casaisliberais.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:2e:0f:b9:2a:27:e1:2a:17:e4:93:5d:9d:3a:40:a1:38:de was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=casaisliberais.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2e:0f:b9:2a:27:e1:2a:17:e4:93:5d:9d:3a:40:a1:38:deSerial Number (int): 277010746523520298646743364695183161637086
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dc:3d:ab:cf:d5:dd:12:fe:1d:96:5f:b2:66:63:69:04:0e:a5:e7:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fc:c1:fa:ae:af:e4:92:99:57:70:f5:17:3c:ed:d2:99:43:20:20:f1
Fingerprint (sha256): 24:71:e1:18:a6:0e:88:49:13:e8:94:67:7f:0f:7b:75:12:2e:06:e9:f6:87:ca:cc:ef:8a:0e:3a:d1:b9:28:04
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate casaisliberais.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for casaisliberais.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
casaisliberais.com
Other certificates including the domain name casaisliberais.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for casaisliberais.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISAy4PuSon4SoX5JNdnTpAoTjeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTIwMzI0MTNaFw0x OTA3MTEwMzI0MTNaMB0xGzAZBgNVBAMTEmNhc2Fpc2xpYmVyYWlzLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOD7DKU8zUyPYJbnG3IPtS82Xjyw QT+MbEmZKPW5jiaQ4qfaV43GBpPLQTx05A1brUECuvlPI8uidxDNXOXkSuyoqtx7 UOp5DtUzE05KPDXiyW68FLQhvbDGT1+TdBUWNkv9U4QBHpnjvl1XQpQHaIpsC0Tx qYhmoCPA8RswDP23eBENc6/5eTx1hg/2mSchsGbY5ruQZk9J9j00tIluVuMFJBsK c3IhTjTWlWn4BngfTQRBKja5NaJT9UQ1ZskpJQpvSanbt8Ke66gJbq6yobBv4p5q YK1Djpr68ysfoBd3FNoafAsi+jIDLEHs1lmnmZxmYc5vp/q9pRgKkN9ij7k09Q+M L8XlhTUTSb3zF+ZMy9gB8CgQunGVTr30Ei7qAJiEUdEXNnJ/2AEqIGRTM5CD6YNc dtuaRnLwXB3RxBBdIE/RZC4TwyQ2m4cHm4tcp7ZNbWTJc/dNU+2eCOHpnhGQZTOo x2Tiu9SR9fqOXtbNg1IXYbeG6av6hJgNaP2H2fvdEUY8h++EaPhgE4NJWTo9FaIm QZeRaCn2VjkjSQTzfzNJV2IUfUXOVaCcwZjqcNI7t+MjHjOCtcqbmGQtoYnmf+ol JamhVL53e4yp0h6tL5V49LP53YWGt6X+LIf3Hxji9ppmdBq0n+b19ytK1lb2j8WO /Gkk1Dw7kemkibIvAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FNw9q8/V3RL+HZZfsmZjaQQOpefMMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISY2FzYWlzbGliZXJh aXMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYA AAFqD8nw7wAABAMARzBFAiEA63n6Rtc/45+JWZrfL4ppwe9Ir4FwOxc09QHYjWRL CAICIFLEdEMUtnZbVq9r2/szHlkc0OnGU3NMZhfQXfoQndxdAHYAY/Lbzeg7zCzP C3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFqD8nzTQAABAMARzBFAiEA7E5AJ15a +Xcb7+59RH1SjvvtkaCRXp5mQLK4zO+CNA8CIHPScEZBtr9awvFIO6i+Gv1gzpJE CEUn7mZHNd3JwkufMA0GCSqGSIb3DQEBCwUAA4IBAQCFoUY20iga3aiJ4aTJkquq 71eaEQz+kSsgCJo7d8fNrvN5ATm6XBqp2tEDbBXAD5ZFPMPPSeqaqi0TLxXo/trK LU6/VsI78N7meUkRZhtmTkDWTSUYwYXFJHLjAZrh8joOTtJ9xlZUmiQnRpOrMxDz LDs7coqSCWsFE8JCigxpTnlks4fZ6sei3Ht682HHX2W/VB/f87b2GutuQfMhs+Ou uQsWQWq+cF9/5DWFnMTeqi04eNj+OveIBHKDghyBlCw9b3bDIhcS336rd7zl8Dqc mmgAkjAUlVlPKPNW9KSvynqQ7u4mOPVpWPGRHovGDTmPDxrqzIsFZWZnrjZPMAlC -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4PsMpTzNTI9glucbcg+1 LzZePLBBP4xsSZko9bmOJpDip9pXjcYGk8tBPHTkDVutQQK6+U8jy6J3EM1c5eRK 7Kiq3HtQ6nkO1TMTTko8NeLJbrwUtCG9sMZPX5N0FRY2S/1ThAEemeO+XVdClAdo imwLRPGpiGagI8DxGzAM/bd4EQ1zr/l5PHWGD/aZJyGwZtjmu5BmT0n2PTS0iW5W 4wUkGwpzciFONNaVafgGeB9NBEEqNrk1olP1RDVmySklCm9Jqdu3wp7rqAlurrKh sG/inmpgrUOOmvrzKx+gF3cU2hp8CyL6MgMsQezWWaeZnGZhzm+n+r2lGAqQ32KP uTT1D4wvxeWFNRNJvfMX5kzL2AHwKBC6cZVOvfQSLuoAmIRR0Rc2cn/YASogZFMz kIPpg1x225pGcvBcHdHEEF0gT9FkLhPDJDabhwebi1yntk1tZMlz901T7Z4I4eme EZBlM6jHZOK71JH1+o5e1s2DUhdht4bpq/qEmA1o/YfZ+90RRjyH74Ro+GATg0lZ Oj0VoiZBl5FoKfZWOSNJBPN/M0lXYhR9Rc5VoJzBmOpw0ju34yMeM4K1ypuYZC2h ieZ/6iUlqaFUvnd7jKnSHq0vlXj0s/ndhYa3pf4sh/cfGOL2mmZ0GrSf5vX3K0rW VvaPxY78aSTUPDuR6aSJsi8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277010746523520298646743364695183161637086 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 03:24:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 03:24:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'casaisliberais.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917841021941564529039976358165363229727020013799480904089830409337646781403190515218770228394449920609709377600875048875246021519118810016968899214616271774549195553752884072764921953178716008194933932207051799062357754954849521677380900166667559283380738940926396563632679642472646731819989467307085460058759575077088852289690074282951886813594304356479285728187730906396220689032267159976027066810761621211443283529900939207043901275196013028392004870549712641027609207075643778447321467470127626165197416390748523156163919523494854082050258421565916504999484681923077007658719254676169791602012881114929448256829289775086864959363933924632502420834640771543451217042278738583502543893921516586641215271934127914284393137008842301260448261304391151269701077830438939609783613832364982982909712356005619484265868516616428141219526839763242026819886021441708313556533323057135722986052753136768285707077493629086574942637052990663357640692226662841433718687858165690110888113292862465097406139890014560753374723728524057075741802421856612722267004114585637561699948779230083326190373071200952899278548201562893326412348656678794095670432046987715802267161397778764978608357158715346610928229948762034454609744189218932049368679297583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dc3dabcfd5dd12fe1d965fb2666369040ea5e7cc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaisliberais.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a0fc9f0ef0000040300473045022100eb79fa46d73fe39f89599adf2f8a69c1ef48af81703b1734f501d88d644b0802022052c4744314b6765b56af6bdbfb331e591cd0e9c653734c6617d05dfa109ddc5d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a0fc9f34d0000040300473045022100ec4e40275e5af9771befee7d447d528efbed91a0915e9e6640b2b8ccef82340f022073d2704641b6bf5ac2f1483ba8be1afd60ce9244084527ee664735ddc9c24b9f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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