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f69e3b683b6a6d83a909925b1100d0fd35821322
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labmanufatura.ufv.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e206c05e10000040300473045022100f1d3ac2639a5c27194d720b65ec7d4b7d94fbbf6d2a21b22c86b6766956e533202203087810f54ee8434a5a7aa3283d6e2d652cb5df5d6d886e6213e641b6a67d77c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e206c05d300000403004730450221008d8a9842f87cd8bfc06aee1523e077436ef657384e6da35bc45c771fb1cab1e5022026bf29f56a30439b867e6a3075c394c9d14ddaf00e1b2eea9256adeb82cfcbaf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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