megapratas.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:ad:f2:24:d0:98:73:4d:7e:70:97:8f:fe:1e:1b:d6:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=megapratas.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:ad:f2:24:d0:98:73:4d:7e:70:97:8f:fe:1e:1b:d6:22
Serial Number (int): 284026707737866619051096725259819710928418
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:74:30:99:fd:07:e4:2a:08:08:0d:e4:ca:cc:45:e9:10:77:7c:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:4e:98:5e:a2:e6:1a:5e:c5:58:45:a2:d3:63:f0:f1:b3:c7:14:0f
Fingerprint (sha256): 31:72:72:f0:3e:01:29:e0:c9:20:37:44:47:66:85:97:a0:d9:b9:34:76:6e:67:b0:75:98:1b:fa:23:64:10:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate megapratas.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for megapratas.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

megapratas.com.br

Other certificates including the domain name megapratas.com.br

(limited to 100 certificates)
www.test.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br

Certificate

The complete raw certificate details for megapratas.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284026707737866619051096725259819710928418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-09 16:11:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-08 16:11:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'megapratas.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888321146291799260013493760619350385600240917122275686689489806980630830319366838933828727660003867610524669295552727994337859010493098230237479995331783837854144575851242857563695165937158712619670217617805431502968266423232210684800590960093853778453004201859713958310958218753308569429555085708396086007920807344136026620261757266240460685175005485759524164673534305672485037464913769145147254492681191775588661095112786391774996760199449607907216263436778273289115616819323021196018410813986140415750624370047591009435967940634539659170212137962050482709078444371837238749327372180427996884702941087019355954571117475799600278550999664629128693746336359717717009874185008379147191958927128743013468854113125038939563013961813017015061822721901402393134419734420293986114619509761032026878924540900116724445018126192349854080475828267990172901382168230350122780739831108653446228712488522932728536907098849082538934472920923103955539197629553589214533530593389475272736872707646433865534408356005221005899689162924654872848165743150038754370517165991227513633688595491964573642767626925756514884939580722595585195849692667658473555837503079005634924028281346432079200416623773157723983337228430739975586767302496353527039277021267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e743099fd07e42a08080de4cacc45e910777c97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megapratas.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162ab6402a30000040300473045022100ec4bdac38f14ee6fe558a4754a2ff953f04e0fd698bb9779952e6dd75c039e3302206408bbfb9ce0db57944b7f8b8a7cdf0d31653e8aca6462d74af578db70e17743007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162ab6402930000040300473045022028237966eb796a6a009b272abac876356f5e867fc250a422fa37e01b871c37da022100fa7d60417dd3c345be0d886b3a9253623f850eb5ec9108716c1041d6916f3910
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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