lynxdashboard.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5c:6a:1d:96:a6:03:80:e3:c7:f5:94:f5:7f:86:c0:f5:ab was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lynxdashboard.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:6a:1d:96:a6:03:80:e3:c7:f5:94:f5:7f:86:c0:f5:ab
Serial Number (int): 292783887351683576969349801385302031398315
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:07:bb:87:e3:a0:ec:8b:3a:56:49:a0:e0:ff:2f:a8:d2:95:fc:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:5f:33:14:df:72:3f:89:33:ba:a5:e2:19:1c:69:7e:ec:01:5e:13
Fingerprint (sha256): a4:69:71:42:c6:70:2f:91:39:fb:1f:65:8e:f0:c6:6c:9e:27:68:b8:55:19:e1:6b:2e:79:08:66:17:14:fa:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lynxdashboard.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lynxdashboard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.commerce.agr.br
*.commercesf.com.br
*.farmmone.com
*.gatec.net.br
*.lynxdashboard.com
*.lynxdashboard.com.br
*.simplefarmweb.com.br
commerce.agr.br
commercesf.com.br
farmmone.com
gatec.com.br
gatec.net.br
lynxdashboard.com
lynxdashboard.com.br
simplefarmweb.com.br
www.gatec.com.br

Other certificates including the domain name lynxdashboard.com

(limited to 100 certificates)
gatec.com.br
*.simplefarmweb.com.br
*.lynxdashboard.com
commercesf.com.br
*.simplefarmweb.com.br
commercesf.com.br
prd.lynxdashboard.com
lynxdashboard.com
*.commerce.agr.br
*.commerce.agr.br
*.lynxdashboard.com.br

Certificate

The complete raw certificate details for lynxdashboard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxWuYHDFfI7JNPUWRW9W
h2ZL34tfZ1x46w4DYVUv+36O8yJm3Kl5fqV3aLt4NEDQy3TbIeVpM3xHvn2Kqm+y
+G7u8GTaRgOSuCkETL5WdZXcGOXTBBQQUIMkXOWygiQHMw12Z/MYg8/XekKGqJRo
M7aTgGKzn0/omyv0Olzs2nOAkMZLkk/1V/QumOsnHkaFtIz06vpet1LjvKVvuC+3
CEXK1ThqbgF2aHx3vUuS08HzKYv8sWWztyDiKoU97XkAhKvmbdi3Xv8KD0xsjCrU
t4dZe/PXOCfDVzz9afUEiicC/Y8aQfJK2QJg0u41EfpZo6vusiAa6dzoC6yDCeNd
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292783887351683576969349801385302031398315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 22:45:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 22:45:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lynxdashboard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25132114066253955077871413977472537130640612626543181536689824105493094198251827511345662870156703870026703580856045159499123633059430182030852545358391824245806535200123573131106639836898008443585107620743640681112164206561307975785018177907923285983564469537803117735344254567933813362685148707700945466549236213431013601446023015781111436540511082780073238258408973912092528065676143884782654002177883898876835628569742927416967369141340180723394992119726531167801381767271638475315366481770232057034125832652531983131095759363659128595157325436304673384335270902769445936426614133168713426100950957859538286632441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b707bb87e3a0ec8b3a5649a0e0ff2fa8d295fc6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commerce.agr.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercesf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmmone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gatec.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lynxdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lynxdashboard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplefarmweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.agr.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercesf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmmone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatec.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynxdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynxdashboard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplefarmweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatec.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018975b164fd00000403004730450221008f5bd19853ab7cedda1280646aeb69fdfe5dd25d4c7637db324ce47c93563d29022033cadd9fdbfec178d93db48b04bf869ceadf8b2c138fa849574ba4bb58df33ca007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018975b164fb0000040300483046022100c46ef0c20bb20d8bb3be9fee2c19f878eff0d591a0474692e37f3f261be14bb002210083bc1ad4a58b27c68ad9e26be8413a0047686eb7fcb85993971fbf8af52d97f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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