www.printstyle.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:2f:7a:8b:f5:34:20:1d:f3:e6:57:7b:2b:d4:f6:6c:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.printstyle.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:2f:7a:8b:f5:34:20:1d:f3:e6:57:7b:2b:d4:f6:6c:b4
Serial Number (int): 268205615148400108275298024242923183697076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:c8:0f:28:9c:eb:d2:2d:dc:3e:60:51:3b:8a:00:56:c6:b6:84:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:c6:c2:09:e9:82:11:8d:c9:97:5c:aa:eb:0e:bc:6d:ef:06:63:9c
Fingerprint (sha256): 7a:e3:40:fc:a2:7c:db:3c:88:4a:e5:d0:cb:90:d5:b3:e0:9b:69:3f:fc:a9:4f:90:d6:ba:1e:13:6c:3b:2e:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.printstyle.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.printstyle.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.printstyle.com.br

Other certificates including the domain name printstyle.com.br

(limited to 100 certificates)
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br

Certificate

The complete raw certificate details for www.printstyle.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268205615148400108275298024242923183697076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 17:39:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 17:39:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.printstyle.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770246956336617482557072571848345981790163927108446941224767593666696635961803689617609482098179115234471065774687776118534641355989770565419019992026515777784174741119244605635259013493319747485962864473314042023323332474246034524954855876694213336503710039602857943482918295786782090368988490126032660291493821037152512410363187479412029647305255799864103560122673596279705935315291325893109098126867942732725140596208710337245517412044322463499821988970468941360503211247065589000046425718708700260523845562954128239668939427154507607523014463988679113330424886320115497627972520628488764228453705261997700076656137569071249980002328676268920849889491077860210667393776888605776784069902568779452997586220792670236771252402315868879839195528157603848653383162036802351103520951035234052938163947703234231543270656867530093630872423007656600734748607012040776356961198717973951570921150849828841786776335230650226306107738722306598034819945326623936640137694752650744955437656628937456509445830428189750071013589157170872526371130281950617398741961686310911677249028296975575616996846025393866367117071578660827334260857642929210679213581549684822950183842536218558960332219183181660776431581197432393156577516369478050565808181531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40c80f289cebd22ddc3e60513b8a0056c6b684fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printstyle.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168bef58f1c0000040300473045022100ef56e3522a9995e72530787539f1eb7a9fffe6d00f0580b8b0fc83f5823e0e1602203d0f123e1d3d4af593f628b4000b86d291c4321cb960f0c880d52c90b847c7e1007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168bef58f2100000403004630440220293fa30ecc5380e0c5133f4942158681a2582872a78045b091a6ca3bb061910002202ae3c90afec3859282396d4949bd1e189cc328e78a937c42f63d79198d627bad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00527f39212b5c58d4deac12c8b922cc173520dbcefeb72d84ceeb17cc8958a1ab34199879183d8ce05f25234f324008cc5d1d251bd30589ef47300d6d23a165d0439fb74b5fe925971490e96a0b5482248a48247c58de888c05a0f5f310094cfbfce4322550a1e21b36ed09f3424523e43af7d0d3ab30a2e0853f4d3d422634022ebc6eea865a75bd5bfcbc6e0e37a34f7da0d24173cd8598a9cdfe45848858d949bd7343052e88fff11cd992127eac2f2aae6bb294c8ee8070760a855ef763de76d29844ba00d1c80d639aa83e9da1169f877e322e978cf39846ce2d4268dd533d4edfab762700b18d9f4a1fa6ac140a5e24450573732a0031fa49481ab20ba9