balnearioconvention.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:45:59:54:0b:10:00:67:92:e6:3b:d7:9e:a9:e2:38:77 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=balnearioconvention.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:45:59:54:0b:10:00:67:92:e6:3b:d7:9e:a9:e2:38:77
Serial Number (int): 334589747234010947123054468314022340081783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:0d:0b:4c:91:a1:18:ca:0c:73:4f:f3:ab:5c:bc:dc:17:54:e4:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:44:00:a8:3d:2f:42:d5:06:13:f0:5d:a4:4e:bf:89:c9:b6:87:13
Fingerprint (sha256): 48:79:c3:23:24:66:48:03:63:3b:9d:65:fa:d2:d9:45:e4:55:fc:33:7c:47:84:4a:9b:b5:86:26:83:3c:ae:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate balnearioconvention.com.br

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for balnearioconvention.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

balnearioconvention.com.br
bcconvention.com.br
camboriuconvention.com.br
visitebalneariocamboriu.com.br
www.balnearioconvention.com.br
www.bcconvention.com.br
www.camboriuconvention.com.br
www.visitebalneariocamboriu.com.br

Other certificates including the domain name balnearioconvention.com.br

(limited to 100 certificates)
balnearioconvention.com.br
balnearioconvention.com.br
visitebc.com
balnearioconvention.com.br

Certificate

The complete raw certificate details for balnearioconvention.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgISA9dFWVQLEABnkuY7156p4jh3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjgyMjI2NTNaFw0yMzEwMjYyMjI2NTJaMCUxIzAhBgNVBAMT
GmJhbG5lYXJpb2NvbnZlbnRpb24uY29tLmJyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4MyljILB+e3yuatqMIJyracYeHu3E1VmLpDcxvnKF8PZ1zZJ
LKrlICsMJzaXAybh5lxmJmBhX7gHdfENf+tp4JpvTe1pbmaThd51gbI75sDJ4bQS
4mtxnEUXHIwS9ExgtQjRR9CI+SztidDDv3JyCnbp02ng9E6L4wrW9FE3qKiZsnJ3
KKXskt6JEbCdQNNCb1sML2iNk9vbesnCaxOHAKu04rybhA+F6YXzs3x+G7mDpBV/
u1nj8i3AD3/3sBti3ixPMlzqCmCzM6a5+aToW0Kkda1Mzy233mkrO7vba03x9n1R
7NJihhdEJv766l5N/haReUoVjqCXsmf0QeSh1QIDAQABo4IC6jCCAuYwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQ5DQtMkaEYygxzT/OrXLzcF1TklTAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCB8wYDVR0RBIHrMIHoghpiYWxuZWFyaW9jb252ZW50aW9u
LmNvbS5icoITYmNjb252ZW50aW9uLmNvbS5icoIZY2FtYm9yaXVjb252ZW50aW9u
LmNvbS5icoIedmlzaXRlYmFsbmVhcmlvY2FtYm9yaXUuY29tLmJygh53d3cuYmFs
bmVhcmlvY29udmVudGlvbi5jb20uYnKCF3d3dy5iY2NvbnZlbnRpb24uY29tLmJy
gh13d3cuY2FtYm9yaXVjb252ZW50aW9uLmNvbS5icoIid3d3LnZpc2l0ZWJhbG5l
YXJpb2NhbWJvcml1LmNvbS5icjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlej
UutSAAABiZ7TlXwAAAQDAEcwRQIgeM69y8947g+Tu226jF368dd45Gin0pMrGqdr
SKvOBvMCIQCCshaCYJIi1M/N5E7YppkoIvT+s6dsxf0qvcJpODLp9QB1AOg+0No+
9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABiZ7TlUsAAAQDAEYwRAIgU6iN
cALNdVObVih/VF2+/fbzH0dbJyf2iohOzwxGId4CIDpoPH8BlvpnJnPEJ6L8r6A4
n+APzA3MF+XyGcKh4xRcMA0GCSqGSIb3DQEBCwUAA4IBAQCw5IUa9k99idN6a3Rm
pWvF/DAI32W4gEvv8I7PQjDZTvyKyNRj8PA340hrgb90Bo6ayg1c4k9UjFV4IQwF
InvLVw4sIiQgtWjddetJu7A0/wzrnlpV0cQeOWNo+PyjBc0ux93SddVCrN2fC/49
1e0vC8UXWFvT7QcjIrpfV1s+ehPvxO4if0CFFJygYpfbH2SIfTn5vWTgKpP5x0GN
i4mVJs//Do67gA+WZMQYufbnmeKRpzz04vXdTi+f3DjYF1Wa9ouIAQ0MHGOT3ji2
0qKZocFWLHhHPyArl8MqFPk1W05v6L7PwBGGtOBg7WMG+UM1RY7+LJxiP2cuk1qn
ua7m
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MyljILB+e3yuatqMIJy
racYeHu3E1VmLpDcxvnKF8PZ1zZJLKrlICsMJzaXAybh5lxmJmBhX7gHdfENf+tp
4JpvTe1pbmaThd51gbI75sDJ4bQS4mtxnEUXHIwS9ExgtQjRR9CI+SztidDDv3Jy
Cnbp02ng9E6L4wrW9FE3qKiZsnJ3KKXskt6JEbCdQNNCb1sML2iNk9vbesnCaxOH
AKu04rybhA+F6YXzs3x+G7mDpBV/u1nj8i3AD3/3sBti3ixPMlzqCmCzM6a5+aTo
W0Kkda1Mzy233mkrO7vba03x9n1R7NJihhdEJv766l5N/haReUoVjqCXsmf0QeSh
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334589747234010947123054468314022340081783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 22:26:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 22:26:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'balnearioconvention.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28378295349129783721191780810867724204088597937070504686882087414689319203680258882521149168015355517940418893381457721349894046770425061222339571117405637053012340417534289353437640070161651811894972477557740740465722402596394890318116303528436374605121421951472025241087415302944301365414791128337067005273761452727223174660135996014603386278391987810658571876920601234417984328346429252699946190186130775520310133322336920095010336779913035650557312518479887823236492204466813276392895867432941111366169080513795451317393015083597360963292707045662201643374887623636898848362271672136006554861956485440171371962837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							390d0b4c91a118ca0c734ff3ab5cbcdc1754e495
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balnearioconvention.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcconvention.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camboriuconvention.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitebalneariocamboriu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balnearioconvention.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcconvention.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camboriuconvention.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitebalneariocamboriu.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001899ed3957c0000040300473045022078cebdcbcf78ee0f93bb6dba8c5dfaf1d778e468a7d2932b1aa76b48abce06f302210082b21682609222d4cfcde44ed8a6992822f4feb3a76cc5fd2abdc2693832e9f5007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001899ed3954b0000040300463044022053a88d7002cd75539b56287f545dbefdf6f31f475b2727f68a884ecf0c4621de02203a683c7f0196fa672673c427a2fcafa0389fe00fcc0dcc17e5f219c2a1e3145c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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