pioneiramaquinas.concessionaria.stara.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:b2:3a:76:3e:81:0d:02:8c:65:68:fe:17:4b:3a:69:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pioneiramaquinas.concessionaria.stara.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:b2:3a:76:3e:81:0d:02:8c:65:68:fe:17:4b:3a:69:42
Serial Number (int): 322144025241951715082850403022419904850242
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:06:a9:ce:4c:6e:8e:6f:12:11:05:a1:89:84:81:c2:9a:18:12:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:40:1a:69:8c:5c:66:63:99:cf:3d:48:ea:12:94:26:70:a3:6c:09
Fingerprint (sha256): 36:b5:63:9e:87:13:b0:30:a2:5f:37:4d:70:19:19:e3:e6:69:14:fb:10:44:18:0b:11:11:e7:5f:48:85:81:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pioneiramaquinas.concessionaria.stara.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pioneiramaquinas.concessionaria.stara.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pioneiramaquinas.concessionaria.stara.com.br

Other certificates including the domain name stara.com.br

(limited to 100 certificates)
*.stara.com.br
san-16-s10.tlsprovisioning.exacttarget.com
demo.concessionaria.stara.com.br
*.stara.com.br
amborjo.com
abstara.concessionaria.stara.com.br
nanonwilliams.net
apps-dev.stara.com.br
safra.concessionaria.stara.com.br
abstara.concessionaria.stara.com.br
demo.concessionaria.stara.com.br
starpes.concessionaria.stara.com.br
safra.concessionaria.stara.com.br
www.daberly.com
rudellmaquinas.concessionaria.stara.com.br
materiais.stara.com.br
materiais.stara.com.br
becasdeportivasusa.com
starpes.concessionaria.stara.com.br
pioneiramaquinas.concessionaria.stara.com.br
citrix.stara.com.br
safra.concessionaria.stara.com.br
starpes.concessionaria.stara.com.br
safra.concessionaria.stara.com.br
materiais.stara.com.br
www.usama.engineer
starpes.concessionaria.stara.com.br
safra.concessionaria.stara.com.br
autoagricolagoioere.concessionaria.stara.com.br
pioneiramaquinas.concessionaria.stara.com.br
*.stara.com.br
pioneiramaquinas.concessionaria.stara.com.br
materiais.stara.com.br
material.concessionaria.stara.com.br
*.stara.com.br
material.concessionaria.stara.com.br
abstara.concessionaria.stara.com.br
materiais.stara.com.br
materiais.stara.com.br
material.concessionaria.stara.com.br
materiais.stara.com.br
www.grupomacchia.stara.com.br
pioneiramaquinas.concessionaria.stara.com.br
demo.concessionaria.stara.com.br
pioneiramaquinas.concessionaria.stara.com.br
material.concessionaria.stara.com.br
abstara.concessionaria.stara.com.br
resident.mpla.io
safra.concessionaria.stara.com.br
cncus.app
abstara.concessionaria.stara.com.br
*.stara.com.br
w.sillas.comounexperto.com
starpes.concessionaria.stara.com.br
pioneiramaquinas.concessionaria.stara.com.br
www.starbirds.io
starpes.concessionaria.stara.com.br
www.karlitekniksupompalari.com
www.saframaquinaspa.stara.com.br
link.stara.com.br
rudellmaquinas.concessionaria.stara.com.br
starpes.concessionaria.stara.com.br
finshots.app
materiais.stara.com.br
safra.concessionaria.stara.com.br
material.concessionaria.stara.com.br
safra.concessionaria.stara.com.br
autoagricolagoioere.concessionaria.stara.com.br
becasdeportivasusa.com
materiais.stara.com.br
materiais.stara.com.br
starpes.concessionaria.stara.com.br
materiais.stara.com.br
staging-manager.allindex.nl
materiais.stara.com.br
rudellmaquinas.concessionaria.stara.com.br
stara.com.br
www.starbirds.io
www.okoplay.com
pioneiramaquinas.concessionaria.stara.com.br
www.usama.engineer
starpes.concessionaria.stara.com.br
materiais.stara.com.br
demo.concessionaria.stara.com.br
*.stara.com.br
syaifurrizal.com
admin.exchange.dev.uniqgift.com
www.3amaquinas.stara.com.br
safra.concessionaria.stara.com.br
stara.com.br
mis3690-final.julianwiley.com
materiais.stara.com.br
starpes.concessionaria.stara.com.br
safra.concessionaria.stara.com.br
demo.concessionaria.stara.com.br
demo.concessionaria.stara.com.br
material.concessionaria.stara.com.br
safra.concessionaria.stara.com.br
safra.concessionaria.stara.com.br
materiais.stara.com.br

Certificate

The complete raw certificate details for pioneiramaquinas.concessionaria.stara.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCB36m+Hvbu1L251zC1L
18upoL9cj5Q9nLotM7Ja/iIQjphgVoW6b2tAuy0FfNp3MMIXkPQxKoP515wuR97J
lzXldNPkxtWJzzo5KfmQsXeA1H7pd14LNO/i9k74ZE03FZROJvS/atUr9VG7dsbx
doLPGr+PImvGD+wPNHav9vUHAmeRHGbPH1CwxNC7H9+aGSm95f4/AzLiZHOd4xZC
n44nmtb6wO7b2UGS2bQAZy4rCnm1XEo8xx/IXYtxAp1ZKxGBRDxwDg2Ycnm8TOG1
gQCX6wzKCNLktsxrRyErJfA6fpC59xN0u2PCIlJYsE5prlEAraq/t1JvRNf4yI2F
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322144025241951715082850403022419904850242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-21 03:10:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-19 03:10:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pioneiramaquinas.concessionaria.stara.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24758718548449845349737091779429348900607719808978868071902814410340659211188824953912755454417447327307316011357315089547400696564604400422021351036794221911710155743338856149419550858238514140250369399855915334340710522187240074509378437599778243859490124273122351046219201049683452646314149102219636213460549949204175138042733342155166573891632372781367691279369762087125726082522343096607970616136127081751959083735482835773176648821979345184551001818624703949965816161629714013129830225939758425093381001511680372253335783079697910763703690867941553915035871988292138182680615649371402640436952820766633548940709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7206a9ce4c6e8e6f121105a1898481c29a181283
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneiramaquinas.concessionaria.stara.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d40b03a370000040300483046022100cdbfe8842798fcff8b29c5cf5e77b1bd110e04a1027ca073ae0ac93f3d0de396022100eee31de45790ad181f650953af27077cd42c998a86a5b9602fdccf4947d2cd2100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d40b03a6100000403004730450221009483fe2e20cd74234e03e3ef8bdc7f8a6db754bce3636cd73c65cd0289dc36a10220435c53a64268fc22c94becdeb9bf5ebeee5a722f28a71d97f54bbc6de2b408ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00940f4d892f960b3f8fd4c50075104ec67462f499cf7dba16faf33bd627e197e2b83f4e62baae014d741c8c6f603ce8ef3c5b974a9f77af595aabb0ea27ff34eeca179c962cc9a88f2eb68ee1360895ecdf4fefbb242dfc0d503171ac3cac9b23a457eb10a336defadaea987afef48fba4efc027e30afceef71f9bc2dcfb6657b46b252b54232f83a22ba6d6b1330aeba2bf2dfd44fb7340a9b357ada605b6440bb70711e67d9aa720e4ae25bbe6acfb7dd48e3b71db999c9cb274aa39c9a5178db4cc5f604e3a3fe619fc858d8dc48562800f728920c484f84ebd35e498788fad2ccd1e5270c025ab0bc1795d04c79b35bb3cfea98a709618a78bb51279fa5e8