cristianocec.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:c0:60:cc:52:2a:97:9d:cd:99:38:bd:22:00:06:8c:4b:95 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cristianocec.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:60:cc:52:2a:97:9d:cd:99:38:bd:22:00:06:8c:4b:95
Serial Number (int): 413912024958547757933882857173804598971285
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:fc:a8:07:db:c5:a5:6d:f3:6c:62:4d:d7:9e:39:12:fe:a5:b5:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:01:7a:c8:56:6b:5a:ca:85:8f:e7:73:cb:74:8c:3d:d2:c4:5c:c8
Fingerprint (sha256): 65:ac:8e:36:8a:1b:09:95:39:35:5d:34:b6:5f:d7:c1:2c:4c:e2:4d:03:16:ac:c2:34:fc:6e:86:37:9d:10:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cristianocec.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cristianocec.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cristianocec.com.br

Other certificates including the domain name cristianocec.com.br

(limited to 100 certificates)
blog.cristianocec.com.br
materiais.cristianocec.com.br
financeiro.cristianocec.com.br
ti.cristianocec.com.br
mail.cristianocec.com.br
dp.cristianocec.com.br
fiscal.cristianocec.com.br
cristianocec.com.br
compras.cristianocec.com.br
blog.cristianocec.com.br
crediario.cristianocec.com.br
helpdesk.cristianocec.com.br
crediario.cristianocec.com.br
vendas.cristianocec.com.br
crediario.cristianocec.com.br
vendas.cristianocec.com.br
materiais.cristianocec.com.br
cn.cristianocec.com.br
dp.cristianocec.com.br
materiais.cristianocec.com.br
helpdesk.cristianocec.com.br
vendas.cristianocec.com.br
materiais.cristianocec.com.br
cristianocec.com.br
sidep.cristianocec.com.br
www.cristianocec.com.br
www.cristianocec.com.br
blog.cristianocec.com.br
blog.cristianocec.com.br
blog.cristianocec.com.br
cristianocec.com.br
cristianocec.com.br
ti.cristianocec.com.br
vendas.cristianocec.com.br
compras.cristianocec.com.br
financeiro.cristianocec.com.br
materiais.cristianocec.com.br
mail.cristianocec.com.br
dp.cristianocec.com.br
financeiro.cristianocec.com.br
materiais.cristianocec.com.br
mail.cristianocec.com.br
helpdesk.cristianocec.com.br
mail.cristianocec.com.br
mail.cristianocec.com.br
mail.cristianocec.com.br
cristianocec.com.br
mail.cristianocec.com.br
vendas.cristianocec.com.br
blog.cristianocec.com.br
cristianocec.com.br
financeiro.cristianocec.com.br
compras.cristianocec.com.br
materiais.cristianocec.com.br
mail.cristianocec.com.br
crediario.cristianocec.com.br
cristianocec.com.br
mail.cristianocec.com.br
blog.cristianocec.com.br
fiscal.cristianocec.com.br
cristianocec.com.br
sidep.cristianocec.com.br
cristianocec.com.br
cristianocec.com.br
crediario.cristianocec.com.br
cristianocec.com.br
crediario.cristianocec.com.br
crediario.cristianocec.com.br
compras.cristianocec.com.br
compras.cristianocec.com.br
vendas.cristianocec.com.br
materiais.cristianocec.com.br
cristianocec.com.br
cristianocec.com.br
blog.cristianocec.com.br
cristianocec.com.br
blog.cristianocec.com.br
blog.cristianocec.com.br
ti.cristianocec.com.br
blog.cristianocec.com.br
cristianocec.com.br
blog.cristianocec.com.br
cristianocec.com.br
mail.cristianocec.com.br
www.cn.cristianocec.com.br
materiais.cristianocec.com.br
materiais.cristianocec.com.br
fiscal.cristianocec.com.br
cristianocec.com.br
blog.cristianocec.com.br
www.cristianocec.com.br
ti.cristianocec.com.br
helpdesk.cristianocec.com.br
sidep.cristianocec.com.br
dp.cristianocec.com.br
financeiro.cristianocec.com.br
financeiro.cristianocec.com.br
helpdesk.cristianocec.com.br
blog.cristianocec.com.br
compras.cristianocec.com.br

Certificate

The complete raw certificate details for cristianocec.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413912024958547757933882857173804598971285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 21:43:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 21:43:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cristianocec.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794159654759044711429969878275433637572847287047362213529156458223305043418602163890218994951557917315724556749203686821791859621012003336017417319982437814052155821466476064790803598125415692217982150836809158369419867453117325419014405593283104998013024047896368357480731735484529368375387292907158096117982176429657661394425990485233463302403295291588787294331219866091865978034818521663770454752711595769905627727992557442261307616416898405454708797003335039768915342473522629022774267597964278953770935555244234085126692481914359039136091559347593296084063552281069572188384716657712091547614240676746560150249063332232258612081991404864478273592740667457966469188011396403918428171189947056131646652138105843984432300500374135681129755446808985842314530390727287183412972798930020178114758259803636928630935142697164685435398798544993508490557545494460101735833943914382987373815457666543426797929199981806637445375550396840850821452936345625385010560063182653390575127350629317500031310258000164344116713498958162258203473417379634628865110144343615188321288002558337346135451386310224953471118981195959198363813849381587436887147833279717493935452613516812785731415101333039648462502855173173411672742816437346652823800861249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aefca807dbc5a56df36c624dd79e3912fea5b5e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristianocec.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189f6382f660000040300473045022100dcd653b326123395dbbc230115326567bd268d846d46c73175434eec32d68b8b02206c17634ecf88837c54b8816b61c59124a225546bee66b8942855a41ba40c4f31007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189f6382f6f0000040300473045022100c6299f7256dc22722e097edab6fdd501b740a6fe01a6bb4cf2ab656da4e938410220579ceb00bb6312b85fbc4909011f2b198078f21209e9be41b44e77b279759a41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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