lepidus.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:21:91:d7:d0:7a:9e:81:4d:df:8c:8d:5c:55:02:45:67 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lepidus.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:21:91:d7:d0:7a:9e:81:4d:df:8c:8d:5c:55:02:45:67
Serial Number (int): 293368022069989816659416484728306149770599
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:57:c0:a8:2c:43:bd:d5:80:1b:b3:0d:41:87:00:b1:3e:53:1b:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:ec:d1:82:98:99:22:e4:50:3a:42:90:f8:55:5e:f2:e0:b9:f2:cd
Fingerprint (sha256): 55:70:d5:44:43:41:3c:ad:a9:93:1d:d2:e7:ef:15:da:dd:39:86:24:a9:eb:d3:10:1f:e3:a6:b7:a8:98:cc:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lepidus.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lepidus.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lepidus.com.br
www.lepidus.com.br

Other certificates including the domain name lepidus.com.br

(limited to 100 certificates)
maven.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
wiki.lepidus.com.br
domus.lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
redmine.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
maven.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
oc.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
wiki.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
domus.lepidus.com.br
crm.lepidus.com.br
nc.lepidus.com.br
redmine.lepidus.com.br
jenkins.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
www.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
git.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br

Certificate

The complete raw certificate details for lepidus.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293368022069989816659416484728306149770599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 03:08:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 03:08:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lepidus.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854924302993088740210129465225757506096281011606281156434836183440507328945226474597830754625791508862757823128990510467317122760766975199642450895762644450313369534450438239864828049860885953181837697713713011368375496251142839626700558969688330151013051138794779347261328025489755486753969331614372396003207122978740350861769757320058694688744682189770242711478128802229178226496643500483326387973487902219951267797114449163599105303351543859298950661135298735564456640369408519256141450100880405636197370914734240163700915183556308189192587843919212597961406747582500016758845129369252699830844331643214152138864047873380066037556067027012700929150854255766696814011056527298155403131965689059956803556667778847361777104820617065676708588248792640702735628370809892455513840594172354472543797789491259763897332042970201756970069028187252527871070647346324345332784847403366685947153330710624845204332485151219248287307517110490997434083421937172145116754326796489743048862338017431927351456384790636457602275172168464479533246453311975830456506860066804309824331362552989060951128160477694468125001356265958839017955141240213476793501534518823487037118813594542878597944492669012384010225870192207224175956278884957053911297146393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5157c0a82c43bdd5801bb30d418700b13e531b55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lepidus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lepidus.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001752f97e1c40000040300473045022052a67f3e36875d5a1942ebbf90e4ce2c5eb4a313aba9e7b07d6c1c7fdd446223022100c6f3807581d667e360d8ac44361c98e6f383a101f352102f9d65a9a0c20d3e050075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001752f97e22c000004030046304402202cab753bdfa22cf83352cd420ea2494938c2ed058a9837b942eebdc0f9d2a8e4022003bf19d297d99ab2dc05aa0c9bf969e5c4f73cc00f0bdb0f475841f8b45784ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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