blog.oppa.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:29:dd:0c:2f:58:6a:fd:e0:6f:99:23:53:97:f8:43:61 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.oppa.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:29:dd:0c:2f:58:6a:fd:e0:6f:99:23:53:97:f8:43:61
Serial Number (int): 306990341055259414699549316039601823433569
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:37:0e:bd:4a:5d:4b:77:41:1c:6d:c2:9a:a5:ce:81:48:f4:60:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:65:7d:73:f4:7f:54:3f:83:49:da:ae:52:52:4e:54:f1:8d:80:eb
Fingerprint (sha256): 75:e8:f1:e3:2a:02:93:6e:a9:8f:6b:b6:0e:1b:db:d5:c7:37:78:44:2a:cc:5e:d6:85:59:8d:51:2d:5d:c5:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.oppa.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.oppa.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.oppa.com.br

Other certificates including the domain name oppa.com.br

(limited to 100 certificates)
blog.oppa.com.br
azion.com
ssl371039.cloudflaressl.com
m.oppa.com.br
secure.oppa.com.br
blog.oppa.com.br
azion.com
azion.com
incapsula.com
azion.com
azion.com
track.oppa.com.br
blog.oppa.com.br
azion.com
azion.com
busca.oppa.com.br
*.oppa.com.br
ssl371039.cloudflaressl.com
atendimento.oppa.com.br
azion.com
incapsula.com
incapsula.com
azion.com
azion.com
static.oppa.com.br
azion.com
azion.com
ssl371039.cloudflaressl.com
azion.com
ssl371039.cloudflaressl.com
azion.com
oppa.com.br
oppa.com.br
ssl371039.cloudflaressl.com
oppa.com.br
blog.oppa.com.br
oppa.com.br
busca.animale.com.br
ssl371039.cloudflaressl.com
azion.com
azion.com
secure.oppa.com.br
azion.com
pesquisa.oppa.com.br
track.oppa.com.br
incapsula.com
azion.com
oppa.com.br
busca.animale.com.br
azion.com
azion.com
azion.com
azion.com
pages.falconjobs.pt
oppa.com.br
azion.com
azion.com
ssl371039.cloudflaressl.com
azion.com
azion.com
azion.com
azion.com
blog.oppa.com.br
blog.oppa.com.br
azion.com
www.oppa.com.br
blog.oppa.com.br
mkt.conquistadigital.com.br
azion.com
atendimento.oppa.com.br
blog.oppa.com.br
azion.com
ssl371039.cloudflaressl.com
atendimento.oppa.com.br
azion.com
m.oppa.com.br
azion.com
dev.oppa.com.br
azion.com
azion.com
azion.com
azion.com
ssl371039.cloudflaressl.com
incapsula.com
lp.erasmusmais.pt
azion.com
ssl371039.cloudflaressl.com
azion.com
azion.com
azion.com
*.oppa.com.br
azion.com
oppa.com.br
www.oppa.com.br
busca.oppa.com.br
azion.com
valida.oppa.com.br
azion.com
azion.com
atendimento.oppa.com.br

Certificate

The complete raw certificate details for blog.oppa.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306990341055259414699549316039601823433569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 05:04:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 05:04:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.oppa.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792927543197177423017273616502807969746982631598578379578586234904748533996596344493204068117325305062050988225306275633928325205534765101298301477214461177684825927304696758762279197199002208389079859386791935984336198901301807094697843623541832808134049315584649961924054687438026826974774003255752927690506271416721797201109111415365016694621482945058613499627357143420666930334980559700909303110898293886983563364597575715347661053523594185443220421108880299642771113930448853073449408289730778264100098857902970269071334886780257265439998708028509492613076970759006610800566474984257745016535561638543360749800888623087550630286233783936709813991896054815639723661748744270594219916470541879144167834637132810281508227481300265369183273069034718659954253604440103200455037958731058333073392532805974404253374845731935024179753871623620949512781208388463228932712577361861295960289246032965717976789595656299049954172916090100896141300690404289549110210828749940066377721304106468700647478831835874518295811852291132829089818423293011654362788219964777864567785702126461776142374623618244823935091113608404731800644169406796107142348019490868340215035531607368159976189004151097773249511466181118702228313614918583113070135393207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7370ebd4a5d4b77411c6dc29aa5ce8148f46064
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.oppa.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170801867c0000004030046304402205b1e17b7c743ded4ae571730f5df47cc2fd9692649469101c50a957a4d1dcb3f02205d28fa765a7b2e3b94915cefc231d1288abfe9550e0f28c514bdee16e658205300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170801867bf0000040300473045022100a55e2d1662fb23269634303f37758b6444e9a6bfc3b6df76aaa41500cfc5586d02205a0a142f6aff09458bb3e5f969fc6ef6992d8e73d676dde853766b569b90579e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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