piwik.lepidus.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:13:98:dd:40:9c:f7:40:c1:75:53:26:cd:a5:b0:66:b5:a6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwik.lepidus.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:98:dd:40:9c:f7:40:c1:75:53:26:cd:a5:b0:66:b5:a6
Serial Number (int): 268005414230253943223454563280043412731302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:97:c3:c0:ee:0a:39:c5:58:ec:39:8a:ea:cd:f1:93:02:07:1c:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:c8:6f:71:84:b9:81:7e:e4:ff:6e:8f:d1:6a:12:7a:f8:4e:d2:80
Fingerprint (sha256): 89:55:62:bb:1c:31:0d:f4:00:4f:f6:45:3b:08:5b:9b:8a:bb:72:a9:87:b9:f4:90:6e:43:30:44:52:80:fa:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwik.lepidus.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.lepidus.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.lepidus.com.br

Other certificates including the domain name lepidus.com.br

(limited to 100 certificates)
maven.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
wiki.lepidus.com.br
domus.lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
redmine.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
maven.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
oc.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
wiki.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
domus.lepidus.com.br
crm.lepidus.com.br
nc.lepidus.com.br
redmine.lepidus.com.br
jenkins.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
www.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
git.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br

Certificate

The complete raw certificate details for piwik.lepidus.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv9Ok+3WWNF8A7+iutcfH
uI9HyYxIzey5uiwKPpy8x4aPOqbwx2ocI4Kojz4sFdX05jZyWw4z+dA9/4neESyH
w/rXzUZ+xQFOEPkCHq8tVT532ME8QPTjZ/pom/hbqf0+BuHbMnTP3ddJo0AHUuzp
Bypfo0ymp7wRa+V1mrz6yfODA5tgLNrk8MuuS0t24GSjoRUo8SfE1YKcTdjmx7U+
7Xqcz3elikQxuxCMT2Wx3R8hs670Y/veC4deRj6vckvPe7rtdaNxo++1rZOzpSRB
yw0Cn2TsqZzmQOWesvShy4tXh5rJQLlZqxBnGA65mBpBDLDFz3pwIJeW3vfWIyTv
fZmbxXQWLwfjaBrRW7v28cfrRy3sVlW+b8gMNP+cALcrNx7yne2VvwfURrbPmn3Q
J+XXxPX0qi9604IFbnDNenmEn53cRxtpotYn0qu1BFwCVBD4K+FJYWZwpH8i30BJ
5xau7ijj9MMFHwwJUoCJan/pNFkKwOSuFDxrVQZSiPxFobSIZOfeTsr6UK5karpp
KGa49bQFmvFfIXGkUZkuXsJnNX4T1C6R/jQAUHRS5ScC7/lUx5C5DSR82YdbcDyu
iIICJpNrjvGpJRHCHipqUzfetb5CJzkDnLs7YxPC+HnNdS4FeiO0a4d2jzLz3VSC
Pvsh44fRj2RBxkaTgoKKoB8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268005414230253943223454563280043412731302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 03:00:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 03:00:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwik.lepidus.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782584806342562560709211004136735859233408770636447257210132571437550285328917455334531737452939461822874149427047875349237620161845943157981151868612482195452437147213973524043870034101637959852375817965330335481916813471163900250611960755340796174037295008257987177345079373081425293453077167547311164764440736218521770019085872072321480318932936982227946834504499923460816582726093040263856618859251426812175224437701724154705293594952434975670914276879507219028660852735657915409022018568831145063285338093324555446438260043956376721568484178669985090924522184810517216515384452703561764462695545920668164333141922465335411759007338132667958534741192171125680808479651173000651428704697083096847689271896430668544140303397384517981140672347388850394528138415937931319556463062489414808830946550363809208035691594511906917119050883379664311179740380458159874731861235477891104701451805103250532615502940889508705189617632528880341506941992057267848128703296060827950253466299632142585862914346620209623877949638176041699473287140971123385995593767744854011849422735480230565652798381118920526059633067135251617428446198494155483155277168496140958760386421828790755920409043768854731153531841346439283515012426125840425595307728927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2297c3c0ee0a39c558ec398aeacdf19302071cdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.lepidus.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001679b6cbcf40000040300483046022100ca2f48be0e08d90418baea5733614396b5963e2e5320e4f348ca921c3c89261c022100d382050106531936b9cc09e73c1b267ae395d2e39a553abc8c27a457e1ce1bdd007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001679b6cbd4000000403004630440220025c386ececbfa408ed23c78362046faf9bc94182936b22da683d94b6b13b66b02206c17f6404d57b013f73763c148c1a234c39da8dcd009c5fcdf481aa384bc6895
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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