recife.ftd.implystudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:8e:ab:46:0e:70:e1:64:a7:8d:e3:cf:36:4a:7f:6b:c9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recife.ftd.implystudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:8e:ab:46:0e:70:e1:64:a7:8d:e3:cf:36:4a:7f:6b:c9
Serial Number (int): 308145181742526378279384352175746189323209
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:fd:98:96:e4:a5:cc:99:ad:86:e3:8d:f4:a2:87:60:bc:a3:9e:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:09:a7:da:f9:4f:c4:a8:5e:3c:db:02:e0:1d:a2:da:76:2b:00:b6
Fingerprint (sha256): 5a:0a:fd:db:a8:d2:bb:65:ff:be:ff:28:85:8d:0a:2e:6d:a6:f8:9f:3a:20:b3:53:50:25:f7:c5:ed:ae:c8:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate recife.ftd.implystudio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recife.ftd.implystudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recife.ftd.implystudio.com

Other certificates including the domain name implystudio.com

(limited to 100 certificates)
metabase.implystudio.com
recife.ftd.implystudio.com
registry.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
api.test.fretapp.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
api.staging.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
api.test.fretapp.implystudio.com
api.staging.fretapp.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
api.test.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
staging.ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com

Certificate

The complete raw certificate details for recife.ftd.implystudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308145181742526378279384352175746189323209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 23:00:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 23:00:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recife.ftd.implystudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900201638557366955145054062674036938185574742302906617969930173168527807583535276918582706493853129440207783932316084871969671339577477731793609315562380199508353765217425396507124755166231966856316150381316294582840311022473177240716855635108882245075871252858483162085864022856254172829749178741410637624832964507962466947752553839689723110797138187321803442982313246164484270865953497534666957637560908916887884169429778021349248912223414753917140034599896835070469956053075594080775051124931059266741449141885005825714316888028381146891965987670372714209281111156972115109437691048145674188308068872352379600239927486477293393821701954577730261915058289595895145032657195267259567581167760745477494419274868888322705727794981336065488690195618746705031202348376628954408039381915573762944452668794637088065625246216613452884666290029295160373268185490269990954562662185278767528394236768312824517960338396244330995452356238011270273093885150776848463776977156137174573064201820497388111941517389907454451569968263121612708854732027742797036144690210894415169978132333121494593284543268748019955384910696806260725744494527564950840760218975605233754436890144764824852180064901271777901163781785869897314931352932483752937609763681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bfd9896e4a5cc99ad86e38df4a28760bca39e50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recife.ftd.implystudio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168fde7286600000403004730450220415026068144b39fb567b66bdf186e5111f27f006c2ad9fe99330e9e10b8754b0221009340eea38eeffd17a73df4f0a66f776cfffe208b59004767f8f95d64ac629b6a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168fde728bb000004030046304402200187b2515976e68cf882b2991346dd09ca894226275698e5e6f8f362de94bb7d022062c1a7531b829fefc9f57bc6f4a7428e1a138b07e853aaf8c38d0908a02b9020
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057977e07e29f9fa3990d3276dc42255033c99286d323ca06d5a7a62cbdefe6d8bd4329a6d4ab068f219a8eac371fe5abf98f84d5779b645fcafe2d62fdf6ff588fc975faf1f8d1ccec52b7a5aeaadab2a835a6f205c55cdf5f5553061efec42a717dae763303fd301bfff46a9af8d21f910984f960a4e05633b961b2b4fad934a008672d86d01a288e8c20227348e05406567bffc426eee33669e4d07a92de92cb60d2ac9f04b7ead4a93db54dc522fcde848ef1c12c6c582d79f50b61853a71b8c9bf837ff372a7cd53c04d184ab6c2315d27ca5fe750ef3563837ccf3629cc21b795aecfcedf9ac115839f0b24ee35ece853bae3d4e3be007770a910f6a663