*.pi.gov.br.itransparencia.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:9f:69:a8:bf:53:05:bb:9d:d3:18:cb:e9:d0:78:97:ca was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.pi.gov.br.itransparencia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:9f:69:a8:bf:53:05:bb:9d:d3:18:cb:e9:d0:78:97:ca
Serial Number (int): 303403484791659205366702747911902344026058
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:61:68:29:6b:4b:55:17:b7:3c:1d:27:51:11:ac:b5:3d:eb:31:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:96:e2:c0:bb:3a:f6:8e:01:6e:96:07:0e:d6:77:fd:a3:94:05:16
Fingerprint (sha256): 7a:a1:8c:6e:74:e1:e3:d4:b5:5e:43:fc:1c:71:a0:6c:27:a5:43:9c:06:32:bc:42:63:d4:a4:f2:ee:08:3c:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.pi.gov.br.itransparencia.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pi.gov.br.itransparencia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.passagemfranca.pi.gov.br
*.pi.gov.br.itransparencia.com
passagemfranca.pi.gov.br
www.passagemfranca.pi.gov.br.itransparencia.com

Other certificates including the domain name itransparencia.com

(limited to 100 certificates)
www.riachofrio.pi.gov.br.itransparencia.com
floresdopiaui.pi.gov.br
*.passagemfranca.pi.gov.br
cpcontacts.parnarama.ma.leg.br
mail.valencadopiaui.pi.leg.br
www.protocolo.itransparencia.com
www.suportcenter.itransparencia.com
saojoaodavarjota.pi.leg.br
altolonga.pi.gov.br
riachofrio.pi.gov.br
www.center.itransparencia.com
altolonga.pi.gov.br
altolonga.pi.gov.br
*.pi.gov.br.itransparencia.com
www.saojosedopeixe.pi.gov.br.itransparencia.com
*.pi.gov.br.itransparencia.com
*.saojosedopeixe.pi.gov.br
*.pi.gov.br.itransparencia.com
*.franciscoayres.pi.gov.br
floresdopiaui.pi.gov.br
www.riograndedopiaui.pi.leg.br.itransparencia.com
saojosedopeixe.pi.gov.br
www.franciscoayres.pi.gov.br.itransparencia.com
dirceuarcoverde.pi.gov.br
www.construcasa.itransparencia.com
passagemfranca.pi.gov.br
www.admin.itransparencia.com
altolonga.pi.gov.br
*.passagemfranca.pi.gov.br
www.labiras.itransparencia.com
saojosedopeixe.pi.gov.br.itransparencia.com
santana.ap.itransparencia.com
mail.barradalcantara.pi.leg.br
*.altolonga.pi.gov.br
www.protocolo.itransparencia.com

Certificate

The complete raw certificate details for *.pi.gov.br.itransparencia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lYJxYwtpqDlheDOV1S+
gDDMZd8q80xlZu97erq4o7Mskg2XAUOXl8RZVf9s4UBZSrGy8dK+a8hGLh3ka5Sy
M17TQA1FFUG66v1vW+bADWh0GNeeV8uK10HdF+/8mpSkE8ML/WuIAuxvHrpGQEYB
DR6VeDpPelTe2dHFQXcPh7tXz3Wjp6iS8dLfspPBWAJ3py7u6O8XJILsdZRmLNAu
+OVV1/iphjtVDNGyWxrp7HjaaGwwihUBOpIVX0jlQq1nso5TxzeRDSG5IXyDfNxi
aDxRCuumqXejK73sNuuGRh6IzWH0SqgX6Ma6K/2Fh2O0nyoG3B7mmbx4uitwD5UD
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303403484791659205366702747911902344026058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 22:25:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 22:25:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pi.gov.br.itransparencia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28067330705657391890909953335113175756446862825183928800143077280994184909759840069114447999259561850521320854440447941188962303040585874956973556715432441824855551394220041998948501044710334867862683919185408891196407472954420837535483309505066317774362197503326784529174416903737315586575771767681108858782702353600051748666645546126626944733873037784537190652418771166632504657341025266322493004098646477121098921101589080858359060918316096943402914180394337849712006104753631311032370654451590678766325004762304151030744119534728816380355981009381661549645000225348959012358424430312619520197382112909235456377853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b6168296b4b5517b73c1d275111acb53deb31e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passagemfranca.pi.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pi.gov.br.itransparencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passagemfranca.pi.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passagemfranca.pi.gov.br.itransparencia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b0228af8b0000040300473045022100ae6ce404334a288c0fb54101b900501413d8f392d7d391d96e0ef3531805f305022024dc00906a8c71ffae7c563dc756f3f0cd49fa6d7c31029e6ac436a9a20b29c900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b0228b0cc0000040300483046022100d5e3c8af5dc81ccc65b2db356428202b3ceb778ab01762281643d83a097d4f4d022100c598f15001d877b606c19c329d26e0b81fa3de498484a72a92941ba6bd00c9be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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