www.megapratas.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:7b:e7:ae:f8:8c:8f:39:6a:2d:48:6d:9b:83:b6:3d:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.megapratas.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:7b:e7:ae:f8:8c:8f:39:6a:2d:48:6d:9b:83:b6:3d:ad
Serial Number (int): 331940005760802224462168511124482330869165
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:40:11:c6:d4:3b:65:0a:77:14:96:3e:b4:1d:a5:48:f7:b0:d0:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:09:9f:d0:8e:2b:5f:02:2d:d1:f6:9f:62:3b:61:c7:2f:06:80:b5
Fingerprint (sha256): 50:1d:6b:5d:10:6e:57:51:0c:0b:27:53:52:98:8c:24:30:9a:ae:31:e9:d8:4a:07:9b:7c:76:13:e9:5c:b4:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.megapratas.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.megapratas.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.megapratas.com.br

Other certificates including the domain name megapratas.com.br

(limited to 100 certificates)
www.test.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br

Certificate

The complete raw certificate details for www.megapratas.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331940005760802224462168511124482330869165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 06:15:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 06:15:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.megapratas.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866405146711757207403720061274222006613978491169580270584810668031656525992239768999608600497825886075754001104255435627776462237661265118597684739260104933009823091897352602325059746328392073276007934426859486459376798190081190156972112084684759952484028152684589020414500606234786521922159866466910507715262283440777043328580116783278180381610222522833289925625560005107076310887237713286688264507790465685395357210565341668874069651401206854062137651994517967367745589678216148245234882242444233384514418704119260875297783872158823409332884619681960377702530444712495742257169062325592202878566843929292414950133941669963686560705891426008290452652642966437733356741388039758176966398346802061334482557416306768273332467441831570342995456762406952984189557275573205177875055966620254959436364913773224467375605538730335486538655939807888464610731389235983798330147685851360583007118496788753309081110345734120301982194896005636666390051653145184522110621517985851886288969788165080318599410118066893819937969917042264017849007377833261811726882272222745073432270844368772834550811338574261667489879765816402460021194868504346594551337050441793153703030709286672511777086114714892090134063165499890566389411791678413818055497912267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a4011c6d43b650a7714963eb41da548f7b0d029
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megapratas.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001633e9af73f000004030046304402206fa5d1b80450e21e19ee44a684a6109bb5eac640eae9b4c1b104787beb08d08f02206c8988e48fb1a7a5df04b3505a7d734a7f38767c96894bff3767d01db697028d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001633e9af74f0000040300473045022100c2ce868a0f330c72bdcb63a2bb591c134dafc1c6e42ff2d9c8427fcf84e6882702202b70e6a5450bd7f1a047cf88a9835a2e9259fd98f437c9b37c84006038f68d21
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0012873447dc2dfa39b62f28d0e21dbf7ecec73ae2c4716ef30617115314667b84274208b15734a5ebff38ad9c2510926f9ca01a5e7447b99095a0b988155b549cd70abc7595ae9242771cada7e279ec354535b67119248e5f8bee4667297282c16081fff391d89a6b002d75062452ff99711c448979ea3edbf39b885f4473b35a3e0fe867a5678a747ef030e5c6efea2702e6c9e43a51fdd20262271f010bd1e2b88ff1ff76f81edbd3a1980f55d46c94c3d97b3e936c574501ddaac82b1182118b7b304888ab180731b0e305821a0b967f6f4d49328cfb408ed750749f45c9d306c65d0881bfa57a879a14582ea9cff70d7542f87048741106a5004077bd6e03