gecex.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:51:a7:a5:bf:fe:f1:f6:cf:78:aa:32:08:e6:87:92:ad was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gecex.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:51:a7:a5:bf:fe:f1:f6:cf:78:aa:32:08:e6:87:92:ad
Serial Number (int): 266549631242137835745638073414829753209517
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:6f:25:d6:48:d4:57:6f:c6:e1:3f:63:82:3c:74:cb:b7:5f:76:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:ad:ee:c3:73:46:53:24:e9:1a:44:60:f3:1b:2c:f6:2b:80:6c:57
Fingerprint (sha256): 23:d3:12:7b:86:50:54:61:7a:b8:7e:a0:1c:02:17:97:cc:36:01:e6:d0:28:d7:90:d4:3c:ae:fc:e8:a8:ab:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gecex.com.br

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gecex.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.gecex.com.br
autodiscover.staffinformatica.com.br
cpanel.gecex.com.br
cpanel.staffinformatica.com.br
downloads.staffinformatica.com.br
gecex.com.br
gecex.staffinformatica.com.br
mail.gecex.com.br
mail.staffinformatica.com.br
staffinformatica.com.br
webdisk.gecex.com.br
webdisk.staffinformatica.com.br
webmail.gecex.com.br
webmail.staffinformatica.com.br
www.downloads.staffinformatica.com.br
www.gecex.com.br
www.gecex.staffinformatica.com.br
www.staffinformatica.com.br

Other certificates including the domain name gecex.com.br

(limited to 100 certificates)
www.staffinformatica.com.br
www.staffinformatica.com.br
*.staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.com.br
staffinformatica.com.br
www.staffinformatica.com.br
staffinformatica.com.br
staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.com.br
gecex.com.br
gecex.com.br
staffinformatica.com.br
gecex.com.br
www.staffinformatica.com.br
staffinformatica.com.br
*.staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.staffinformatica.com.br
gecex.com.br
gecex.com.br
www.staffinformatica.com.br
gecex.com.br

Certificate

The complete raw certificate details for gecex.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LKB3THctfS+qZSaBLPs
lA2eYu13Vu0NORfRybHMRh2fvc4zrhtb6O4siILj86R47KAHQGmPi01XADh/w2GJ
82sgnyAz58aEdmowz7rwE/y3chWHTj0XAh/nqdLF7Qt2WMle4HRNsfYB9MXqfQAE
7HK9aKKl4WPRIZ15OOAYB5woJPWl0ueJrR9DJpakBew1Ua3jTdUs9XZoLXJSa1bL
yHSJsiTrteg7vbZ24JycmzVkqfLi3x64xzVvVSkQEk+B0ACYWu2YCZQRHiDTtZoC
X3SZu0axMIMROLnpxqULZlkhbDt/vyqXUBj5RBc9U1QSyodd6Rfw5xup8HLpPMLn
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266549631242137835745638073414829753209517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 11:17:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 11:17:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gecex.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28870358753471728780930439206022389399650535774994182736646905560997334909853723767992700953763453450675841504884544304276034411919094294774388169270483206857528559528609571004742997637849345320152595299496158290451319633245194256139862402018123893586155790472937586090189680298057560952790423598971429130024803692909306481003443499839595005582989414419793084340289420614129241828346652197881060632393809634057860431657819860906878543673968143978474095956449309372228077303733956575747011463064304745027548844763472469464142147652865499435971653674577547083132105604950715849633298564277605372418934018922051946080237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							086f25d648d4576fc6e13f63823c74cbb75f7660
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (507 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecex.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downloads.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecex.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169b9ef355b0000040300473045022100f5236854aa9c123f142394bb173c90d561d417eb9702ba683d707a89a4eb414702206554cadee631857631d8d308b96ca6695d4134bd1e09ec4437212f360158cee8007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169b9ef337b0000040300463044022011bbeb402ed8cc580901cc488bd98474afab3dff3201e419a5c1bf1df2c3e7230220044afa337338d50fa15aeee1ecb13f2fa83d71f167a4f427c5b23db8fac4fa7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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