alleqmed.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:f4:80:44:39:c5:3a:bb:fc:07:4b:72:f0:94:2d:73:48 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alleqmed.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:f4:80:44:39:c5:3a:bb:fc:07:4b:72:f0:94:2d:73:48
Serial Number (int): 266425808560924188223274559979514877539144
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:f9:48:a5:f1:23:c1:f7:2f:08:3b:6c:60:04:38:1f:ef:b4:90:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cc:68:06:72:ec:f3:d5:15:e3:f7:c9:1b:9b:4d:47:3e:fe:14:6c:f2
Fingerprint (sha256): 36:54:62:c7:a9:da:4b:fd:a5:3d:08:ef:a7:3b:2f:39:f6:95:02:49:d1:f2:98:c4:44:80:76:e3:1b:49:43:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alleqmed.com.br

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alleqmed.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alleqmed.com.br
cpanel.alleqmed.com.br
cpanel.ragadalimp.com.br
cpanel.ragadamed.com.br
mail.alleqmed.com.br
mail.ragadalimp.com.br
mail.ragadamed.com.br
ragadalimp.alleqmed.com.br
ragadalimp.com.br
ragadamed.alleqmed.com.br
ragadamed.com.br
webdisk.alleqmed.com.br
webdisk.ragadalimp.com.br
webdisk.ragadamed.com.br
webmail.alleqmed.com.br
webmail.ragadalimp.com.br
webmail.ragadamed.com.br
www.alleqmed.com.br
www.ragadalimp.alleqmed.com.br
www.ragadalimp.com.br
www.ragadamed.alleqmed.com.br
www.ragadamed.com.br

Other certificates including the domain name alleqmed.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for alleqmed.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XJD//fytK9azw4owiK+
X7JCd7/ZEGRQ9Zc45S6N9Sgy0kqmgZ/RDy1GVm6bsVEwCLYXMgHjjADyVfoa2IjZ
UmwGKhYIguvP1UqoG2gK2dQKIr59xdYJn0QIOKUC/G66L3mEhN4RB4L8whC/oDuk
8CETh+wJbRpFV+KYfgFSfTh+lZU73aqaEpvPHkvnPGfq56lrm0fBdRDdTRYNrryg
9k8KbOEcXvz84GmHgj1tn7IYdLovDBi0RCJSD3Bg1RVXf1YgwOg2ttOCcSov80bh
k0KImL1dpgN+LDYlf+mGQRqjNszq8B0M6fJ530JXFiYHJsVP7Max2zRXTmP7rBSe
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266425808560924188223274559979514877539144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 05:15:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 05:15:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alleqmed.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26440152217419148275269797432924732853380840434520404287546933006791077810974961890170726133525083824571300763032454616972840776516260678933698121867543712199736921975604622582769066005143360853149278928551220331976386280897615964804168782158028893608699130152025589593141360181384819885763719167484431390187759948333071208529098722509020247462167130142112336858902305227460158991510284613066489464462530038563885146772559025482044607719165865084625541783710552362186944238479710308705402066375709989855225378824960303350172052955763917543720836997300255168235736587991946889035949135714376131737590523478376485002967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0f948a5f123c1f72f083b6c6004381fefb49073
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (542 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadalimp.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadamed.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadalimp.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadamed.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadamed.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a8bc809af0000040300483046022100cdfc89bb09fc4938ab0593654029325c71f10eb390e204e9cd8d840e8e5d4f3e02210084a466e9443bd1c96a66f0eca09d07b7f92f08505cb2bd978eab18806c221ee200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a8bc809aa0000040300473045022100ea00e6e0f5868eadcf28f211fb1cf6fb16f0e5a0e76cd1d6e4ff9bb46c95b886022019f13d584e835c30d9c072091368da87051fd18944e05d38be646c7f7cc56852
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00323aa0b6efda748ab91e636aeeb6742ddca899a319968ef02d777c03669e074cd4a13f95e355a0ee5032c0f2d40be0d2b563a64f94aa6b3315753071b8a3b8059a10f3bcb61da53d89cbb711772ace31d8a31335a80bca180d51b8e48e5c308a4dac39d6580d3d1854820aa639c020bd07e760de5aa04e499f94977effc858f54e745d0ba2b57cac3024218d0a5cb93188947a8cb74e082cf978a494958c579a3173fd01dd02ffe9123ff2dc9da358eacf886d7d2e6a9193a360bd6fc1c7134aa41cfcf6076d438be1dc348828a72c1702746db808d7d8b121887e50e9a36b0a5b4057ff4ea4a6a2477d749788ef7af1f117864a7056445a2e4980fbe79e2f4c