www.locanetserver.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e9:30:e8:30:dc:f3:72:e0:0a:d5:cf:82:5a:e2:aa:b8:18 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.locanetserver.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e9:30:e8:30:dc:f3:72:e0:0a:d5:cf:82:5a:e2:aa:b8:18Serial Number (int): 340687657835589458430105507672430327019544
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 61:a9:f6:cf:a2:97:61:50:68:77:00:9b:b2:ee:83:1f:bd:54:a1:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c0:6a:71:3e:4e:f8:5b:d2:3e:5f:9d:4b:a4:9b:10:62:58:2b:40:55
Fingerprint (sha256): 3c:29:24:29:ea:24:a6:93:c3:b7:cf:c3:d8:9e:49:c9:22:b8:00:cc:f9:1d:85:df:87:30:56:21:9c:6e:5e:23
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate www.locanetserver.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.locanetserver.com.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
locanetserver.com.br
www.locanetserver.com.br
www.locanetserver.com.br
Other certificates including the domain name locanetserver.com.br
(limited to 100 certificates)
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
www.locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
www.locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
locanetserver.com.br
Certificate
The complete raw certificate details for www.locanetserver.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgISA+kw6DDc83LgCtXPglriqrgYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEyMTMxNjM2MDBaFw0x NzAzMTMxNjM2MDBaMCMxITAfBgNVBAMTGHd3dy5sb2NhbmV0c2VydmVyLmNvbS5i cjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALyTE7ntmrVLEqKJ7lH+ ZdEJ1YNfVyRRYryiPwD6audOU1PnYXZfH0FkMvWUqwFvysFtyR7wiwW02xP4Mytq YNRHyFNECPfGcGwgFWYJIaVRewQYZb374OUNuDm50NhbtDrhk9+VVbQQzYGo5bY8 jyuc6vJUJcYg3E+C373NgPwuW9M61RfmQ0NVeGxUserw+2/kYZERXWyeLVfqdKwH QNtHhUTUhdb7IqPKNQbYZ+WCbkro+xyJOht5K6jhzhnywBT7NmwwNpjtpvoa2fMP enu9PfcWeW+6zA5XH4G+BkuBE5FAfGVadE7ExDg5mPQMaJcB54UECbMY2OxATciT vsml6mZayYkj341l+kwOnpjDh/hjBK15VDIPwgfwAv3hcgvPtCgLBxE5VH5QM47I nhVCPJK3TX8SWBN1mWKLCLc4eWujMdSGVfWHfBrX7x+xKmLt8uWnIx86atLy6mqn QxcqFKe6ICGyCXiQU2WcpddLbgEjKJTYjqiCJkCn3GPB00fc979kR0i6lHw5Mjlv IU6MIzmZ2nebXHw7zMdVKnoxpC3iPgGvUgCE18U4HOeqT3BNvO5Zj6C7BQt2KKQO xBF3i0kNbAyOXMZOxK9SLQpBAGI0jtq/1hS9cGApZsYuBcT8m2vMjCrmKg8UKUoh FMAhnxzUBAIF93G4/KqQ13s1AgMBAAGjggIvMIICKzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFGGp9s+il2FQaHcAm7Lugx+9VKETMB8GA1UdIwQYMBaAFKhKamMEfd26 5tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDov L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6 Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDkGA1UdEQQyMDCCFGxvY2Fu ZXRzZXJ2ZXIuY29tLmJyghh3d3cubG9jYW5ldHNlcnZlci5jb20uYnIwgf4GA1Ud IASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtU aGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlp bmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRp ZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9y ZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAP85EtCZmrUc0kfOyq0SzsC9m 3nQ+NWMAOAWUeNsNhpwOFdGmPeGZdmyRpNDaTct32NvVq1G/0zfSH77fhEyoMMBT NdaJtmf5fccxaIOlPkadVG/SNEqUxnLE1eAURhHnCWmqyB7/7ivvVu2hvkiiLBW4 zq73ntGEUUlxJZKJSYf3DYicKzrQFtEiV/btlAtdZZDmgoRGChpK046oscmbf6xi fCRjD+PZlBOjYytF77fxHTqHZSTbCOW73g8ZCY/4N7DjY795Obb8h4zvRBAhXwJF 7eb17dPTOmZuy5HoK1K7MuPbGOkaI4QUKA1i0s8kXYJ16CpPDY82lI4cMoifng== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvJMTue2atUsSoonuUf5l 0QnVg19XJFFivKI/APpq505TU+dhdl8fQWQy9ZSrAW/KwW3JHvCLBbTbE/gzK2pg 1EfIU0QI98ZwbCAVZgkhpVF7BBhlvfvg5Q24ObnQ2Fu0OuGT35VVtBDNgajltjyP K5zq8lQlxiDcT4Lfvc2A/C5b0zrVF+ZDQ1V4bFSx6vD7b+RhkRFdbJ4tV+p0rAdA 20eFRNSF1vsio8o1Bthn5YJuSuj7HIk6G3krqOHOGfLAFPs2bDA2mO2m+hrZ8w96 e7099xZ5b7rMDlcfgb4GS4ETkUB8ZVp0TsTEODmY9AxolwHnhQQJsxjY7EBNyJO+ yaXqZlrJiSPfjWX6TA6emMOH+GMErXlUMg/CB/AC/eFyC8+0KAsHETlUflAzjsie FUI8krdNfxJYE3WZYosItzh5a6Mx1IZV9Yd8GtfvH7EqYu3y5acjHzpq0vLqaqdD FyoUp7ogIbIJeJBTZZyl10tuASMolNiOqIImQKfcY8HTR9z3v2RHSLqUfDkyOW8h TowjOZnad5tcfDvMx1UqejGkLeI+Aa9SAITXxTgc56pPcE287lmPoLsFC3YopA7E EXeLSQ1sDI5cxk7Er1ItCkEAYjSO2r/WFL1wYClmxi4FxPyba8yMKuYqDxQpSiEU wCGfHNQEAgX3cbj8qpDXezUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340687657835589458430105507672430327019544 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-13 16:36:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-13 16:36:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.locanetserver.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769316920874458075012576369514707423842821543733041369927158625217652291166933811227886932913943691985938302322619462382766952707282073383584562031410907148827603908216452487874554437505093106247688392821767454258689975230594450574449286696635992166810673028058864699078677506883116303241259127347992862982280118791023273868022476417026108558814222053386778285934824372965922079047925300089625696713190197223261321828198783331826700469567221653887246937805248274501073997874533936728390074097792643948874570954626640676502569871615083148490869514260053457296357772527605712355116107419855403516553627473697571874538735003938678401588411133348760139740681946884598071977674738487310209771468972044110324039402842535757844176615572305808749651348056913943451374563494791422292850761967920103155442108740137967262991759048853666696073742843466118798898876654599515538013084934285552955443649358639008043081242917260744673694966294927951487641591668884073237122197953660331530427933727259600892951020003580490747244760143811321293059384452108551565052906165625196701131429444153543109798399212111736924042603826568511974226530060882798999771230189882184186602021307764984099628677681126350976793782754514209561807324853480830311314455349 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 61a9f6cfa29761506877009bb2ee831fbd54a113 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locanetserver.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.locanetserver.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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