nerdwear.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:81:20:76:9f:b3:20:91:c1:e8:67:35:42:8e:db:d2:45 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nerdwear.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:81:20:76:9f:b3:20:91:c1:e8:67:35:42:8e:db:d2:45
Serial Number (int): 312550851804354284982836089882230264681029
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:ea:97:f9:31:9c:fa:81:64:01:83:79:a6:ae:78:5a:eb:ce:70:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:3f:e7:29:5b:ae:68:e7:90:84:21:2e:ff:2c:4e:01:91:51:4f:5a
Fingerprint (sha256): 28:98:86:a9:ee:e1:4c:93:40:98:1c:f5:1a:dd:e4:c9:c1:25:67:b4:ff:1c:3d:72:d4:b3:ce:f3:f2:c8:a2:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nerdwear.com.br

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nerdwear.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.nerdwear.com.br
mail.nerdwear.com.br
nerdwear.com.br
webdisk.nerdwear.com.br
webmail.nerdwear.com.br
www.nerdwear.com.br

Other certificates including the domain name nerdwear.com.br

(limited to 100 certificates)
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
nerdwear.com.br
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
loja.nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
nerdwear.com.br
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com
sni43999.cloudflaressl.com

Certificate

The complete raw certificate details for nerdwear.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaIhZk76l2Tg/6EwKqTY
lR4rceRucC3a98sWzeL4VrhiK591vxmNDFcdlPvabWVFPXt05K/XcrhrQV9nE/ss
LDEjVuL27X6X5J7geJxkpJ4XpZg1Pq61/yOYUGaNqXb5Ivn7Gi02tiEl1jn3p450
VcAyXZiDTrWTh/GJP/eUMFw6Onfc5tQftAHQY6w6/95ViYldEr21k2OL7Mf44Mz9
cOsXnOjh3t1VSRK5pjbdgxPDeuHGocsrUdZpisCY80csdgfswWfEwlazbj8MQk2U
Wd4kSrEblBADLUdnqM0JqN8+O9nrQqMkpWciL+o6aW51ECgm4xQaoBFDzkFXLDCK
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312550851804354284982836089882230264681029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 04:48:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 04:48:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nerdwear.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24443942371660731504896916718031071577205089920420791360697204070488969349435517338611232012567218440366728197892627018378084575478440469177709513329498182804855106362819216130619496030811758174700322591311785471348731839052423585492879129997547135913856414263134695770727243142628578412593155913207647786007447950974575473841860617772323031572595378773138432779606680806646780061053945664383033069440928897264029463989483673586784730137719678260522910025831283345563680500632366394449155262841418803565478543604835831753964430831185522151673210120947253253100696685329762976469292642196227757899941990760308282526237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dea97f9319cfa8164018379a6ae785aebce705e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.nerdwear.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nerdwear.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerdwear.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.nerdwear.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nerdwear.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nerdwear.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016831279793000004030047304502204fd8342214f3904376de4e0fe592eb5902fa55670959eff0d80895d37b29c7fe022100cba47d6f9818020000ae413b6e46dc601be3d5e1d8a1b5ad4a890e474a86658b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168312797e10000040300473045022100f6ca476745f275774d568c787b946171b3a78200e131cb127294e4843c9182f802200bf914a2e8746f6341d5b663d5474e58da7e311a42e4439f7cbd413defd0fb2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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