www.controleacesso.saude.salvador.ba.gov.br

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:35:a7:08:b9:68:9a:c2:1f:8c:90:ae:ee:d9:44:d6:a0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.controleacesso.saude.salvador.ba.gov.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:35:a7:08:b9:68:9a:c2:1f:8c:90:ae:ee:d9:44:d6:a0
Serial Number (int): 342395377496764930528303703360763576243872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:57:ac:3c:94:c6:c7:7a:ca:9f:07:66:e5:6c:74:47:a2:37:e6:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:89:be:08:71:6a:81:3e:f4:ef:57:da:3a:03:a3:51:bc:ca:35:e2
Fingerprint (sha256): 2a:60:6f:19:3b:14:c7:19:23:56:1d:0e:13:83:fb:24:79:88:a5:c3:c5:6a:24:f7:3f:ac:be:61:9c:50:c9:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.controleacesso.saude.salvador.ba.gov.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.controleacesso.saude.salvador.ba.gov.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.controleacesso.saude.salvador.ba.gov.br

Other certificates including the domain name salvador.ba.gov.br

(limited to 100 certificates)
recadastramento.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
ava.portaleducacao.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfse.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
agendamento.sedur.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
sedur.salvador.ba.gov.br
*.salvador.ba.gov.br
portalvida.saude.salvador.ba.gov.br
www.dom.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
vacinaexpress.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
*.salvador.ba.gov.br
filometro.saude.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
nfse.salvador.ba.gov.br
marketingturistico.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
christi.salvador.ba.gov.br
salvador.ba.gov.br
sedur.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
pad.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
wsnoeprod.salvador.ba.gov.br
www.aplicativos.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
vacinahoramarcada.saude.salvador.ba.gov.br
recadastramento.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
plano500.navegarte.org
dados.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
senhaweb.salvador.ba.gov.br
horamarcada.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
www.sefaz.salvador.ba.gov.br
webmail.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
sedur.salvador.ba.gov.br
redmine.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
pad.salvador.ba.gov.br
api.pgms.salvador.ba.gov.br
sedur.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
christi.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
www.vida.saude.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
webmail.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
cadastroescolar.salvador.ba.gov.br
carnaval.sedur.salvador.ba.gov.br

Certificate

The complete raw certificate details for www.controleacesso.saude.salvador.ba.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSLi5C+s+oES1xtAnNtr
Q30xVqOpFGDU3931Kiki8L7ONHvhDqBqmIKXsz3PoC5z0d+rdP/S7WUrVmxD9Ezd
HDbJvfPNkEFQJJNci+gYMvPF+j2jphHzEnlWfjR0DLj8J+6mrQrGC4H0ISTm0t7n
Xqy4nide25slNdALCxvXgOsi+SqGEBFpBBEGXy9J+1FeZklRUlb7LqgzlSJPaWr2
zeiVzA26d3uumt0+FlvLgk/jv1F4Ggftm0u9PJoF3PcM0GVtkT0n8AZ+TPd5plED
ESyZkXTU5pjgWD4WC7zYYexOUy5R6oEuI4MVP+RwpopNdbnVaxJY7LehiQuEVXDl
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342395377496764930528303703360763576243872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-19 15:40:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 15:40:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.controleacesso.saude.salvador.ba.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24381195931358436932054500429312506580482600819579762527643319701194296837986487434437449516058801873556379279318020677810957741727957012036741648591349995876563148396816847972031193331639253580835498337715865115642987810596282959375104541445149507923520350496483769776661315575250250389566082139343075120168014667811873544163453827153692032794686135261791832194478491750945730378410879808021816729422450179482318593358848942494328900078529105266358509082248456677751745210768351574208788187536274094649533896839888322746248564365550298825626374180532332246802988009311225423784579596484329187110798518359564835939829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f57ac3c94c6c77aca9f0766e56c7447a237e6c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controleacesso.saude.salvador.ba.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a0eab71e50000040300463044022064a9e2b22997ec34adbe51c8aad694de419d45f3d47a5870cb5bbdc20100abea022028416c249456b91feabb5268f69e932885799ffc88ae0aeb28f528e4bc5f89e80076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a0eab71e30000040300473045022079e6a97de70979468449b1c8cffe8acc284ceb861b5e6e6d1b0827543d309eb3022100f7a3fb152738f64cbf414bbbdf0ee2e2fd94acfb41809e24ba6dac41a236b1fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c54bf84ec0e692cf2fe1b9dd440dce93743a92be51cde0e80cf97687b11a136ddcf133ba17154a9f03f6426c722151f9579d3747e4e403ec5363dcf3beb92c5cd8c5773a50ad8f9f0cc5087a00a58630a21f2b244963b8ba9d91349b855993a3caead7279f8eaf4b51950e57acd27eb07da56b933f5871e6e0f5fb3e3450e8ddc7cd5c1d7ec7dae814d2b265f851ccc0d4b5c4a6246f00db5a9e160801de1e3fcd1dee087bea2926fc81cebdbe7acf910f7762c5383eedef8f98846557174469ab27df00a08852fd0385f0afe2680fad4a117a4b34bb04e573e535ed199f142a5524c4794fd3d46ffde33bc7f3b9e71fe9624191523c1adfee6530adf6d26a8