guiadacopa.opopular.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:e0:46:21:f8:33:ad:5e:32:ba:5c:02:0e:49:85:0d:88 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=guiadacopa.opopular.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:e0:46:21:f8:33:ad:5e:32:ba:5c:02:0e:49:85:0d:88
Serial Number (int): 296684052808957414818612309836007760792968
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:93:71:06:85:f0:79:21:9f:61:80:34:0c:11:6b:da:d7:40:64:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:ed:25:31:76:1e:65:3f:ac:56:70:90:90:10:89:0a:b2:92:07:5d
Fingerprint (sha256): a5:74:c6:be:6e:02:ef:ef:64:ee:a8:c7:fd:42:48:ce:ee:fe:e1:bb:22:e3:0e:d1:9c:e3:27:fd:b5:f2:04:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate guiadacopa.opopular.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for guiadacopa.opopular.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

guiadacopa.opopular.com.br

Other certificates including the domain name opopular.com.br

(limited to 100 certificates)
sertanejo.opopular.com.br
goianao.opopular.com.br
guiadacopa.opopular.com.br
eleicoes2018.opopular.com.br
guiadacopa.opopular.com.br
goianao.opopular.com.br
*.opopular.com.br
poplist.opopular.com.br
eleicoes2018.opopular.com.br
sertanejo.opopular.com.br
poplist.opopular.com.br
popstore.opopular.com.br
guias.opopular.com.br
poplist.opopular.com.br
goianao.opopular.com.br
especiais.opopular.com.br
goianao.opopular.com.br
uaiz.opopular.com.br
eleicoes2018.opopular.com.br
guiadohamburguer.opopular.com.br
*.opopular.com.br
eleicoes2018.opopular.com.br
mail.ojc.com.br
conexaogo.opopular.com.br
guias.opopular.com.br
especiais.opopular.com.br
*.opopular.com.br
guias.opopular.com.br
guiadacopa.opopular.com.br
eleicoes2018.opopular.com.br
guiadohamburguer.opopular.com.br
especiais.opopular.com.br
especial.opopular.com.br
especiais.opopular.com.br
guiadabeleza.opopular.com.br
guiadohamburguer.opopular.com.br
mail.ojc.com.br
poplist.opopular.com.br
guiadabeleza.opopular.com.br
eleicoes2018.opopular.com.br
conteudo.opopular.com.br
guiadacopa.opopular.com.br
*.opopular.com.br
especiais.opopular.com.br
eleicoes2018.opopular.com.br
sertanejo.opopular.com.br
goianao.opopular.com.br
guias.opopular.com.br
sertanejo.opopular.com.br
guiadabeleza.opopular.com.br
guiadohamburguer.opopular.com.br
guiadacopa.opopular.com.br
acontece.opopular.com.br
acontece.opopular.com.br
guias.opopular.com.br
eleicoes2018.opopular.com.br
guiadohamburguer.opopular.com.br
*.opopular.com.br
poplist.opopular.com.br
fb.opopular.com.br
guiadohamburguer.opopular.com.br
conteudo.opopular.com.br
sertanejo.opopular.com.br
*.opopular.com.br
uaiz.opopular.com.br
conteudo.opopular.com.br
guias.opopular.com.br
goianao.opopular.com.br
guiadabeleza.opopular.com.br
guiadabeleza.opopular.com.br
especial.opopular.com.br
poplist.opopular.com.br
uaiz.opopular.com.br
especiais.opopular.com.br
goianao.opopular.com.br
guiadabeleza.opopular.com.br
guiadacopa.opopular.com.br
mail.ojc.com.br
goianao.opopular.com.br
eleicoes2018.opopular.com.br
guias.opopular.com.br
guiadacopa.opopular.com.br
guiadohamburguer.opopular.com.br
acontece.opopular.com.br
conteudo.opopular.com.br
*.opopular.com.br
sertanejo.opopular.com.br
guiadacopa.opopular.com.br
poplist.opopular.com.br
especiais.opopular.com.br
*.opopular.com.br
*.opopular.com.br
guiadohamburguer.opopular.com.br
guiadabeleza.opopular.com.br
uaiz.opopular.com.br
especiais.opopular.com.br
acontece.opopular.com.br
guiadohamburguer.opopular.com.br
guiadacopa.opopular.com.br
especiais.opopular.com.br

Certificate

The complete raw certificate details for guiadacopa.opopular.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296684052808957414818612309836007760792968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 19:18:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 19:18:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'guiadacopa.opopular.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744138009205151855867518285232250909777100339222193281149526109858627504733986755952883519468777946642677261710268103969990286363216691330372659454127593495061802851527436536602651051554577584797085011850694265918159635029527547263433617542584333819943144572733668375102492879378239605142029693855597231184920982073209713482139937482829823660861391694522075342243215903013413212869175108584637150350155375517030302032810235917644376561759483154773355224436212032123217428537914216263562275205675628507422668081734051754006840559205482464611614425447108046858081493224812754951432462054725578199239517359275188335985050292541685385519569512597961962805712845392669475650576395218506016587695354852891313879094078813128735504827755123747489758269624334283073529500806383792458213877339730340896669001224347333051916883639383526392343782690782351221245935723747268627246003118058596738733674483800718399898827438475825996086343527817651033379245718924653553534617740468269808959664316546741648790160939170684497610363152878798527491674292059179625626025610552055086752238774184831102646341721457923550339686122186603925876053789789968494200771071345152418868733508250592969816403386791483108772724096710268197007272112208581655908831687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d93710685f079219f6180340c116bdad74064a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiadacopa.opopular.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f105d1809000004030046304402202cbd3c9d1f0cd78582eedb27073d969d5f35aeba0d91a4c946e3e393e067859702204cbf5a593d263236d973079e49d1e97fb22bf92ac66aea92b0c241a7cf8bc9e000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f105d18590000040300473045022100a52e19ab7dbd77a03638827547d91d94848b5ccbb7a27c711a647221503451fb02202f2708b29451087e569724378405c0fd6f50e31c9edf6433c6a2827538850e9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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