laurodefreitas.ba.gov.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d6:e4:74:f7:e1:0f:f1:49:c1:a4:ea:1b:d3:76:78:2f:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=laurodefreitas.ba.gov.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d6:e4:74:f7:e1:0f:f1:49:c1:a4:ea:1b:d3:76:78:2f:53
Serial Number (int): 421573241565182811268931517719899440426835
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:22:52:e4:41:0a:cb:2c:b3:ec:d0:d5:d8:dc:4c:72:3d:61:fb:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 99:01:35:f6:96:97:e2:e9:30:cf:d0:b9:2a:96:2b:58:cd:40:3c:23
Fingerprint (sha256): 7a:ee:46:e1:1d:d2:42:ae:f9:94:ce:8b:1d:3f:4d:41:09:42:4a:39:3e:c8:19:1c:e8:f7:87:10:3b:d4:3b:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate laurodefreitas.ba.gov.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for laurodefreitas.ba.gov.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

laurodefreitas.ba.gov.br
www.laurodefreitas.ba.gov.br

Other certificates including the domain name laurodefreitas.ba.gov.br

(limited to 100 certificates)
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
api.cimu.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
sefaz.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
secult.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
api.cimu.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
solos.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
sedur.laurodefreitas.ba.gov.br
pmlf.navegarte.org
api.cimu.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br

Certificate

The complete raw certificate details for laurodefreitas.ba.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YTpEj/lH0qXQSLCJv2q
1NqaT7nhuY447dhoPJ5GjTww8VmSpzHtkomABV9qiMu8Vbe1w5k+mzh3IJpaM9OF
KEioAi8RU+vUUPud2Fs+32yqBht0TMn4ntjYih6m2B7rowCw7Jv/y7gpArm1Rt6/
RZ6Ppxtw823jfTMwpzlhS9OTewS/GjG68DX2IXy13hXpb8lBMZg1piULVV73kNXc
59APue4v1qIvBHLdTBThQ4bTSJo+oMLpqXbKWAHPfHxGorr0bsTVJNbZwoecHp+k
L0/UPLq7PkpkKSXRK5c29e72g7H0Qe4jmJ2yweTZX88/2Xqy8vHX+ITqtbcwaN/Z
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421573241565182811268931517719899440426835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-11 11:12:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 11:12:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'laurodefreitas.ba.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26954299535860060494144243898515593267782638048907540878328572922275293199630521261700212544191225006978342488123627699081394054331199785968817036057234544711821130929149960807519854753472491161733625023454945305454749805237398917277935249153714545264423950255472738743433746701254305557097558203724338803015012559208662113774564962013756735081004526396702168382819001217699987484009393269091221892833177567884738563087500813029999976180661638223861513197069938844567390406508618959016918193030518634731595626719192369150230152150829471366327877511749834300891754193322417299605617114554635469744161739475751580719409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e22252e4410acb2cb3ecd0d5d8dc4c723d61fbff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurodefreitas.ba.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurodefreitas.ba.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016528e6c2830000040300483046022100e3689338e57ec607247d5bca0874dba76cdcbd90fb7313c72566cbb80e50e90e0221009fc32626c53cb9b3bd635386c068aa6982ac3fae1dd86614dc5754ebb92b7c56007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a250000016528e6c2670000040300483046022100e45d64582457e5348f6dbeeb9890d273df9a9f61b136be69150bd2ee5feb2fcd022100df122f6fde57d80aea4395b3a2503d10b172c0ef46aae1b013fb687bcee51d98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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