principeturismo.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:56:ed:d3:c3:a3:b5:aa:54:47:51:2a:e0:11:a7:7e:4b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=principeturismo.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:56:ed:d3:c3:a3:b5:aa:54:47:51:2a:e0:11:a7:7e:4b
Serial Number (int): 427510201329780269366531398372631813520971
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8a:96:d2:c8:8d:86:cd:47:b3:cc:c1:f5:3c:0f:9d:fa:d7:a1:7c:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:1f:9e:f2:30:29:b9:76:71:e8:5b:a9:f7:15:8a:ad:6d:47:c6:da
Fingerprint (sha256): 91:fa:fe:78:71:44:1e:69:7c:e3:d2:d1:06:d2:4c:c1:82:95:61:ef:33:91:ae:82:93:9e:f6:45:b7:8f:ad:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate principeturismo.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for principeturismo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.principeturismo.com.br
principeturismo.com.br

Other certificates including the domain name principeturismo.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for principeturismo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlpyPvPDgHyH9nt4oL8n
vNsU4uyVPW0yLaWOEs9+k3Zpp5BpHwdjyTqA/mYYNrFLXWxwuZRrqoNjzRz0Fh+n
xW5tSUaiPF76FjMXb3GdgyFPgkBZB1OZoVWCO2QyiXpBRg4mBtFN0KtT8QvVkTZl
MXC7KsnmVBshb1ve+KmD77hj0+yTo+PTvhrGL6FhJaU5wHh7HNvthzon4yYFl9Eb
vfQyELgA1ZhjfObdxMJACb6HAY4pcIn0EFEVtrxPrP+JOyuJR5ms4EUoUZrWpTuw
8pmeRTPBcO8LSJmXESTGkblbMut7j97N4YwlrEtGgXqBirNDUf1e5ahkGI1XZLpN
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427510201329780269366531398372631813520971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 13:34:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 13:34:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'principeturismo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24534831882959926077306261991581533473603647567199367203666030738808822068925980522855826281696899451071320169681071427128370330780510116913655036153812935990782560699641337844742516288641486152399294241192900730154052402340424319417593264556586209159676754618600241442337054078770368023009801575654587621608585384317051272891004279700698490850587281982233217988070953449951404304708680558274272187507278766499856746241439759309833370287978417199095472999411185538988581093697440495580477857457835639888747439347028693548310165574783486464149959133150768551469290696665739710146023771035886335925112329377895360908703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a96d2c88d86cd47b3ccc1f53c0f9dfad7a17cf2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.principeturismo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'principeturismo.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e0f09d76e000004030047304502203fc8339f619361db746db14312a2ad281657484dc96754a5b2047d2af20a92ae022100aa2c2b57129c540cd759e91a9b08025fdf67425236058411b9a2641de16d0908007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e0f09d7370000040300473045022100afe200e9b80f328639e013401676e3f394244114a43f66ac637d47904f090f0a02202b0a1404dc75ae2aeaee828de51f58e09455614c4cd07915328cadb15dab1b9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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