sitesustentavel.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:ad:59:83:bb:ca:91:84:22:8e:0c:53:4d:95:56:9f:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sitesustentavel.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:ad:59:83:bb:ca:91:84:22:8e:0c:53:4d:95:56:9f:98
Serial Number (int): 337790529215136172160092721585056323641240
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:11:a5:a5:ef:24:9a:50:41:dc:d9:27:3f:14:5d:0d:95:79:8c:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:d9:54:62:82:ef:35:2b:f7:8b:38:0f:1f:c3:cc:f7:b2:12:48:b0
Fingerprint (sha256): 3a:8a:8f:44:cd:3b:48:55:eb:f7:34:6f:0a:10:fc:25:8d:04:ea:e5:80:44:6b:db:4b:b0:30:d9:7c:71:e7:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sitesustentavel.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sitesustentavel.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitesustentavel.com.br

Other certificates including the domain name sitesustentavel.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for sitesustentavel.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ7v+2BnFDDcXue7Rd9q
zwCvmdoufD0PlJHK/rBofgoQ12sb55kgBnXQ3uyTJV+z9+SklhwarkXkv3UCAlkY
ArnpMeZ0khbln3R68OtfA3NbAY1Ef+Z/tPxxlj+uDQv0r3SdkLtMQsv5E9WPsmh+
7rnHJD6rBgPwiK/7w1zchbj+baFl8wXrBojL2Fa5ri1atJ9ArfaTmJFJLNiazor4
1/Qr63sWeBBCeWWdYNhoHb99WqQLppKPshyCKCrB+fYvyxU10vRI+++RnH4Y32FP
1yhymB8DC/oUFkzZWnPH+qfiqE4F4Rxb/WAEMT9RZhYcPCLIWAoVJnUv5gDz7Fwc
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337790529215136172160092721585056323641240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 02:11:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 02:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sitesustentavel.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21412648506801780957122557260807752505410438546030347448964576490326772992505735726156061851798936571612513319211401378737578288384465910163218310867878632001227804002554381092061035129107050406649891527113874228235713167252890917288549440948251917109361398816202189505161214228013334450307950165622316260357984152023432234997291819112560100494928477006319612533385674957105715005409125669347222287571967114484928482328620791498872694524468383719935701297673473307554903045140725779853985516189231622670842688133920642702443300162571165802096637024301613307928420618541205034010290864936430199580090661821470027291663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6411a5a5ef249a5041dcd9273f145d0d95798ce9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitesustentavel.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d1566989d0000040300483046022100b24d0d2fbd466499f131c49e385ad714f3fc0f689cb0a966d525f5145bec549f022100ce0a2f8e7ab88fb6165c672ada416c9bc3989d250635b07a72ec183cd1d5390f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d156698900000040300483046022100dbf456169a4d7fdbcbdce3158d7b8a4613ea6c910c7a35820da8265874cd7606022100bc9caffccbc2ad2e4f4c84bd945380396206480388346dbc73177a2cf117380d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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