diprosegma.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:8d:03:37:b4:5b:b5:28:c4:aa:b7:42:cb:94:6f:2b:4a was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=diprosegma.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:8d:03:37:b4:5b:b5:28:c4:aa:b7:42:cb:94:6f:2b:4a
Serial Number (int): 263906272217845537524076712407262391380810
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:c6:3b:fa:0f:54:8f:6c:a3:cb:03:3c:66:ad:04:32:53:a8:f8:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:98:f1:99:27:4b:a6:53:c6:ad:f8:ae:c3:4f:06:49:e5:44:70:26
Fingerprint (sha256): 90:0a:c2:6d:56:f6:87:f7:4c:36:7b:99:4a:4a:da:24:04:e3:7e:71:f8:11:7c:b5:e0:b2:a1:24:c6:96:25:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate diprosegma.com.br

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diprosegma.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

diprosegma.com.br
distribuidorintex.com.br
escolaacolher.com.br
faculdadewaldirfilho.com.br
languageacademy.com.br
mundointex.com.br
planosdesaude.slz.br
produtosintex.com.br
rachelsaif.com.br
tradedigital.slz.br
vendedorxpert.com.br
www.diprosegma.com.br
www.distribuidorintex.com.br
www.escolaacolher.com.br
www.faculdadewaldirfilho.com.br
www.languageacademy.com.br
www.mundointex.com.br
www.planosdesaude.slz.br
www.produtosintex.com.br
www.rachelsaif.com.br
www.tradedigital.slz.br
www.vendedorxpert.com.br

Other certificates including the domain name diprosegma.com.br

(limited to 100 certificates)
www.diprosegma.com.br
www.diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
www.diprosegma.com.br
www.diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
www.diprosegma.com.br
chavecertaimoveis.com.br
diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
diprosegma.com.br

Certificate

The complete raw certificate details for diprosegma.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c0SHhVfBhEtLAmkZqy1
zY4KJYADYPfB3ikUuQHBfYPuA4+CB0lHkA1+8pIo6Y5XX80PjCSlEnR/SKlM3FPu
3N7KVzysau4mHgcpu29j8E3uxu6RDrJh95AOE18YIk2fOPV7FUEI85sk6WlaPozC
e0SBNjfJqueOn0ukFt2wS5CFNfyyOPny8E67lHWgbCyCZI4bpeqJOBXJ3QCqYfng
dTqT67Bu+FFkPRYcnM05k8inAX3Lm6MMTQr9l4jM/Au+HK8fV7/d+NaiJAdlYZVR
5SMK4AFsFdGhkM+Khe0YHz3o4XzBsqBDKuj7IR7Dme9FRVa5DI3cNYJUjt3Vaq5Z
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263906272217845537524076712407262391380810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 01:55:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 01:55:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diprosegma.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26989883124164920458599679619092496288294977800371940946752871578156151073368500615307653061004970533809284949376545115124041341138481336380842455986979948838386357400157159129780683654880356231481240914580140394452453950313638898619924041476766555823561154955572732043791719715939975264223733173833483403527655122748485386885450453146977197398260300437244783088368142150011088823381019798700279342933691842694290905747047635172503629902240209131168070727545649331004425634100937729349520142565278003220359067300970107577576241086096533679225219942235235243851432294796545709495892336768949356968755865197389231839701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07c63bfa0f548f6ca3cb033c66ad043253a8f8f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (538 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diprosegma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribuidorintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escolaacolher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculdadewaldirfilho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'languageacademy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundointex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planosdesaude.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produtosintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rachelsaif.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradedigital.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendedorxpert.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diprosegma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distribuidorintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escolaacolher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faculdadewaldirfilho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.languageacademy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundointex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planosdesaude.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.produtosintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rachelsaif.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradedigital.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendedorxpert.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef80833c8000004030048304602210099a10ca1081d8e599feebe05dbe4538536c0a909e2f1e6d626a8340349143f7b022100b04ac5c1b12dff54ed0409a0390226eb235991d05c219475f773ef1af46da7860075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef80833ff000004030046304402205e1797818aead60b01517c7a74a8e611ae94c57e02557576544f234a9fee745202203bf93145db1699d2f10bc49cd46f39c7cb9b39a382e1d52f4acb86c3720d8191
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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