auditoria.snacional.sefaz.salvador.ba.gov.br

Issued by R3

About this certificate

This digital certificate with serial number 03:ac:67:32:00:76:bb:2e:54:1b:52:a1:2d:6c:95:84:27:b1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auditoria.snacional.sefaz.salvador.ba.gov.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:67:32:00:76:bb:2e:54:1b:52:a1:2d:6c:95:84:27:b1
Serial Number (int): 320002595013497781613152936015886316480433
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:19:33:19:ab:6c:b9:23:de:72:7a:84:91:6b:b1:96:b9:3a:47:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:9f:51:d3:48:c6:54:16:61:85:97:a1:cd:51:1b:1b:72:eb:c7:6d
Fingerprint (sha256): 48:8e:be:36:98:16:0e:ec:37:38:73:dd:a7:17:eb:82:f5:a5:5e:81:c9:73:29:bd:d6:9e:0c:1b:40:bc:e9:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate auditoria.snacional.sefaz.salvador.ba.gov.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auditoria.snacional.sefaz.salvador.ba.gov.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auditoria.snacional.sefaz.salvador.ba.gov.br

Other certificates including the domain name salvador.ba.gov.br

(limited to 100 certificates)
recadastramento.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
ava.portaleducacao.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfse.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
agendamento.sedur.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
sedur.salvador.ba.gov.br
*.salvador.ba.gov.br
portalvida.saude.salvador.ba.gov.br
www.dom.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
vacinaexpress.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
*.salvador.ba.gov.br
filometro.saude.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
nfse.salvador.ba.gov.br
marketingturistico.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
christi.salvador.ba.gov.br
salvador.ba.gov.br
sedur.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
pad.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
wsnoeprod.salvador.ba.gov.br
www.aplicativos.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
vacinahoramarcada.saude.salvador.ba.gov.br
recadastramento.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
plano500.navegarte.org
dados.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
senhaweb.salvador.ba.gov.br
horamarcada.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
www.sefaz.salvador.ba.gov.br
webmail.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
sedur.salvador.ba.gov.br
redmine.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
pad.salvador.ba.gov.br
api.pgms.salvador.ba.gov.br
sedur.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
christi.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
www.vida.saude.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
webmail.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
cadastroescolar.salvador.ba.gov.br
carnaval.sedur.salvador.ba.gov.br

Certificate

The complete raw certificate details for auditoria.snacional.sefaz.salvador.ba.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320002595013497781613152936015886316480433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-30 11:43:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 11:43:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auditoria.snacional.sefaz.salvador.ba.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3389360934789564413386533363436031954124523983641012114623633532483612102416012317593788069202449887497182924116461610734607285221688717491996427536819654195166339375433797491839774589512134977981877301679113886583147271315632938311833934982486693036097896045679466082381960318300464907933974149144273408892531239234029088862851301242396364935375624450133802552651019221532051085984297342422073622428956775990621843249388191222677811639779617767761233183143530449432723173117806226365437903771223263088210523647261305893295642073020231882956349511461205366607653357300757244164034446798363971740107577668355767811186659464121089949543590951922651274269126222089632055366163754909494048234818414477040277267064025001177735821935443496359391999103533095315614068472991266629410140247264871037865992454778134851226736952512370033475438861988919966337918855592017906033154264633722581049716912690776089710232343336678077811066223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d193319ab6cb923de727a84916bb196b93a47ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditoria.snacional.sefaz.salvador.ba.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189a6d36f550000040300483046022100ba9bea72b2d3826525d955072587244a50ce03865ad325c8e5e3cb6c32bed561022100fa8872f0598807d233ff1bcbe2dfc77bff5226cd96144fb4a12aeb46ade5e6b20076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189a6d36f6b00000403004730450220631f3374b3f6148e28fc09fa63b587d73aaa4a065350b6c01acabf1c24808cd8022100f9f227997786323f732e993823aa90b3b6a121acdd0292b570ad2646f4c6c6dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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