colegiobatista.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:ec:c9:ec:9c:40:71:01:10:cb:81:6a:97:67:48:65:48 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=colegiobatista.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:ec:c9:ec:9c:40:71:01:10:cb:81:6a:97:67:48:65:48
Serial Number (int): 329027512703328564820276321635824912852296
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:6f:d7:78:d7:f5:46:94:4e:dc:8c:fe:b7:08:a1:61:0c:b8:fd:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:64:ba:57:0e:7b:a6:b9:cd:e8:1f:c0:af:25:55:c5:39:13:b5:6d
Fingerprint (sha256): 83:6d:b0:a8:1d:89:5c:8a:c9:27:ee:4d:85:19:21:23:c7:7a:a5:7b:a5:27:f4:4e:60:ca:39:a4:95:fe:6d:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate colegiobatista.net

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for colegiobatista.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.colegiobatista.net
cbbauru.com.br
colegiobatista.net
cpanel.colegiobatista.net
faculdadebatista.br
mail.cbbauru.com.br
mail.colegiobatista.net
mail.faculdadebatista.br
webdisk.colegiobatista.net
webmail.colegiobatista.net
www.cbbauru.com.br
www.colegiobatista.net
www.faculdadebatista.br

Other certificates including the domain name colegiobatista.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for colegiobatista.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXKuKGIzEEUZ17s5XAgN
IccV4Rq34abrmBsNTtq/wcvc2WLQLMJBBBnoBIJBHDUDIWx83oS3I1z9iGxwP06F
DeRsjJi9htHxJMbTmZvVAwQRBlCU84H9gPI9mRMn85ZnP/9sPG6gWhNNqD3xAk52
2QU1lTWoeqWfi+Fuq/U29yMbTF6dhtUvmj3S7GmdWBE77h3sIFRRviQl/hfbV8W4
yyyUnIV91uORJ4S0W7+6gE3+tSrWxc0xAFMFR5V5MAhw5VdrfugsjoD1kHLqP4Qj
xDL+J3x55mBKMYQoQg8/CMLeRI2QDTHKCHSQYZza4KVFt6onPU87DMmLzTzcXxfJ
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329027512703328564820276321635824912852296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 05:37:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 05:37:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'colegiobatista.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20885871284839809414661915282860497658235733343643784068022152371879586802025858922522142929004067189028633730756825152513570174244736112750662550684723599212951522522747390060769543219484498313833483626699763432150332373003976929077648262685373789443068824658737556779526982415207626872940353320190243662132790269212561792651872114896982338011876477828218499446380126856971298246867927391003231840272834601392274341863367726606836199276567133685760320818511517325567942852226403717562030711490602359379150702520496471920703379039729576508492781545163696007435241646034319106333551636981654462951341698442358534162751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a76fd778d7f546944edc8cfeb708a1610cb8fd4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.colegiobatista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbbauru.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiobatista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.colegiobatista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculdadebatista.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cbbauru.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.colegiobatista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.faculdadebatista.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.colegiobatista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.colegiobatista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbbauru.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiobatista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faculdadebatista.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c4be5d189000004030046304402205efd9c0e78ad04cf1f9c65fff5c5578ff19c22661fac78904bdd66987169ed8c02206ba650cae6996938ed9ae775fad34c6fd118f7eecf554b07059842f7935fff0900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4be5d1ac0000040300473045022078aa1117410521e9e1d184e12aa2ebb09706fb20ddf223a06fa82f1debd6ec38022100983294a0cc455a9e9e93a703f6e530c7e990dedad0f8b3e81ecc1e1ccddbcd94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c041ff9183fb61dd75a1940038588d3444bb9ac525e5c770267fb59d301f41322bdf2998c14bea107ba24dcc7bf8896aa469967a2275d005cd6b98677327ed80cb5eedf8dcb8d92da86fc24c2b51cd6d36bd9d4f0ee008318cb82374eb8f1aa62115b8c572b8d79691799c9b067c5fb2ecbe9af0ce2b236cfa228721fc837242abae706de5878a83fcd6a02f4304e532ae5e744868f36b4a9e9f0debe5528f54b209edb46c4189144257dc58390f290cf72361db84b847191d944a50f4e96fb6786b1d435b1c05d40e724e72aa6610c787821b5044dba19634cd65256dae66eb210d2c66863c9f683f16399d43b375c898daecc96afd27ca29ac1a259a914d2