*.lucrativo.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:71:af:26:8e:c1:7d:15:c8:48:c1:3f:f5:2a:e3:fb:ee:b5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lucrativo.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:af:26:8e:c1:7d:15:c8:48:c1:3f:f5:2a:e3:fb:ee:b5
Serial Number (int): 387133866291081928602340463706570504269493
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:09:69:36:91:04:8a:95:51:35:bf:0a:e1:70:47:c6:a5:31:60:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:4f:15:a8:b3:a3:8f:a2:e9:48:c9:00:23:14:30:2a:ae:ac:86:43
Fingerprint (sha256): 50:c2:7a:57:be:97:09:38:cf:59:fc:a4:4f:40:3a:06:a3:f4:d3:33:a0:e3:6a:37:f0:07:e3:f4:e2:50:c1:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.lucrativo.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lucrativo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lucrativo.com.br
lucrativo.com.br

Other certificates including the domain name lucrativo.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.lucrativo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISBHGvJo7BfRXISME/9Srj++61MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDQwMTM2NTZaFw0yMzExMDIwMTM2NTVaMB0xGzAZBgNVBAMM
EioubHVjcmF0aXZvLmNvbS5icjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANIy1qCXadKjtAkdc+pgfEQ/k66FlUomI3yH8qxXkA00DSgT1Cigke5mNNUk
9tq8Kzc883M4m59I0fbdvbKvl/JQzFzJowEvoyeeCNS1U+ybZuThHRw3NXtAEexo
mMEsb/Hzr7enSerVWnwS6wUAx3IOcIEEK0GdR+lc5I97i/pNYnUeGm7j/vKL/ccs
lHkF5dVf518HvVGRANaLttCBeQHZeJTkJucP63I1/OuWX6kkJijVOUfUWNr1hdnT
YZiiNRE1FFG3m40TNg906fDCncaK40oPsnQZtat4Z3vAWf5AwRkBY66FUXEdIWvD
A/gajjEIgHoV8IYh50jtxcCxpu0CAwEAAaOCAiUwggIhMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUtQlpNpEEipVRNb8K4XBHxqUxYEIwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wLwYDVR0RBCgwJoISKi5sdWNyYXRpdm8uY29tLmJyghBsdWNyYXRpdm8u
Y29tLmJyMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB
8QDvAHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGJvme9owAA
BAMARjBEAiAn1eMqt35EvGmV4KJU5WPoZmjStjepLTFBuEw07AyNzAIgVvtctWt+
QDEl+opfCj1KWYdbFLb13btuZfwU4Xw8wXcAdgCt9776fP8QyIudPZwePhhqtGcp
Xc+xDCTKhYY069yCigAAAYm+Z74FAAAEAwBHMEUCIQC2KeehcJwPFdKAp/HAC919
jz5k4Lw1caXH9Z1sxN+I1AIgHMXyuSGAzY2uv/mAfCp877oPYc5Vt245XXUL2XgS
WnUwDQYJKoZIhvcNAQELBQADggEBAIBIzHE/uv1b4anRTA97h5wAy0LABJCq1678
KkPTgQBxLhWVIAjyY86aC6ws9H4aoI+lzgS9xoXGpnzDaHnl8mWnm1P5N9tOxIOA
0OibVElYKhsbXLTTCEBBAyn5xwXwPxsHUCv7pYTbKe0AZIXpKelGfEh94iCly8YQ
UKRoHgFn1viXbE+/aDC8kU3mu2F+K63W5TOOhdRhFID+mZiXHO9IUEixtHj1E3Sp
wKCTNI3ROPQbwfGRKAiJf+5UBvu4mR8lb+L9EcpnYsPb9l2lTf+9+vk/KITwB7Aj
FW7VBIWhXKF0Meohr3ewVr0kT+3f+Ds8gkzHP4OZf0gftmj2zE8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jLWoJdp0qO0CR1z6mB8
RD+TroWVSiYjfIfyrFeQDTQNKBPUKKCR7mY01ST22rwrNzzzczibn0jR9t29sq+X
8lDMXMmjAS+jJ54I1LVT7Jtm5OEdHDc1e0AR7GiYwSxv8fOvt6dJ6tVafBLrBQDH
cg5wgQQrQZ1H6Vzkj3uL+k1idR4abuP+8ov9xyyUeQXl1V/nXwe9UZEA1ou20IF5
Adl4lOQm5w/rcjX865ZfqSQmKNU5R9RY2vWF2dNhmKI1ETUUUbebjRM2D3Tp8MKd
xorjSg+ydBm1q3hne8BZ/kDBGQFjroVRcR0ha8MD+BqOMQiAehXwhiHnSO3FwLGm
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387133866291081928602340463706570504269493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 01:36:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 01:36:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lucrativo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26535113386308405898102133745792764721834967949005778342536620021090394760120853758843052694060141734178164414863771899926622994317939255483762157901963604991993413226576582004426316021242964469936751541089877215713149381361613587339818369055439064846902464127014902329709629295933839382274400758492304725417151003482304710422882344400833207426192195818057298518481289032244017096089088180332323479874249462815020527641245219817304070319947384591572152987630321800636516380631576386776355453549333179556321248935740178892377309926441256667081970980983132784478951503013639691932958359479283036795453248717713556219629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b509693691048a955135bf0ae17047c6a5316042
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucrativo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucrativo.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189be67bda30000040300463044022027d5e32ab77e44bc6995e0a254e563e86668d2b637a92d3141b84c34ec0c8dcc022056fb5cb56b7e403125fa8a5f0a3d4a59875b14b6f5ddbb6e65fc14e17c3cc177007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189be67be050000040300473045022100b629e7a1709c0f15d280a7f1c00bdd7d8f3e64e0bc3571a5c7f59d6cc4df88d402201cc5f2b92180cd8daebff9807c2a7cefba0f61ce55b76e395d750bd978125a75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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