www.bns-staging.dito.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:f7:6e:f5:3a:66:0c:1e:25:ed:3f:86:48:ab:b9:07:35:91 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bns-staging.dito.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:6e:f5:3a:66:0c:1e:25:ed:3f:86:48:ab:b9:07:35:91
Serial Number (int): 345534090801484002049361942532277913728401
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:37:19:66:f7:94:8b:72:77:a5:5a:3e:66:bd:89:83:57:27:9b:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:64:40:9f:dc:a4:dc:d4:c3:55:79:b4:b6:71:85:e0:6e:0d:27:5d
Fingerprint (sha256): 2a:e9:e5:32:b4:5c:44:f8:25:75:ba:df:5c:6d:b9:7e:db:bb:07:62:bb:db:ff:e5:15:d9:19:12:1e:55:e6:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bns-staging.dito.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bns-staging.dito.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bns-staging.dito.com.br

Other certificates including the domain name dito.com.br

(limited to 100 certificates)
www.dito.com.br
admin.cc.dito.com.br
brickz.bns.dito.com.br
hive.dito.com.br
newrelic.kstars.org
crm.dito.com.br
ingresso.bns.dito.com.br
newrelic.kstars.org
oraculo.dito.com.br
dito.com.br
newrelic.kstars.org
ref.uplus.com.pl
dito.com.br
ingresso.bns.dito.com.br
dedoduro.pdv.dito.com.br
dito.com.br
foundry-usz-1.status.palantir.com
crm.dito.com.br
6bd21a3c.status.cleafy.cloud
pbi.dito.com.br
www.starjourney.nightspeller.net
ajuda.dito.com.br
openapi.dito.com.br
recursos.dito.com.br
scan.tbsx3.com
newrelic.kstars.org
bns.dito.com.br
via22latam.workspace.training
www.admin.sper.com.vn
newrelic.kstars.org
newrelic.kstars.org
crm.dito.com.br
inbox.rest
bns.dito.com.br
link.wavescool.com
schumann.bns.dito.com.br
newrelic.kstars.org
forum.dito.com.br
docollab.com
newrelic.kstars.org
crm.dito.com.br
field-assessment.grapeweb.com.au
foundry-usz-1.status.palantir.com
6bd21a3c.status.cleafy.cloud
docs-prod.imagin.studio
traineeserasaexperian.com.br
agenda.dito.com.br
bns.dito.com.br
ingresso.bns.dito.com.br
foundry-usz-1.status.palantir.com
crm.dito.com.br
pesquisa.dito.com.br
dito.com.br
michaelmoyles.ie
foundry-usz-1.status.palantir.com
crmbonusserviceapi.dito.com.br
foundry-usz-1.status.palantir.com
ingresso.bns.dito.com.br
eng.dito.com.br
linkerd-prod-us-east.dito.com.br
dito.com.br
newrelic.kstars.org
newrelic.kstars.org
blabla.cam
www.dito.com.br
cofre.dito.com.br
docs-prod.imagin.studio
newrelic.kstars.org
newrelic.kstars.org
autocomplete.dito.com.br
crm.dito.com.br
crm.dito.com.br
dito.com.br
pesquisa.dito.com.br
test.learnerspace.online
weeklychefs.com
recursos.dito.com.br
staging-app.nos2.pp.ua
newrelic.kstars.org
api.dito.com.br
crm.dito.com.br
integrations-hub.dito.com.br
ingresso.bns.dito.com.br
www.estebancastano.com
residenciastransparentes.com
grafana.dito.com.br
www.dito.com.br
materiais.dito.com.br
crm.dito.com.br
link.feras.dito.com.br
weltindia.in
veldre-bygdebok.no
crm.dito.com.br
run.photo
extractordbserviceapi.dito.com.br
blog.dito.com.br
www.bns-staging.dito.com.br
6bd21a3c.status.cleafy.cloud
blog.dito.com.br
newrelic.kstars.org

Certificate

The complete raw certificate details for www.bns-staging.dito.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISA/du9TpmDB4l7T+GSKu5BzWRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEwMTQxNTU2MDlaFw0yMjAxMTIxNTU2MDhaMCYxJDAiBgNVBAMT
G3d3dy5ibnMtc3RhZ2luZy5kaXRvLmNvbS5icjCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBALNbak3GN1CMJbcgSvtoMF1c4tBXoumbQ7CnRo1aMdG53II9
fqW/2SY5e8zjmtLFRGqvZO89/pYImM9MWG3ugJsSxrLFz7wdHHRsPmcL8rSjAemZ
1L/OhLP2YMmUvFNmPgwiia3ookLxe7aj6KLrp/2D6aAfYK98x8YBcP+SiVoHc0wj
t7LiR2bgRWqFfrLfvZqyHW2aRh2l84AcqpR9XDHTO8xqm0LqT8McdrMNMgTydnx/
wI4CG8TCeUPsK36G9m/rFDlCaMy4u9gZ74XUvAE9Hnf3CFyN2n3YxGV7Bj3mBD5B
uc3TlTIeTZF/eiTLjIpl0SRoHISwOGLGiV+fcJ4+Ig6fv4zlqjDg8riUS2pymkXC
j+mzg1TBivVuywrwBfQ0Hc6yoXiUF4Sp2vdXpSBT5mFeZ633UijCSrsbDbHojyPC
ExLqhhh8nHl1Y0zfCC0J+Z0l8U0qeOYF3RUYdcc042v+8cAZAwpU9w1FxKK1Z5Mq
or68zwdX+9Lkcm8z6yFx7qEcIxkpGN7029BeYLowjpMP/ZbE0mgByaUvb3C4Stze
VqPNKG8UCo1jY3DZn69tL233kUNViBGb/KHxfhvCl3jIvTLmjT80Jam/ZZhTFrV3
Vx9OXo0nhQoXcYJSatPZrSoNvi904rMxhgX+FrwQR/ZstiL5p4qhQ43UGNUdAgMB
AAGjggFjMIIBXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKA3GWb3lItyd6VaPma9
iYNXJ5tbMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCYGA1UdEQQfMB2CG3d3dy5i
bnMtc3RhZ2luZy5kaXRvLmNvbS5icjBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwhD
jztb36NuIS2gmIzuGat/m8A0ExmSYY7pwn4BfNswPprbZ34kq9Cv0j5hcdELcS1p
J9mR8a1KXFejcUMgNNOq8sn1CvogSjv0qtSLmG9IAbk/XvxM2lM/ewn2Dqfhngav
kAkXxCngwebh9FrCAsQwURPnpYl9EJ9mLXLcL3V+ftaJEyfh9t1BPvXY9xrx1el5
A0EqF39w14b5s38D10cArkEsVDwockgsw/4+28VDElReh2lHbOKFVavWMQ8FRXWU
LftZdA2eAXLYRABleBBWmDv6Z1+f22cs/ccLngxmwH+D0wmTyYlHEdNFM5hpMkL1
i69dfBkVdNQyf9VB9w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345534090801484002049361942532277913728401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-14 15:56:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 15:56:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bns-staging.dito.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731713091610345233724530391149518797227082823536485571621999769775869935933411467956548162179924483768279603414627747743446838807461424386027364532221512797113575994900984748842594130868086821224220071494164426856989246782231461557173262041094925405333089792401911995811311744722944729509308234437069328608431455885352649534315742827098759249812201425688530614969461607461729441667122112460629822912093110421960766803255466866233861976529753516503119424053328462207104092469880170934471681102580099388143098975872268610096447261617315471334616906098058079781237219147373232090011511927994131680966246198300597560084192227504824656866184880589830426898249958245748111544901373704875706983475811857644299594516811367880179616234498648682715332049638942196550996364544795390603182061987740818301115076044192620711022116065084142026054474190693574068458926523743493652315043872285413250662538671956710239940599886470832168468528543895827210053828578644828162995856174662233851049800636972538029830973973312309155098972332799515480220439611225973926269756791246160521474533636607988493721450257078986869442251307850201886932554503492833943108134768848857457306996301842761083380469650239835353268888462613509284129604632727117263932019997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0371966f7948b7277a55a3e66bd898357279b5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bns-staging.dito.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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