*.neemu.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:56:d1:d3:8a:a5:33:c9:4c:a5:40:74:a2:11:d0:06:28 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.neemu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:56:d1:d3:8a:a5:33:c9:4c:a5:40:74:a2:11:d0:06:28
Serial Number (int): 345842287879927455852750475006854818694696
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:85:0d:bc:5c:85:ed:ab:6c:fb:44:d1:ae:94:4f:58:5f:31:b0:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:27:f6:c7:44:c0:00:b8:03:4e:5c:e6:76:86:ed:a8:b3:2d:43:c7
Fingerprint (sha256): 72:39:d6:79:8f:3c:e8:8c:d9:26:25:b1:5c:d5:53:71:db:a9:b3:f4:f2:e6:a5:5d:56:c4:3b:d4:84:1b:25:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.neemu.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.neemu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.neemu.com
busca.animale.com.br
busca.apoioentrega.com
busca.araujo.com.br
busca.balaroti.com.br
busca.casaevideo.com.br
busca.comprafoodservice.com.br
busca.connectparts.com.br
busca.farmrio.com.br
busca.futfanatics.com.br
busca.lojacoty.com.br
busca.lojadomecanico.com.br
busca.lojaspaqueta.com.br
busca.mappin.com.br
busca.paquetaesportes.com.br
busca.saraiva.com.br
busca.tokstok.com.br
busca.vivara.com.br
busca2.lojasrede.com.br
buscadelivery.supermuffato.com.br
busqueda.offcorss.com
busqueda.tiendasjumbo.co
busqueda.umbrale.cl
saraiva.chaordicsearch.com

Other certificates including the domain name neemu.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.neemu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PbRFrVh5htxJdz8mSWz
L8YcpSGGneCRiyesv9mAeIE1XqM7BRPkX6KLlxIU7hf9BcW0PxGoX77a5qPR2CmK
zm8Wqjy2MaNp6GvFy3SSGLDfNTYQB7ygqCKsfJMa1JgI09015N8a/ZqMxMwMFQej
qeWf5NVKoeEFWHXFhV2udzleCG3sjEQ5nyjd/YHxsXM93vDwHa62zGs9I+2WSeM6
aGrzAcTPRxfZ6IWEcgYyTdRdavbgPfLsMVr0RD0KpV2tuTRSFbEs3AA3MiAzn+JT
xyOWK/4phTAqr/kczO1tp4JUziAID7Mmhqvo1D+aQelsFCKJq6qm6MDaXvxozVm3
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345842287879927455852750475006854818694696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-17 18:01:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-15 18:01:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.neemu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29408996629098126610165147903676733848847107289514781944751778542053396418582757675027917703949896314025788673217216358321106342518346064694172440977620397380513361001043079263354871258494755345693746088117965780649375742125623678447889965825897283129003655134048212898923035868906890240921211993251771754522735659716103637321024232157748279089998290967820801291282380330661795355878242151136671094944913889353391635267965508979081333214089489023282024010612288513429861331525925719826951488195727259982767281132417019246357440786506332066636627511565029499793891641946799074282192236696037663150436170605926914045761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0850dbc5c85edab6cfb44d1ae944f585f31b0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.animale.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.apoioentrega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.araujo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.balaroti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.casaevideo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.comprafoodservice.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.connectparts.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.farmrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.futfanatics.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.lojacoty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.lojadomecanico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.lojaspaqueta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.mappin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.paquetaesportes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.saraiva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.tokstok.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca.vivara.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busca2.lojasrede.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buscadelivery.supermuffato.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busqueda.offcorss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busqueda.tiendasjumbo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busqueda.umbrale.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saraiva.chaordicsearch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000180d365747400000403004830460221009860f76bd510988b5413fe7ed1f06f9f6beaca947c11978d0a27984b785f4ad2022100e792af23cae5a2893d9b30aa3614147e42e36c72ded0c7ee54d3cd1a6eb83b7200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000180d36574b30000040300483046022100b5b031fba109267a48e585c3f0de342b0dece01b5939f13a845b9eb33b042baa022100b7fecac370e5eb3e0b0d43bb886dadb639ddd2b4fd5b5056867962e4c9d52cbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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