b2wdigital.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:24:d9:64:f8:ae:e4:f8:f7:f1:ae:38:a4:19:11:25:dd was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=b2wdigital.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:24:d9:64:f8:ae:e4:f8:f7:f1:ae:38:a4:19:11:25:dd
Serial Number (int): 278399957125537894013281389803358710212061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:51:5e:2a:26:e8:53:fd:fc:a7:06:67:55:82:ff:a0:66:0d:80:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:36:63:a1:c9:3d:bc:6e:a5:77:10:d6:d7:58:46:8e:45:53:70:06
Fingerprint (sha256): 29:56:e9:f9:e2:04:12:60:47:a1:7e:69:52:27:f4:5a:0d:23:43:6f:00:88:6e:7f:ee:53:e1:f9:49:ce:7a:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate b2wdigital.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b2wdigital.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b2wdigital.com
b2wdigital.com.br
b2winc.com
b2winc.com.br
www.b2wdigital.com
www.b2wdigital.com.br
www.b2winc.com
www.b2winc.com.br

Other certificates including the domain name b2wdigital.com

(limited to 100 certificates)
email.b2winc.com
b2wdigital.com
ri.b2w.digital
ri.b2w.digital
b2wdigital.com
ri.b2w.digital
citrix.b2wdigital.com
b2wdigital.com
b2wdigital.com
ri.b2w.digital
b2wdigital.com
b2wdigital.com
ri.b2w.digital
email.b2winc.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
ri.b2w.digital
b2wdigital.com
ri.b2w.digital
b2wdigital.com
b2wdigital.com
b2wdigital.com
email.b2winc.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
ri.b2w.digital
ri.b2w.digital
ri.b2w.digital
ingresso.com.br
ingresso.com.br
b2wdigital.com
ri.b2w.digital
ri.b2w.digital
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
ri.b2w.digital
ri.b2w.digital
b2wdigital.com
*.b2wdigital.com
vpn.b2wdigital.com
b2wdigital.com
ri.b2w.digital
b2wdigital.com
b2wdigital.com
hotsites.b2wdigital.com
ri.b2w.digital
b2wdigital.com
ri.b2w.digital
b2wdigital.com
ri.b2w.digital
b2wdigital.com
b2wdigital.com
hotsites.b2wdigital.com
ri.b2w.digital
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
hotsites.b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
email.b2winc.com
b2wdigital.com
hotsites.b2wdigital.com
ri.b2w.digital
ri.b2w.digital
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
b2wdigital.com
hotsites.b2wdigital.com
b2wdigital.com
ri.b2w.digital
b2wdigital.com
b2wdigital.com
api-cs-h.b2wdigital.com
ri.b2w.digital
medusa.b2wdigital.com
ri.b2w.digital
b2wdigital.com
ri.b2w.digital
ri.b2w.digital
ri.b2w.digital
b2wdigital.com
b2wdigital.com

Certificate

The complete raw certificate details for b2wdigital.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyJAKtt3y/ItkcKdX5lZN
n9QZL+jVQLEet4TuHWsw5H/wIWvWctNb8Y2yIN93qStyyJW99/R8taEFyxyB4LQ0
HGoSsIO02m4fWNC4OwF1qUDA5G6pQMe4l9UxLbfBbF66VZIrdJDB6Ep7XXbJuBNY
2H1cJSpTpCMGdik1MXGsmnOeq6HXYTN1Zs03yVfrLAwg9T2Ma98puaVD2uZaru7X
l09XGEaca0jW6RiYka63HnEK2iIcjixyGrY2l3l7APeYsSavDNYGFVP4Y2KZvYAu
u4BPfSy/WfzyWkY2k53ocIJhCGyinezveyei12QnqXyI79QyQucyfg+mvIE/zi7P
xEaCw6sZJAJSaesYsEEWE3RpMiDsuBRW1I/TZy7YZAcjFCaS7YSI6wqKsZC2cJXv
X1KuhFCdAFZooaCpZj92bsRO57MTCmWekCzrJua/QSc/JZULCKZls60DmboRULbS
nck7m+VB2x+jBarGone2tZqECXDg8Wkj9Smt/qW3uyP2z22M1KxqFso9GmHh2YjL
ohmsq5w7Ag2orTaGJ7U7MKbjLwUUvWd0nl1Uq1Coui+/2U2jop+rZAJr1vvIisLO
B7XYHs/dR9q2nLjdLMp0QTiuic5NIYxYZFr1jEchg5J+q6x//bLKze9jehNP7Wbc
isdgfDFlj1OP8QVZMYFWbMsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278399957125537894013281389803358710212061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 01:46:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 01:46:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b2wdigital.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818224280363555416185536544215960274036765652064745974149424594810006712727559500372845553511111156334904934174047738152580391209779500580433612707243883557521403268464397095934495658099928012346744006500993314400307981796960920110172892402554538208578723926519114853867237008187800097119791495562404479650044928260797995055065265059211138469538146189708296312582978485618972597498427469852522091028805847430861994336511618224976766189959541518806050450752608515207676459422182702451935135426907324995111180203587837788507139247772232260879739737861723971136752699024716075968715517324482559582539663066357624019962250048454960854347954813993030988340446512828774182675143543018146951022245393251418434567667756344284347578263525054400290257694491863812859207462558388446864065867955292944681940814576461038679401785237807959072169156816470296540008953652845492851865501530808644564180654497307782598084360112711200770670325736837148179152732752363201349625347968286841272064236051337075874118537829801951694574368475332864569037255258587955995410783012294900873386492815787599424436248118888858274301110120894451893743206139018908502610598211458363639639587383490535832023847301463942268753309953959606037723625687669232089053949131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34515e2a26e853fdfca706675582ffa0660d80c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2wdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2wdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2winc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2winc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2wdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2wdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2winc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2winc.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017099230ee30000040300473045022031a0ea1a67445e5e8d0a314ff5355ace0bc93cb894f9fd7fcfa486b8b78282f6022100bdb259f988bc9ebc9626bce18bc7c90ef4d24127157764781df6df80c217643c00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017099230efe000004030046304402200774cbf217025ca45d700785948820d12802ab6a9846329bec9b02c1ffd983d202205a5c34ecf8c03326a71a75ba47ec6105fa9fd243ec889d892d7d406954195346
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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