redes-campanha.coopersystem.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7d:fb:32:b2:a7:82:5c:c6:fd:62:fa:ad:d9:a0:7f:94:7d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redes-campanha.coopersystem.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:fb:32:b2:a7:82:5c:c6:fd:62:fa:ad:d9:a0:7f:94:7d
Serial Number (int): 391318339057483592946932087344547741275261
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 64:90:27:4c:61:cc:67:74:af:ae:32:a3:32:7d:5b:74:aa:1a:7a:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:2b:fd:ef:1d:b5:54:f8:c9:3e:6f:32:bb:73:02:f1:47:fc:fa:f8
Fingerprint (sha256): 86:ec:95:e3:41:8d:df:b4:57:6d:a8:53:7a:1a:7c:06:8f:20:1f:33:14:7a:a2:16:3e:fa:c0:b1:5f:34:2f:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate redes-campanha.coopersystem.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redes-campanha.coopersystem.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redes-campanha.coopersystem.com.br

Other certificates including the domain name coopersystem.com.br

(limited to 100 certificates)
web-campanha.coopersystem.com.br
mobile-campanha.coopersystem.com.br
admin.glisspass.fr
dev-cecis.coopersystem.com.br
www.cloudinfra.in
soundsoflifehc.com
www.kalyanwedsjessi.com
redes-campanha.coopersystem.com.br
coopersystem.com.br
dev.api.rideaustin.coopersystem.com.br
desenv-equip.coopersystem.com.br
email-triage.srv.deloitte.ai
mobile-campanha.coopersystem.com.br
email-triage.srv.deloitte.ai
app.rytr.in
uji.halimlab.com
familychamp.tk
mainframe-campanha.coopersystem.com.br
assembleia.coopersystem.com.br
www.dashboard.netradar.com
redes-campanha.coopersystem.com.br
www.requestly.app
siusiulala.tk
www.chipmusic.fm
verify.upx.cool
mobile-campanha.coopersystem.com.br
web-campanha.coopersystem.com.br
mobile-campanha.coopersystem.com.br
www.kalyanwedsjessi.com
reset.charlotteproducts.com
salas.coopersystem.com.br
soundsoflifehc.com
mainframe-campanha.coopersystem.com.br
assembleia.coopersystem.com.br
biopred.app
codememory.xyz
web-campanha.coopersystem.com.br
equip.coopersystem.com.br
mainframe-campanha.coopersystem.com.br
csu.edu.mn
redes-campanha.coopersystem.com.br
uji.halimlab.com
www.bikesrental.amsterdam
web-campanha.coopersystem.com.br
www.imkind.in
reports.albumhealth.com
mobile-campanha.coopersystem.com.br
aniversario.coopersystem.com.br
app.yzon.com.br
coopersystem.com.br
outshifter.com
app.tci2017.org
coopersystem.com.br
mainframe-campanha.coopersystem.com.br
dev-dashboard.rele.ai
www.kaxi.app
mysense.co
mittidrettslag.no
www.hashtracker.app
*.coopersystem.com.br
prj.beapnow.com
web-campanha.coopersystem.com.br
coopersystem.com.br
admin.bizprinty.com
mainframe-campanha.coopersystem.com.br
mlabelmedia.com
www.explicadorvirtual.com.br
coopmail.coopersystem.com.br
dev.uba.abrapa.coopersystem.com.br
importador-tarefas-genti.coopersystem.com.br
webmail.coopersystem.com.br
coopersystem.com.br
api.homolog.walletos.app
live.coopersystem.com.br
coopmail.coopersystem.com.br
redes-campanha.coopersystem.com.br
redes-campanha.coopersystem.com.br

Certificate

The complete raw certificate details for redes-campanha.coopersystem.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391318339057483592946932087344547741275261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 10:06:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 10:06:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redes-campanha.coopersystem.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784733753269218116013748532856490952194457135901485533200093078384576042083296500913652600366799712168504368243730983222481157455140736081836214637823382616270288650252184301371659136630968238808926374624345112775411689786417012056466868926088439647824816597183804564679704787710383570572676101297878031560470256165440685145220056844938371974926713216636505249681438512954760441186765946934503416734096118507797447002881873645890151618082813175556851246355328117200083803559561563045487918454045732485692468065943348426064714992636675645791252714550692906171158384386119428562223374578113827863480000556492143077605543641344312541769010153546902198711639407655349688294643633122464177112684115111291325742152444833404028929728289607624052385467232970021743365167408529261664770284787515209661510350224855370640638986516036428667472784287616786928236847834501737457213676816311019332984293540962309628835492556628433180718549479081171606830543541758370042420685902470997760365651856875770868318183645251798838681846317728459653500346520516053479109718948237565814669187272823104958041727190452282406868632885098927858881488391576824617147697072040519483088830584742635430031422930453691376220991864245641032740529739281694607838095681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6490274c61cc6774afae32a3327d5b74aa1a7a17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redes-campanha.coopersystem.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ab0dfb850000004030047304502203bf278d991db11af394f7848fcaaffc4af229ff30b4efe0d3ef742d84087ad8a022100a9e4c2fc5bddfbdc498b34f24498cb68a0b5260396fcea0d521370acbcb9d6d600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab0dfb813000004030047304502202f8fba2641e8d35f182330df3ee422ad43874b492a56f7978bb3e88b08169b1b02210081ac19425027dc0e71507f0b695ed92723ce5ffe20027470305745b3443213ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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