lgpdcobasi.nuvemx.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:06:1f:2a:52:06:d9:72:17:ae:40:4b:83:1a:a2:51:9e:94 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lgpdcobasi.nuvemx.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:06:1f:2a:52:06:d9:72:17:ae:40:4b:83:1a:a2:51:9e:94
Serial Number (int): 350532263736604260873122286206930237103764
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 68:ea:b9:d6:aa:4f:23:c9:42:71:46:1c:09:82:a8:46:3a:33:aa:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 84:3f:c0:10:0e:6f:ad:1f:d4:89:33:91:ec:fc:d0:56:26:57:55:5d
Fingerprint (sha256): 9b:50:0f:40:02:33:d7:4d:96:8e:97:ac:56:3c:85:49:73:f1:ae:07:eb:ed:57:fa:45:24:f7:13:d7:82:4d:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lgpdcobasi.nuvemx.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lgpdcobasi.nuvemx.com.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lgpdcobasi.nuvemx.com.br

Other certificates including the domain name nuvemx.com.br

(limited to 100 certificates)
lgpdavonale.nuvemx.com.br
lgpd.mmcorporatelaw.com.br
businessgenesis.nuvemx.com.br
grcdemo.nuvemx.com.br
lgpddata.nuvemx.com.br
everest.nuvemx.com.br
lgpdalbertsabin.nuvemx.com.br
lgpdtotvsux.nuvemx.com.br
lgpdconceicaorioverde.nuvemx.com.br
lgpddemoux.nuvemx.com.br
lgpdpostopresidente.com.br
lgpdpmi.nuvemx.com.br
portallgpd.lojasmm.com.br
lgpdmutua.nuvemx.com.br
lgpdteste0715.nuvemx.com.br
portallgpd.stoccheforbes.com.br
vivver.nuvemx.com.br
businessnec.nuvemx.com.br
santacruz.nuvemx.com.br
lgpdunipam.nuvemx.com.br
lgpditauna.nuvemx.com.br
lgpdcoqueiral.nuvemx.com.br
lgpdband.nuvemx.com.br
lgpdmpevazia.nuvemx.com.br
lgpdbelago.nuvemx.com.br
lgpdsinprosp.nuvemx.com.br
lgpdsonda.nuvemx.com.br
lgpdsuporteemx.nuvemx.com.br
lgpddediccar.nuvemx.com.br
businessembol.nuvemx.com.br
cedro.nuvemx.com.br
lgpdbasicdebleison.nuvemx.com.br
grcvazia.nuvemx.com.br
portallgpd.bbmlogistica.com.br
portallgpd.tppf.com.br
portallgpd.defensoria.pe.def.br
lgpdmpeparceirovazia.nuvemx.com.br
portallgpd.rfconsultores.com.br
lgpdhtb.nuvemx.com.br
lgpdabr.nuvemx.com.br
cs.minhaitatiaia.com.br
portallgpd.taua.com.br
lgpdpmi.nuvemx.com.br
precavida.nuvemx.com.br
csc.pluro.com.br
portallgpd.fibracem.com
lgpdtotvs.nuvemx.com.br
lgpdtvanhanguera.nuvemx.com.br
lgpdexcellence.nuvemx.com.br
lgpdquintera.nuvemx.com.br
portallgpd.defensoria.pe.def.br
grupocataratas.nuvemx.com.br
ouvire.nuvemx.com.br
lgpdcobasi.nuvemx.com.br
lgpdteste0823.nuvemx.com.br
lgpdpoclgpd.nuvemx.com.br
lgpd.gndconstrucoes.com.br
portallgpdraf.com.br
ingra.nuvemx.com.br
aprs.nuvemx.com.br
lgpdiosr.nuvemx.com.br
lgpdcarglass.nuvemx.com.br
portallgpd.pitchonimoveis.com.br
lgpdagricolaalvorada.nuvemx.com.br
pjus.nuvemx.com.br
nexusliga.nuvemx.com.br
faj.nuvemx.com.br
lgpdkinoplex.nuvemx.com.br
lgpdembol.nuvemx.com.br
lgpdclm.nuvemx.com.br
lgpdbreitener.nuvemx.com.br
alianca.nuvemx.com.br
grchect.nuvemx.com.br
grcnowcy.nuvemx.com.br
lgpdgloboaves.nuvemx.com.br
lgpddpmg.nuvemx.com.br
sd.nuvemx.com.br
lgpddemo.nuvemx.com.br
lgpdmatterhorn.nuvemx.com.br
portallgpd.emxtecnologia.com.br

Certificate

The complete raw certificate details for lgpdcobasi.nuvemx.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISBAYfKlIG2XIXrkBLgxqiUZ6UMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MTQxMjU3NTNaFw0yNDA3MTMxMjU3NTJaMCMxITAfBgNVBAMT
GGxncGRjb2Jhc2kubnV2ZW14LmNvbS5icjCCAaIwDQYJKoZIhvcNAQEBBQADggGP
ADCCAYoCggGBAJW1QjHO7twa5gGbqfsG26VOKiWD8SWqGuR8bc4MygjUUQNRDSWJ
GXMzXLqb/ogeN6CSl92Tr3blfFxECKFa9L7VcB5Fdd0YNsvY6ZFPO3iZVVyDFBga
qilIYHAeGRBJiAecDIfqAZ1rMaHbcL4DuJNs8hq1klSOdKoZUB3+ZGjvpZy2OEgg
qUbSBvoatIkzANdazskSlN0qy8G10ZypfmaKdrpDUeRyVMdg/Vhpt7fWj8xP7TJ+
CmfRTm1qbewAc0uXGwFVO9p1P6+UGvBmURRvwSdyyhWQ2QGMkhNUzLYP+GQn3Efr
VHxBaQ8YSsPe4GZVtgaIpJ7BP31jVAiH51CEOiGD1jH2yedxTSsBK7XYXkQBGWE+
lhz8OmJbCkmuPUCs1zH972t5u+6I4//RP43qZATv+5nybV0Wt6V/tLlqRxkgt9cR
O5+XvEWf90qycZBzI3F/XP0rNgTfspIdumYjDyYN5tmpHDNAXQeWuXGquq6hZI8O
qS1kmoLftDqMawIDAQABo4ICGjCCAhYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRo
6rnWqk8jyUJxRhwJgqhGOjOqaDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d
ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl
bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAjBgNV
HREEHDAaghhsZ3BkY29iYXNpLm51dmVteC5jb20uYnIwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAY7c5nOiAAAEAwBGMEQCICXiW2xDeX7wFW2gAcTf
wKo5WF2gHqZolRIgJP1zQL2IAiAq3gFLCaYqMFbh7lw2GQSFnNLJ8PoTXMODkCll
U75kegB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjtzmc6UA
AAQDAEgwRgIhAMEP/M6ExRTBySGBeJVgVfLdfT7BlCZJWu8NEajx7ydmAiEAtF9D
QTncA/PzwsKpIdvRrahR68VSB9/fdbVGj1G3EvswDQYJKoZIhvcNAQELBQADggEB
AGwShO+9Yth+v4t5Una+0dQLxV+aIMQl36tAL+OQpSmJe+XhM4JxzZa0t74EDTKc
Wz0kyN3DDVkUALgsuVMx1qSR6NYNs30Gfmx1o2xAtilae79kORTMTWeGz2bNf8Kg
25bQntSEzGQL54BK0uVbcCcj7VKCr4dJnP7BnYwAOG1fqaCHPj0l3k24TXNXPuJB
a8LPbQS5lAO1eBzSFcnptXPM8hYoEA3Dx4mA6ce5FoRAJ9+4joytSXJoMlr6AVFL
xTzEHOk7dgWvkS6IwdeLaIMTv5LUJBhVpyFly1uMPIMaHUyYwxoon2qFDB+HfUDy
8kMrgIaiFYZJpAnlS5Q/zhs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350532263736604260873122286206930237103764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 12:57:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 12:57:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lgpdcobasi.nuvemx.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3397440368301178965612531493059211380970025532590548128681027798375670548088183293581930971426339768607874280312916040913035403410036634492758654244850808724154873321400315163489777660308376268227379173366899910529149991236033829849073545580611492005645348129233225952529814507467664563034595435616074601994275427393156276726452615983573488796711067529525598087550471843025068517585585098813328240118412769681047750990901264544731213951455206483525673652607872579099376269817606470831731523109222502681203153000864061549035261539689373406321994599887065103273368457194884722076929816888630237037400322448061657421790941119870371067524568175394333847762400128608239869714944112280659203312774806779054595421529112126981381769413810003134918660704065762156093691716359674771095702405487137049501741624564535133919578569482390452393738808389317575677742821637851045097162542181103079431046666371060749528410165031891173375642731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68eab9d6aa4f23c94271461c0982a8463a33aa68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgpdcobasi.nuvemx.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018edce673a20000040300463044022025e25b6c43797ef0156da001c4dfc0aa39585da01ea66895122024fd7340bd8802202ade014b09a62a3056e1ee5c361904859cd2c9f0fa135cc38390296553be647a00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018edce673a50000040300483046022100c10ffcce84c514c1c9218178956055f2dd7d3ec19426495aef0d11a8f1ef2766022100b45f434139dc03f3f3c2c2a921dbd1ada851ebc55207dfdf75b5468f51b712fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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