lgpdband.nuvemx.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:f2:45:4c:a2:e3:f0:0f:e3:03:5a:4a:73:0e:13:23:30:eb was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lgpdband.nuvemx.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f2:45:4c:a2:e3:f0:0f:e3:03:5a:4a:73:0e:13:23:30:eb
Serial Number (int): 430889591171987946877354452345366243389675
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:91:2d:75:ae:0a:0c:db:65:ab:db:f7:88:d5:82:dc:63:3c:43:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 01:73:5f:70:8d:72:af:35:4e:fb:8f:7d:37:ca:fc:f7:64:02:5c:35
Fingerprint (sha256): 52:2d:95:7f:86:8d:42:49:53:04:a6:3b:89:5f:4a:aa:ff:27:6c:34:42:80:82:e0:52:16:21:11:dc:8d:11:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lgpdband.nuvemx.com.br

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lgpdband.nuvemx.com.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lgpdband.nuvemx.com.br
lgpdbandtv.nuvemx.com.br
portallgpd.band.com.br

Other certificates including the domain name nuvemx.com.br

(limited to 100 certificates)
lgpdavonale.nuvemx.com.br
lgpd.mmcorporatelaw.com.br
businessgenesis.nuvemx.com.br
grcdemo.nuvemx.com.br
lgpddata.nuvemx.com.br
everest.nuvemx.com.br
lgpdalbertsabin.nuvemx.com.br
lgpdtotvsux.nuvemx.com.br
lgpdconceicaorioverde.nuvemx.com.br
lgpddemoux.nuvemx.com.br
lgpdpostopresidente.com.br
lgpdpmi.nuvemx.com.br
portallgpd.lojasmm.com.br
lgpdmutua.nuvemx.com.br
lgpdteste0715.nuvemx.com.br
portallgpd.stoccheforbes.com.br
vivver.nuvemx.com.br
businessnec.nuvemx.com.br
santacruz.nuvemx.com.br
lgpdunipam.nuvemx.com.br
lgpditauna.nuvemx.com.br
lgpdcoqueiral.nuvemx.com.br
lgpdband.nuvemx.com.br
lgpdmpevazia.nuvemx.com.br
lgpdbelago.nuvemx.com.br
lgpdsinprosp.nuvemx.com.br
lgpdsonda.nuvemx.com.br
lgpdsuporteemx.nuvemx.com.br
lgpddediccar.nuvemx.com.br
businessembol.nuvemx.com.br
cedro.nuvemx.com.br
lgpdbasicdebleison.nuvemx.com.br
grcvazia.nuvemx.com.br
portallgpd.bbmlogistica.com.br
portallgpd.tppf.com.br
portallgpd.defensoria.pe.def.br
lgpdmpeparceirovazia.nuvemx.com.br
portallgpd.rfconsultores.com.br
lgpdhtb.nuvemx.com.br
lgpdabr.nuvemx.com.br
cs.minhaitatiaia.com.br
portallgpd.taua.com.br
lgpdpmi.nuvemx.com.br
precavida.nuvemx.com.br
csc.pluro.com.br
portallgpd.fibracem.com
lgpdtotvs.nuvemx.com.br
lgpdtvanhanguera.nuvemx.com.br
lgpdexcellence.nuvemx.com.br
lgpdquintera.nuvemx.com.br
portallgpd.defensoria.pe.def.br
grupocataratas.nuvemx.com.br
ouvire.nuvemx.com.br
lgpdcobasi.nuvemx.com.br
lgpdteste0823.nuvemx.com.br
lgpdpoclgpd.nuvemx.com.br
lgpd.gndconstrucoes.com.br
portallgpdraf.com.br
ingra.nuvemx.com.br
aprs.nuvemx.com.br
lgpdiosr.nuvemx.com.br
lgpdcarglass.nuvemx.com.br
portallgpd.pitchonimoveis.com.br
lgpdagricolaalvorada.nuvemx.com.br
pjus.nuvemx.com.br
nexusliga.nuvemx.com.br
faj.nuvemx.com.br
lgpdkinoplex.nuvemx.com.br
lgpdembol.nuvemx.com.br
lgpdclm.nuvemx.com.br
lgpdbreitener.nuvemx.com.br
alianca.nuvemx.com.br
grchect.nuvemx.com.br
grcnowcy.nuvemx.com.br
lgpdgloboaves.nuvemx.com.br
lgpddpmg.nuvemx.com.br
sd.nuvemx.com.br
lgpddemo.nuvemx.com.br
lgpdmatterhorn.nuvemx.com.br
portallgpd.emxtecnologia.com.br

Certificate

The complete raw certificate details for lgpdband.nuvemx.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430889591171987946877354452345366243389675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 12:05:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 12:05:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lgpdband.nuvemx.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3976085552621135120881261510797298607494365046188692672741971949332072484266872344486374152693587544280004528330089827935536174451442953677640233909861219478730051428051076203984121267583037870394941066030419117021748790506456710494526308518303057586041332527728995257497255630411585952518114578778618037102385721844660483360493667769985443101099507863980787862418965585833244155890355610375449001599797674675262834244885284276831199275659221902375551342112148557249808360172843072388736928734014163137788951917331639316959494949044511110828489961240815852915575899034149961658337434170230367444751200103117458004027278727609645193669085671236254867810875292695574370112206899344617649795419254560256885363346318538124643488172912855676244400110698239488363320716938466015553350442411057775323745324659030823497602199957445379754694553691670541105454156518364647793324967483965953117213646876998341527601657062013820558191263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47912d75ae0a0cdb65abdbf788d582dc633c43c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgpdband.nuvemx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgpdbandtv.nuvemx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portallgpd.band.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f00c3036f0000040300483046022100ee909f27ba1e94cffc615b3b30bdeee1853e9d94741722f4b027bb83c3a24f4e022100f16bbabe48ef149306e44310f99ac70d4e5f6b13eb9ef456b207fedae4eaa50700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f00c303770000040300483046022100de1366c53caadd5fd205f2ef5c589b5988143e41054c999fff5ae9f3a7e30cb3022100e299a83a7411c1dddd30475a96af8ab8e23fbd76217fecbf4ba9cd4ebc60f932
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00790a83278484f0db2ae73ae11066e559a29bc6d5832477645b84371aee7c33ef9ff261332a7626773eb6ca0f3075a3514184d00ffacdc64ba693a8d3e0a7df2b66982f8edb723da50d924477826abb0c0cdb34bf6e672e0aff3991f65c339cc4481936fc098d5fae0b4267bc0f1504f450a7e62f9d7aa9d90a6e9c2e4ce1f4ee725e219ae0681378016d49761dcb7762e9bcf8b4f504b771e7a56e290ffaf0b1c51bdf0c3567b6c5dfbd8234bb51ab3d81834c4905bc72dab6617f7582cb1abc70e30f73818402ea1b59bdc8a5d8efde53c72954a26795184edb547adc73377afbafc595c0924db9a78790cd23bdbd1bac0329f1cc3363d43259b41e0f8d4a45