financeiro.bemacash.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:c2:95:db:9e:f0:66:48:eb:5a:89:2a:32:ac:dc:49:31 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=financeiro.bemacash.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:c2:95:db:9e:f0:66:48:eb:5a:89:2a:32:ac:dc:49:31
Serial Number (int): 344624403661844073327707299443363173648689
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:b0:1b:06:d0:e0:09:1b:b9:be:9a:06:00:06:80:d4:ca:d5:9e:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:3f:2b:78:5c:cd:e5:6d:55:fd:ee:0f:ed:ff:42:60:e4:e0:10:a0
Fingerprint (sha256): 36:94:ec:23:72:5b:77:c8:da:63:4e:4d:6c:e0:63:81:bd:c4:7c:cf:89:73:38:df:d5:1d:74:b3:59:ad:6f:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate financeiro.bemacash.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for financeiro.bemacash.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

financeiro.bemacash.com.br
mpn-financeiro-web.azurewebsites.net

Other certificates including the domain name bemacash.com.br

(limited to 100 certificates)
info.bemacash.com.br
financeiro.bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
*.meueleve.com.br
www.bemacash.com.br
financeiro.bemacash.com.br
financeiro.bemacash.com.br
bemacash.com.br
bemacash.com.br
*.bemacash.com.br
compras.bemacash.com.br
*.bemacash.com.br
cadastro.meueleve.com.br
meu.bemacash.com.br
*.meueleve.com.br
info.bemacash.com.br
blog.bemacash.com.br
*.meueleve.com.br
meu.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
blog.bemacash.com.br
*.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
www.bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
www.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
bemacash.com.br

Certificate

The complete raw certificate details for financeiro.bemacash.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344624403661844073327707299443363173648689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 12:21:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 12:21:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'financeiro.bemacash.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 532329029539383656876314096025215378481747429213728420402160505113362075305610350206833792400580957690146108113375581397515151541550778370810227296794299472969366531124277354111523161555318844692579341355751493681937368936626774139794185359724719041890007986446953669597028622595395794113313629576018670264512688625386530974044888208190129307301641384362180064431817114296571466149866216264755180373288523881912641046330783034398270601699534714508781793854314061807634078166373747572660145013864653857684732535631215266816656120092733491860002141275706238406966933003800432231684335823050454989386100332330986902040615297848211847469390067376213321018350954853972092004087496330258848281372632908959858164552398883937249577212455087439621388660174645330282148940906363373690279377291454661181816698095016617750946533558282343892625459650592732309800320388174544775708212799595607665128557600784150372980104683957078764790821574900003575411352003573438354194270785546704317313319652047187960069631797330148278210271911366311519282300235841919820251427959437765639226995523455462140740986890856734306476197338588713260485068335977004313761668338706107531517314984572432351655036932176594792721396018211707983174839020599462033348031601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cb01b06d0e0091bb9be9a06000680d4cad59ebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeiro.bemacash.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpn-financeiro-web.azurewebsites.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eff6bef930000040300473045022100b2c47ff3b760f15a45532a2b2edbc025fdcde007f5c79ac2781ff3f28e970aa9022005788950b5e039425cc1028b37da2fea6c2532c5f051efe72f810c74e4a88d9600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eff6befb4000004030046304402204b43f93d7449eb23f47d575da9917ce450dc596439e42864fc82cd9cc50c869002201bfd8fafa5145dd6dae611254a9afbd2a563cdb42aeeef4be4094a2449449fd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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