www.cpti.cetuc.puc-rio.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:05:85:b8:eb:f6:51:4e:df:f3:50:a8:84:fe:8c:65:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cpti.cetuc.puc-rio.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:05:85:b8:eb:f6:51:4e:df:f3:50:a8:84:fe:8c:65:b2
Serial Number (int): 344032813423188113143553501008385431856562
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:ed:b2:c7:af:0f:43:87:88:16:04:ab:9e:d1:95:82:70:33:fe:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:60:81:5b:56:24:02:74:51:f7:55:70:8f:30:79:e0:da:5e:90:3d
Fingerprint (sha256): 39:4d:56:97:04:95:0e:00:dd:eb:a6:4e:57:5a:e4:98:12:b6:c6:0e:4b:70:fc:cf:47:c6:08:0b:fb:78:78:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cpti.cetuc.puc-rio.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cpti.cetuc.puc-rio.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cpti.cetuc.puc-rio.br

Other certificates including the domain name puc-rio.br

(limited to 100 certificates)
vestibular.puc-rio.br
cceweb.adm.cce.puc-rio.br
portalsest.gtep.civ.puc-rio.br
mail.iag.puc-rio.br
educacaodigital.ccead.puc-rio.br
med.puc-rio.br
sgu.rdc.puc-rio.br
antigo.iag.puc-rio.br
tower.1nspirationdigital.com
iagimage.iag.puc-rio.br
*.rdc.puc-rio.br
www.fis.puc-rio.br
webmail.puc-rio.br
diplomas.puc-rio.br
med.puc-rio.br
*.tecgraf.puc-rio.br
www.thebrij.tk
mail.iag.puc-rio.br
sau.intranet.puc-rio.br
*.iag.puc-rio.br
intertec.ituc.puc-rio.br
webmail.esp.puc-rio.br
iag.puc-rio.br
sau.puc-rio.br
ler.iiler.puc-rio.br
*.cetuc.puc-rio.br
mail.iag.puc-rio.br
www.puc-rio.br
*.tecgraf.puc-rio.br
sgu.rdc.puc-rio.br
acesso.rdc.puc-rio.br
www.med.puc-rio.br
iagimage.iag.puc-rio.br
ccead.puc-rio.br
www.puc-rio.br
siga.iag.puc-rio.br
vestibular.puc-rio.br
poseidon.les.inf.puc-rio.br
webmail.aaa.puc-rio.br
enem.biobd.inf.puc-rio.br
*.jur.puc-rio.br
ler.iiler.puc-rio.br
eadpos.iag.puc-rio.br
sau.intranet.puc-rio.br
www.dbd.puc-rio.br
webmail.esp.puc-rio.br
iag.puc-rio.br
portalsest.gtep.civ.puc-rio.br
poseidon.les.inf.puc-rio.br
vestibular.puc-rio.br
poseidon.les.inf.puc-rio.br
wifi.rdc.puc-rio.br
mail.iag.puc-rio.br
webmail.puc-rio.br
cc-oncall-info.api4.thorbooking.com
sis.ccci.puc-rio.br
visir.maxwell.vrac.puc-rio.br
iiler.puc-rio.br
*.iag.puc-rio.br
iiler.puc-rio.br
sts.iag.puc-rio.br
portalsest.gtep.civ.puc-rio.br
admsau2.sau.intranet.puc-rio.br
iiler.puc-rio.br
*.rdc.puc-rio.br
www.puc-rio.br
sau.intranet.puc-rio.br
site-novo.iag.puc-rio.br
webmail.puc-rio.br
iag.puc-rio.br
webmail.puc-rio.br
webmail.cvi.puc-rio.br
www.puc-rio.br
nathangentry.me
*.rdc.puc-rio.br
sis.ccci.puc-rio.br
iaglink.iag.puc-rio.br
eadpos.iag.puc-rio.br
*.ctc.puc-rio.br
pucurgente.com.puc-rio.br
www.mapamazonia.nima.puc-rio.br
webmail.aluno.puc-rio.br
*.cetuc.puc-rio.br
www.puc-rio.br
smtp.puc-rio.br
enem.biobd.inf.puc-rio.br
www.med.puc-rio.br
especializacao.ccec.puc-rio.br
mserver.les.inf.puc-rio.br
www.med.puc-rio.br
portalsest.gtep.civ.puc-rio.br
*.rdc.puc-rio.br
med.puc-rio.br
ccead.puc-rio.br
ead.iag.puc-rio.br
iag.puc-rio.br
www.mapamazonia.nima.puc-rio.br
www.cpti.cetuc.puc-rio.br
webmail.aluno.puc-rio.br
webmail.puc-rio.br

Certificate

The complete raw certificate details for www.cpti.cetuc.puc-rio.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344032813423188113143553501008385431856562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 21:12:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 21:12:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cpti.cetuc.puc-rio.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703265563903472057239143537995799777540135344939529560899071209014469771573092419226960520107433859139421033150185772155929745894779407804879566107206433099126384299068363488111102852215393850662578344131039086394917059881244753584671006173846331302520811849051185352986415363519701488339983367905691788805592084030476451819972406598702986579471173861048083685760674200401094340604471823458731991385590284328612418500960081805964633875274429474813274478223513037772553578472549882209336376603700803148679225794319301823189862987112421740787360650823651983075210118131601892761425740567745874910925069659228305999067374713598353732842277195641501888964587751797202734408365028038950212940988970545563512359395414678738593005363872090798435616718509898587948630088675483914131978149949522150228222066225398498269421212208543904933687469429068261760277679823464623674824699341990200607177773954821732917761218804023621117907551703419514715510117134006934210653734079834528303413934947054498016108068468322084380584248511083917233559276600024322379364411886933374426410081619838141947909578259652707190134379591363871836554176398281264219462963485996383961902406608813588746905327094702005291108950514920406647902249713791382004946587343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39edb2c7af0f4387881604ab9ed195827033fe5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpti.cetuc.puc-rio.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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