activecorp.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:59:1f:23:34:11:f9:64:9e:bf:80:c4:22:b8:73:d7:32:d2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=activecorp.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:1f:23:34:11:f9:64:9e:bf:80:c4:22:b8:73:d7:32:d2
Serial Number (int): 291663377305613005861462398315433196729042
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:59:25:8a:97:76:25:ee:7f:d3:67:08:cb:cd:ff:0d:a5:53:dd:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:ef:6a:91:f0:d6:f5:20:ec:ad:cb:84:f6:62:f1:49:cf:9a:86:31
Fingerprint (sha256): 45:84:8c:d4:94:0d:52:55:8e:ab:51:00:fe:39:c0:55:24:e2:40:84:26:a3:8e:07:47:c1:37:b7:ff:cb:17:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate activecorp.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activecorp.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activecorp.com.br
www.activecorp.com.br

Other certificates including the domain name activecorp.com.br

(limited to 100 certificates)
status.pipeimob.com.br
www.activecorp.com.br
status.markiiieb.com
status.ngxnetworks.com
conteudo.activecorp.com.br
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.quarklink.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.mapworks.io
shw.rmt.status.descartes.com
status.pipeimob.com.br
status.doccle.be
status.lenderdock.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.nwtc.edu
status.5starcoms.net
activecorp.com.br
activecorp.com.br
iq.syncd.tech
shw.rmt.status.descartes.com
activecorp.com.br
status.prokurio.com
www.activecorp.com.br
status.rapidsos.com
status.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.dayonebio.com
status.prokurio.com
status.zeasn.io
status.dealerexpert.ca
activecorp.com.br
status.ssw.edu
hahttpstatus.myvfirst.com
status.zeasn.io
status.naviscloudops.com
disponibilidade.activecorp.com.br
status.orangecityfl.gov
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
status.rapidsos.com
fretebrasil.activecorp.com.br
shw.rmt.status.descartes.com
status.cubiksonline.com
disponibilidade.activecorp.com.br
conteudo.activecorp.com.br
www.activecorp.com.br
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
activecorp.com.br
activecorp.com.br
status.us.premium.salusconnect.io
activecorp.com.br
status.5starcoms.net
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
conteudo.activecorp.com.br
status.whatgoesaroundnyc.com
status.intellecommerce.com
fretebrasil.activecorp.com.br
status.prokurio.com
activecorp.com.br
status.intellecommerce.com
status.anywhere.asolvi.app
www.activecorp.com.br
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.nwtc.edu
shw.rmt.status.descartes.com
iq.syncd.tech
www.activecorp.com.br
status.mapworks.io
shw.rmt.status.descartes.com
status.lenderdock.com
shw.rmt.status.descartes.com
status.facm.cl
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.dayonebio.com
status.apptrana.com
status.tronixtrm.com
shw.rmt.status.descartes.com
iq.syncd.tech
activecorp.com.br
status.apptrana.com
shw.rmt.status.descartes.com
conteudo.activecorp.com.br
shw.rmt.status.descartes.com
hahttpstatus.myvfirst.com

Certificate

The complete raw certificate details for activecorp.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApxREr13FMkHgTMpMG5lt
e1NkZOQEx9K6TQvngoKN30O/0tOjCAvo/rfdP3w6TH8f4jWitV+bGvL6ZFFde2Q2
VcvmVLqVu62iG00MXqxK52Ib6ddRlSWPKb8Rh8Ya9CjaYKy0Pqb3NZ+y3w9ZxpV0
fQRjGTIJyM35iN7pP+EYQfkHmMftdgnpUtU2JOew954O3mCkFeNbc2pCloBqKvEE
C/rolHAB2BS0G0opgs3doggH07UCAa+WVoHsnqUp6q1jpRN5XsmOGWYE0sx7mCJU
8fE3zkAL+1kSA0bPn04z4sBc/xVnjLGlagccG4JLznvfv2BG5UfMrGj/t83mM+vF
U6vvDz6AuAeZ+vXNpynj8lQJGUk5Yowyu5/hwTTS7t4jnTaRG5yTLbDDO4MfZiBD
SbHEXa1P7BsOmxfUMw98Skn50mT0KVMK6/YE9lVWxWQXG+ZddTTBFJCYC/oWW0wc
0NT2jEP+ZI+PDrpb3Bfd1B38wzYH+yRvI0e9W4ooZcMjMZsFP1m+Wb+JVF9CcX7N
Ig5fzC86h/U6WGHtndHg9dzJzr3jtOz8bskZqkuug4fhSh27hX8KlDd3uKpXlvGg
uC6CfHZBuEMYKqPIs2rTpLXXhvALBD96UpxOjIRLQujlL9+0FjL+PAyHA+z5cJ1B
J7d+67vo2sbjuM6u9HV2bNMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291663377305613005861462398315433196729042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 23:55:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 23:55:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activecorp.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681623557224371532074368631949618640412113870601420077963153168450026417833292795405809900924268314567042284441965797739429025591224879010112043868721046261760136040626056931878644872201556410116344901288837691070452815126948886195154541257672468695638924043771803757302963582208999613648076620130403474100768195803327948565774738131416734844779704710752431918676139269638530148022109190765931999664903194850091724727450436962852941048114275294801296235586050148995034594926822472840275992510481986251842703444707380494124950130325034262638343292773389340055417999410460029011562291806946229938909312476144749830864611656392360987043222734465028291389869963478273796819649363908107923393108993070374779082046491404149575947030540246742784203774328409022468306450584269633859037101545515849491213558447321883584741744185657435531703855513636403722388181880773251105970569989522327624176001524421635932154502717492095716319321727027158865960973679183279892559209836543369290565258738699899060025312575678120198680131227509066741176616324460101589965168083219991467591922386374499890727383802025952561044179788217133441675364956056838128412346033987089500047854136671786936283142623402877324745377118279506300554615237634763326517308627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a59258a977625ee7fd36708cbcdff0da553dd38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activecorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activecorp.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a1abd4df9000004030047304502204e98fa1b563ab79ed0ce3ed03ef15913afedbb24b85d6c716160b895c9aad4e60221009030855e727d18bc231ba0e80cb51eab2158260bc6c4a259c5ceb26f41620c11007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a1abd4e840000040300473045022040d4232feb04e4043d45e7d6e1ec0a719f39a87e106d5d4c9ad13fed81b5ced2022100f6328123cf9b935667bd10dcf2bcc5299cd2464f2afe7cbe9a670cb163d9a4fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aa55437d65d241f9fa2e8077d479a81611e381ede4014fa05722b556f0cd817418070435856cce53328094f4225f0de3f548f3a71386cb59086af1d0a18b13203607a3a3233c9ca15c57ff82d47da7320b8327e585de5e33e1234cc6766f5705c269e98885f2494d93df624fb07862a52cb1358fa64e7468f21d5b87cfbaf8d3d9e1b4750d7be7f6fbdf67184d41421b6e1eee54e606f4ef7e176c7483218a4ba3ac75c0f01aac60622fad6828713e038dd7a6b2c4e8cbd87f114150db31ed596020ab08ac76c19cfe461197899625f7c6eee346b7472c1833888de86bbeb118ea2ecbca79cb29a711ac6d69e4d39194696a0eacc83bc63bffac2562d357efa6