lp.conquistadigital.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ac:c9:67:ef:32:5a:f7:1d:5b:20:02:af:a0:f9:d2:42:12 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lp.conquistadigital.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:c9:67:ef:32:5a:f7:1d:5b:20:02:af:a0:f9:d2:42:12
Serial Number (int): 407245425322657055272548836734287045870098
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:d5:00:6a:16:3f:65:0a:96:90:ca:2c:43:55:13:ff:5a:8a:a9:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:bb:90:94:c4:9e:0c:24:7a:69:f8:bf:18:b7:cb:4d:01:1c:f2:a1
Fingerprint (sha256): 2e:2d:41:7e:83:aa:69:3a:da:e0:0d:7a:9f:5d:7d:be:eb:95:1c:f0:5b:52:93:12:e4:07:13:49:59:51:30:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lp.conquistadigital.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lp.conquistadigital.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lp.conquistadigital.com.br
www.lp.conquistadigital.com.br

Other certificates including the domain name conquistadigital.com.br

(limited to 100 certificates)
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
sni.cloudflaressl.com
sni219994.cloudflaressl.com
mkt.best-of.pt
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
membros.conquistadigital.com.br
conquistadigital.com.br
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
lp.conquistadigital.com.br
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
lp.conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
mkt.imediato.pt
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com

Certificate

The complete raw certificate details for lp.conquistadigital.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407245425322657055272548836734287045870098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 02:18:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 02:18:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lp.conquistadigital.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845259744290011454435546595446406337644324559873560441176731433228931207339926993187630398602654185952783163917251735995095853817254679135525977009603364678568260277376496931077431628336663105412278276924794784788644172701924985228602577643482946372022196033780587540398016849845854877734917628065733122351346347849035921896354019159712652223403862086956316545549550519788758213266799751184944214078690368954018139151920113823549731234991679706024858560559338976081827972493108709716764026977111506898911179974102574347436182205162663784814421802573261904307222599240379813625858129880846064718517195678188851322683753952610976725207725140056982019699085481286938960387413448231290525184391907469420969654641771313875565500899323169632276018321063862448190794721895774521801791537001539138162966793227859545453679826450015046354452347446046323810890006749005978330763577499048664035457246679599728115071975261994588423602003110718394794463100130247166810150763437095923249937252804254522159093557544891137632781858053566248123394946534556086222350602852274008593538728224967140659092144977963968167370662249878309503957570129585308973018202854640997390114357625000293015214822473656234235797933085156667598315558152279710631111183491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							add5006a163f650a9690ca2c435513ff5a8aa92f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.conquistadigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lp.conquistadigital.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017157cbdb5900000403004730450220600c11be70baceef580961ee873802ec574a3d8a3e942107cc3a8c5ee4a3481a0221008b219c968813c2edacf962b9d38322f020b02c70846ea025f6c5a8d8f088f43b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017157cbdb530000040300473045022100d31a244642ff0ca17c00814b573789d725c16da7595be3feae2adfe4f487624c02203f1f38cd3951941774ec9fecb59788c86b4e6e8455209b45569ac245e63ebc12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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