domomento.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1d:f0:4e:8e:ad:15:ac:65:5a:a7:31:af:f1:d8:4d:b7:3d was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=domomento.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:f0:4e:8e:ad:15:ac:65:5a:a7:31:af:f1:d8:4d:b7:3d
Serial Number (int): 358636754979706890985568822606086414382909
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0e:e1:dd:c3:a8:dd:72:9d:f6:ba:99:ac:76:c0:c8:8d:d5:7b:ad:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:84:2d:40:38:84:93:df:e5:ef:96:e2:c3:fd:92:48:7d:1d:7f:70
Fingerprint (sha256): 42:2d:46:c4:71:cd:32:25:01:b9:51:36:e7:04:9f:75:73:bd:bf:c1:b8:9e:55:99:01:25:8a:c6:b6:aa:1d:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate domomento.com.br

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for domomento.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.domomento.com.br
cpanel.topdahora.com.br
domomento.com.br
domomento.fwsol.com.br
mail.domomento.com.br
mail.topdahora.com.br
topdahora.com.br
topdahora.fwsol.com.br
webdisk.domomento.com.br
webdisk.topdahora.com.br
webmail.domomento.com.br
webmail.topdahora.com.br
www.domomento.com.br
www.domomento.fwsol.com.br
www.topdahora.com.br
www.topdahora.fwsol.com.br

Other certificates including the domain name domomento.com.br

(limited to 100 certificates)
topdahora.fwsol.com.br
domomento.com.br
domomento.com.br
domomento.com.br

Certificate

The complete raw certificate details for domomento.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9adt+a4hF1aL2zLxS6L1
8aZ5+/lEJx76+pU4cy/lfB2pbsxoOaEvbZ8JwqwiVW731xOwZfQPvEgknOfUsHYv
tMY1p1ToI+LdNDRDbuKVp22neptAfg4m+JcZ86JPnp0PyAYPHOfwCEpC2OXFt1hR
iVlM4SHJF+njYqSvkHRKfmUfBFal2mhuK6+UkTdGn65E8K3CYoXax3renK893LMg
RiTBw/3ku0k/bBEo8ypYUb1f1+JIM9eGm0AxncOKx9vvGs2uwOS7YeE3z8r8uQQ/
Wii9WczJptt3LKrn6UCdpbgP+gTgdpCGH7iurWv3nCdu2JXxapaugZCwAAPmLTKD
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358636754979706890985568822606086414382909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 06:19:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 06:19:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domomento.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31010947325190251465290502611638704414112530008261644062781197629354252035522660397917684764730220915506308085623577469235904058181985534927188157295322003855990847341740513858716443349358239484448751506376867285322691409450063016730765108010325510891520668278271549576387590194869633207236366161673016572245007048480250381112272618674274601213087887565049957435221799674711988919456057054126365522590244839458405893386812155424533098419136075024791766781023607182997267246141288737374059213476049578103380967781133506217936709348213547857686626792986215720836218733053386298560930340298005894026005250531610049283029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ee1ddc3a8dd729df6ba99ac76c0c88dd57bad0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.domomento.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.topdahora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domomento.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domomento.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.domomento.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.topdahora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topdahora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topdahora.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.domomento.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.topdahora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.domomento.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.topdahora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domomento.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domomento.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topdahora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topdahora.fwsol.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f9dc56014000004030046304402201af2845f9c2359d168886a6857e195aad21658d97d61993ae52b3ad83d237ed2022032ba4503122108fae80869af09da365b74032fca92f7eb73c0417b7abf873f9200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9dc560340000040300473045022014bee547c2994a3765ac38f43214da8eb8a07078aeec055f472deb60e51b767b02210081547a1fd3ca954435b8a6f9110c2199aceaec6fc129f590467c925eec7c17ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004eddd89b6cd27e2dcb0b96345de24cdc66ff814f26e1b4a9a79d8cc88dca30e41472be92ecc1be8e500fddcaa052772ec2515bd77579f25e9695cd45a354e60eb838391c2b4c17aa7809120c0b1378d289947e2ab35053fb8402e82784fa3185060b7af4a749fed38c70ee40861d2dabdde83d5f849e2664790c2e512ad7fecdf3576610f1cfec9467f978b436073133c458c9021e81439bd24a22bf1eead6d8dcfb93413d93fcc384772584f81707158183190f8c287a10ec3005e9373c7cdad3e519432495926f26e72f34ccfda584205905c6a67a9cffa9df852aa6185d281e94463535c37a9db5e2b3b11b22048e2257eee06e751f8e3d50b837f9e84bfe