megapratas.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:a0:6d:5c:4d:03:91:a4:e7:41:75:5a:33:9f:85:bf:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=megapratas.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:a0:6d:5c:4d:03:91:a4:e7:41:75:5a:33:9f:85:bf:b8
Serial Number (int): 264612643409335709524477547929526377758648
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:f8:c7:17:fc:be:c5:d2:76:58:02:c7:80:6f:53:b9:f0:33:1d:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:92:27:68:d2:ab:2d:1d:b7:c6:51:b6:f2:8c:6e:c8:65:b0:a9:aa
Fingerprint (sha256): 8f:d8:94:9f:25:14:09:d0:5b:62:fc:85:60:be:da:c1:fc:b5:a1:86:a2:36:9b:32:52:ec:3d:bd:60:46:3d:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate megapratas.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for megapratas.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

megapratas.com.br

Other certificates including the domain name megapratas.com.br

(limited to 100 certificates)
www.test.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br

Certificate

The complete raw certificate details for megapratas.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264612643409335709524477547929526377758648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 09:45:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-07 09:45:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'megapratas.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958622216127852684024156538403394315908087243071508209470123776499066842024321809148034524136868228843783697239959353428597086193966942104931015957115337745922413430606739928385784378764651480569587462424604630671761790759043186952061696704628903422025373143306383073110093726205096029288096728316654618703677014313786875054892131980940417269230927166615621071981315816599242469231749527335902725164702570054459353251242827415116800077135863080353085117994215983280738496816930789993069087463714876934978547755846867080530687810570637198425367740940072721621986449915670433863688471398164834768690931538285211634833514727924105644121674059850053109833196119319879101507616658305214091778343421166656971080929528286583844573822388473347486349940404843548267425526940090063706875319909773815282846462259036358676368232367622142012536846728013946437399404432591853678600211712972318190457539239560018395947762247011601774789074087600457429950382874466636369044676071387404393463984054489788994432085505173650930369115996026820252641829113793863486132959785962979224974224771163749449051753837965975823523341672630011960938977861696828856477891502509574060336847410519806693316635164703906728151911018124602483878542605744233293950456619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1f8c717fcbec5d2765802c7806f53b9f0331d60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megapratas.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001647ea59f7f0000040300483046022100a19096794b6074c53be1f2976f4cced6d2a92f8895a84841fe4396e130764251022100ebec179fbdb65c9b2b0407d6c499bd72e817305864f974528148ffee97366efb0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001647ea5a0d40000040300483046022100cae6c3d96410c0631922959d2ab3f5986b737ba4dacd8eead4fed6cfe8a47ee3022100af67034e050e958425053ba9dbfc90d447f6559f3d76af0dac06e0f77eb39a06
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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