ctech.jaborandi.sp.gov.br

Issued by R3

About this certificate

This digital certificate with serial number 04:60:e5:d4:cf:6e:bc:6f:95:9e:e8:67:cd:3f:54:f9:2c:62 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ctech.jaborandi.sp.gov.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:60:e5:d4:cf:6e:bc:6f:95:9e:e8:67:cd:3f:54:f9:2c:62
Serial Number (int): 381421749136652038108972963685370431089762
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:ca:1e:86:bf:21:ab:50:c8:4c:5f:be:78:42:bc:b3:6a:2e:22:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:1d:08:72:3f:75:1d:0f:fe:23:53:ef:b3:8a:3b:a0:0d:0f:76:b7
Fingerprint (sha256): 3f:f0:36:b7:d8:c6:79:07:29:2a:00:4d:8d:04:fb:9d:fa:b7:ab:66:d9:f7:2b:5c:34:31:6b:bb:15:4a:67:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ctech.jaborandi.sp.gov.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctech.jaborandi.sp.gov.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ctech.jaborandi.sp.gov.br

Other certificates including the domain name jaborandi.sp.gov.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for ctech.jaborandi.sp.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381421749136652038108972963685370431089762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 07:59:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 07:59:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctech.jaborandi.sp.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696398372297916829734608621333317362028308532200894246035331045546776542790861486450709504946961959481130179493846548567907181792124543941990235385050676202583543043284949404139278257747539198558557691641749723680734936692507518917077683629375663810786331880945058287805415673434535661583763586591300310891839091103191539906933435003002837798173644001683444431173791808989665678065437806743521530165085290419794085060781501189503705615079203597076146726038262518584466503935765609720160014641924826481352954382772506805881191740412627536736151113393065674864849920426081788057521990986359946388916441472390306841840654594234206033220703060398600845277453124605381233454885309675406826161639432824659797765607940815506095028238518823467669760206690369812682421932584305136977114486098888944360354396565046182512126196810824488639403734137757046187798613806509806204330944576887197076169701752342757476535525821335700806457930072558884437617606978180477880792202610074499185217714225535720989095378257522294331354777014952548137510826450751423818853159247177189973059558039037185926734011504194446844523872548625913720497380009881406943402407889989882545039272313810347008470363144181899949168483530392304518480640908437864351606956713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfca1e86bf21ab50c84c5fbe7842bcb36a2e2233
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctech.jaborandi.sp.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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