piwik.lepidus.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0d:bb:b8:21:4f:17:2b:d0:f7:06:4f:86:f8:58:fe:d8:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwik.lepidus.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:bb:b8:21:4f:17:2b:d0:f7:06:4f:86:f8:58:fe:d8:4d
Serial Number (int): 353122336190432649173013299417706137573453
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:89:b5:e4:be:02:3d:c8:5d:62:6f:f5:6f:a4:a6:f2:e6:c1:c3:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:c7:83:00:53:7e:40:78:be:10:62:08:8a:39:9f:4d:12:52:61:ee
Fingerprint (sha256): 90:fc:a8:27:7e:98:49:f0:99:e9:ec:5d:3a:c8:d1:90:c5:bd:55:9f:83:b2:af:6e:39:13:6c:a6:45:8c:76:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwik.lepidus.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.lepidus.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.lepidus.com.br

Other certificates including the domain name lepidus.com.br

(limited to 100 certificates)
maven.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
wiki.lepidus.com.br
domus.lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
redmine.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
maven.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
oc.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
wiki.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
domus.lepidus.com.br
crm.lepidus.com.br
nc.lepidus.com.br
redmine.lepidus.com.br
jenkins.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
www.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
git.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br

Certificate

The complete raw certificate details for piwik.lepidus.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353122336190432649173013299417706137573453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 03:04:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 03:04:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwik.lepidus.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686288302498328383882477597026742087646361443175851284893675901694212081120572711544563903757828300311941114108244881705665010180988179240318179706129912725820497189666500693329757046801105482029220696914860318474220072492671986634336596256751485575675427017578013135464394728617900699716758534334627827042120475651255002061806606893091337811756869605128581041670881778393980603211393740817383824729566047199077620453262453421057511258370489868087955499708595306995027469795905910798659563723653580845862235948759987336157512068600312091490639023792444732865742078493565766679676485381644996471210442427720089304347119890345797889770855442270977588999845841091075685602776354698336935949853983397560993133538932175227628669903937535388529339674220327449911689562886103260826687224447729194180919005924696188680469700558844884264232480280445682198145640555273004707079203426577665530717731442525306040782537692794871719856557451051904095016992848223571374246268594135721230934911887749962802843795817274745020767922356366386293998604476482597403918829972354949845601096520749109660837602800322930762886585758686809123140035786795525468185966188546976833605616686969541270005735027394299541897359908084503327008615806242393612333039929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc89b5e4be023dc85d626ff56fa4a6f2e6c1c3d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.lepidus.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed9615a880000040300473045022100ad7e5bc00f5b742dfe02cedeff22db4348fe301ba2c26523de577a70cd87069a02202732740a608599d4d9271af27e876ccab4d35faa2bb3bd691ee79c342b06304800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed9615a890000040300473045022046d7bb501246e2fc4d3883c5809a567a36739d84726d1176e480483dbb16c072022100a0ef1a4a643365a23c7b5e7caf6db786239db70165e8ec31c47d80f4b4015445
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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