loja.novatronica.com

Issued by R3

About this certificate

This digital certificate with serial number 03:63:b0:95:03:de:db:54:fd:a7:fa:ff:d5:f3:0c:48:8b:cc was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=loja.novatronica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:b0:95:03:de:db:54:fd:a7:fa:ff:d5:f3:0c:48:8b:cc
Serial Number (int): 295259529978447475559592334982613484211148
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:95:f5:50:34:c1:21:db:e9:e2:fb:6b:e7:b6:4f:08:38:67:66:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:24:26:26:77:bc:88:40:0c:ff:b2:49:1a:2e:26:4a:11:2a:3f:27
Fingerprint (sha256): 22:d7:86:ed:39:8f:a8:67:3d:2f:a7:2a:22:b3:a2:07:e5:e4:8c:35:84:dc:f0:e9:4a:f6:dd:ac:d4:ec:a1:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate loja.novatronica.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loja.novatronica.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loja.novatronica.com
novatronica.com
www.novatronica.com

Other certificates including the domain name novatronica.com

(limited to 100 certificates)
novatronica.com
www.novatronica.com
mkt.multienergy.com.br
novatronica.com
tcremote.novatronica.com
mkt.pajunet.com.br
novatronica.com
tcremote.novatronica.com
mkt.agrobrasilia.com.br
novatronica.com
loja.novatronica.com
novatronica.com
www.novatronica.com
novatronica.com
mkt.dermadoctor.com.br
egoi.novatronica.com
www.novatronica.com
novatronica.com
novatronica.com
www.novatronica.com
roadmilestones.nvapps.novatronica.com
mkt.agrobrasilia.com.br
mkt.rfmsomnii.com
www.novatronica.com
mkt.batistacarioca.com.br
mkt.nutriestilo.com.br
novatronica.com
www.novatronica.com
mkt.algarveraceresort.com
mkt.dohlerhomes.pt
www.novatronica.com
www.novatronica.com
mkt.kingwine.com.br
novatronica.com
mkt.pedemeia.pt
novatronica.com
demo.surveys.novatronica.com
www.novatronica.com
mkt.estudodoaudio.com.br
novatronica.com
egoi.novatronica.com
novatronica.com
mkt.estudodoaudio.com.br
novatronica.com
mkt.pedemeia.pt
novatronica.com
mkt.castelomagico.pt
mkt.dohlerhomes.pt
novatronica.com
mkt.castelomagico.pt
www.novatronica.com
www.novatronica.com
loja.novatronica.com
loja.novatronica.com
mkt.kingwine.com.br
www.novatronica.com
mkt.rfmsomnii.com
novatronica.com
novatronica.com
www.novatronica.com
mkt.batistacarioca.com.br
tcremote.novatronica.com
mkt.pajunet.com.br
mkt.dermadoctor.com.br
novatronica.com
mkt.multienergy.com.br
egoi.agavetadodinheiro.com.br
nc.novatronica.com
loja.novatronica.com
www.novatronica.com
egoi.agavetadodinheiro.com.br
mkt.algarveraceresort.com
loja.novatronica.com
egoi.agavetadodinheiro.com.br
novatronica.com
www.novatronica.com
www.novatronica.com
egoi.agavetadodinheiro.com.br
www.novatronica.com

Certificate

The complete raw certificate details for loja.novatronica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295259529978447475559592334982613484211148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 08:00:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 08:00:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loja.novatronica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797947624217006035053468499886777365605747851657990078859091627229330715931501407735704237574109058858861509866386336793883079971180866879337692052804804455406056193636092561424236784913527012105226321379495286756069054225147964835810396646503518803434780747089770602841752025134232393448572612403898244920907731252444908060096322267241240346712995317705525352447828425194813104390714065926160901363254750664572234052064640992246706166906197861359866045668434250809751747474717986056818376763690736636418132927609640689826120632984865879068359845357216089155455089368315043141932126384501177479728575227617272539277956798279701957638068495691102688993716527964042713979630729875376580616239897520349465923833230454737686409010977078502736822666937562422541149969245216530152576260724235325116275220109923163213759679081130783737248513199663033794600791255847382656843727210321647199605978643096503372249763268328813412188487551364959069171894780770142012157432079819412229302134171961160786583354917224776464134350800026090988847253975291968975906159763969976157064817493383270846017365222608928248072918885232501484456558758479648685717108084463108122249036476988736768764708506801336851077108977893118995683097351095879915281067323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2995f55034c121dbe9e2fb6be7b64f083867665a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novatronica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c340e88c40000040300473045022100e01fa5aa31e9b924fc2a691e9ebdf85b7b5708c8afa55c5fb6c0eef288a968ad02200e347bcc6538ff92056a6dfee9932a1f90a06170967d743b0171ad89d999b36c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c340e899e0000040300473045022100a4006077086fd1bc7fe2489a71b20a3da983487d23a466605423ca949ac7be370220195199c655ab75cbabcc623afa29b78d8768f540d332bbb5df50a9b63eae8b6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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