ri.ctc.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a4:99:06:72:a1:6e:fd:e0:13:98:47:d7:50:6f:9f:ca:97 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ri.ctc.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a4:99:06:72:a1:6e:fd:e0:13:98:47:d7:50:6f:9f:ca:97Serial Number (int): 317346571332435670533956438206855581256343
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ed:91:11:83:aa:38:79:74:bc:0e:9b:9c:99:43:4a:e3:84:ae:ac:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 60:19:ac:c9:02:c7:c6:42:29:c8:cf:80:43:53:e7:e6:20:64:a5:d7
Fingerprint (sha256): 95:9c:32:09:89:92:7a:ec:d4:55:00:a1:d1:ca:41:e9:26:22:b0:16:a8:49:42:af:5e:80:7d:f5:07:2f:6b:6c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ri.ctc.com.br
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ri.ctc.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ctc.globalri.com.br
ir.ctc.com.br
ri.ctc.com.br
ir.ctc.com.br
ri.ctc.com.br
Other certificates including the domain name ctc.com.br
(limited to 100 certificates)
ri.ctc.com.br
ri.ctc.com.br
*.ctc.com.br
ctc.com.br
*.ctc.com.br
ctc.com.br
ri.ctc.com.br
ri.ctc.com.br
ri.ctc.com.br
ctc.com.br
*.ctc.com.br
*.ctc.com.br
ri.ctc.com.br
ctc.com.br
ctc.com.br
ctc.com.br
ri.ctc.com.br
ri.ctc.com.br
ctc.com.br
ctc.com.br
ri.ctc.com.br
ctc.com.br
ctc.com.br
ri.ctc.com.br
ri.ctc.com.br
*.ctc.com.br
ctc.com.br
*.ctc.com.br
ctc.com.br
ri.ctc.com.br
ri.ctc.com.br
ri.ctc.com.br
ctc.com.br
*.ctc.com.br
*.ctc.com.br
ri.ctc.com.br
ctc.com.br
ctc.com.br
ctc.com.br
ri.ctc.com.br
ri.ctc.com.br
ctc.com.br
ctc.com.br
ri.ctc.com.br
ctc.com.br
ctc.com.br
ri.ctc.com.br
Certificate
The complete raw certificate details for ri.ctc.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISA6SZBnKhbv3gE5hH11Bvn8qXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwNTEwNTBaFw0y MDAxMTAwNTEwNTBaMBgxFjAUBgNVBAMTDXJpLmN0Yy5jb20uYnIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIuLmNI1Sg6j0TD44P/pz5MowkNAmWvn/ uX0NjBN4ru5g1qHIafWmPLxNiXB0lU/6D/PTDMd/3ecntRnmLrwvWEfOFh3eHUym j1DeZripwU5oxJWaCuh+bAOJiaKgPfCSkWxhGwkK/uQIjaxGXlhjVMlcssvo1aiI W0ovXSccZglcak+vc949QWijiQRdkha0kh8DL/A5mqO985CVcItCmryuQ9opBTEj 4Yc7Tb+mtK37TruscVeSzmJ2XCOit3jqu24ir3x0J7eKG7uYky/FCD5kDyv2Ysei c2PlkMCBbyfDgk2DIgRmnHkPMQ8PuJpp78tISdUPgeX0X2AfOuKRAgMBAAGjggKF MIICgTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFO2REYOqOHl0vA6bnJlDSuOErqwZ MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wPAYDVR0RBDUwM4ITY3RjLmdsb2JhbHJpLmNvbS5icoINaXIuY3RjLmNvbS5i coINcmkuY3RjLmNvbS5icjBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1APCVpFnyANGCQBAtL5OIjq1L/h1H45nh 0DSmsKiqjrJzAAABbb6XTtkAAAQDAEYwRAIgeLOIbsR+8IppsNsN2x7ystokBbbh HssNu6HY13J9oQwCIH1Nswh1+o7Jzy1QIaWJxg5ArBEwHooSLpJApi5M5NCsAHYA sh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFtvpdOrgAABAMARzBF AiEApLqL0owA+G6Zw4tVy6hTCNuzkCNz/hxVJ4MfTruvteYCIGunchL3iF9ZSbE1 IsqfbKLFLSQi+U/EQNsA3CEep+A5MA0GCSqGSIb3DQEBCwUAA4IBAQBdnTnzsUru rTxAyq3rfAHl+96KFEKdNSMd1D8I4+yEQAc8fOp4fAjyTHDbNIedEnwKA/Gk4z3O P0xfQiz3Wf2eJCuUUQ8KyD8XRw2VoRYxGGnudG+oFr2YqdjKwf4TyfJDVIR2IejA aKgXkpBfGtOdLk1lb5Rf/A9pisFHcaaZMeotQphKESR7F4Ym6AzpBfk8INj9pZl8 e9cE5U88cZJDgg/S+MPGoUR9nrSeU8iALrY+j7HXz975TJ+nEcnwZMBEcsvZ4M6o Kv42G0G7mBuPtanTrZxTut2KP5jNLiZ66XKvmM0nvoTt8ZyTrjO4/AIUctsjL8g0 fdewLHbpmjLO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCLi5jSNUoOo9Ew+OD/6 c+TKMJDQJlr5/7l9DYwTeK7uYNahyGn1pjy8TYlwdJVP+g/z0wzHf93nJ7UZ5i68 L1hHzhYd3h1Mpo9Q3ma4qcFOaMSVmgrofmwDiYmioD3wkpFsYRsJCv7kCI2sRl5Y Y1TJXLLL6NWoiFtKL10nHGYJXGpPr3PePUFoo4kEXZIWtJIfAy/wOZqjvfOQlXCL Qpq8rkPaKQUxI+GHO02/prSt+067rHFXks5idlwjord46rtuIq98dCe3ihu7mJMv xQg+ZA8r9mLHonNj5ZDAgW8nw4JNgyIEZpx5DzEPD7iaae/LSEnVD4Hl9F9gHzri kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317346571332435670533956438206855581256343 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 05:10:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 05:10:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ri.ctc.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24254957641584483141178774855904340058879409307638026010356316714505044604513975586891500225669970240319441321834681922640982675321203751906145631898355245377256529009084633269778430118983296241443166628755596523659182254560055702211295201538152409783765298217234067036287582737563935330463786632661837922308833126610106183116673287099091271059869776224033334145755422406941732670080895487020116751073741566759100178805865351885427326076041524043602586796596809733411135665063332185720587654007657714417066658646535429430977634588399684363295592513246874104633269711899736967135803519092071795936602431378501641364113 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ed911183aa387974bc0e9b9c99434ae384aeac19 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.globalri.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ctc.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ri.ctc.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbe974ed90000040300463044022078b3886ec47ef08a69b0db0ddb1ef2b2da2405b6e11ecb0dbba1d8d7727da10c02207d4db30875fa8ec9cf2d5021a589c60e40ac11301e8a122e9240a62e4ce4d0ac007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe974eae0000040300473045022100a4ba8bd28c00f86e99c38b55cba85308dbb3902373fe1c5527831f4ebbafb5e602206ba77212f7885f5949b13522ca9f6ca2c52d2422f94fc440db00dc211ea7e039 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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