santellocouros.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:c4:98:45:4d:29:54:97:3a:ae:7e:1d:08:f7:86:c4:f8:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=santellocouros.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:98:45:4d:29:54:97:3a:ae:7e:1d:08:f7:86:c4:f8:2c
Serial Number (int): 328234604200647298604484161026432996538412
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:e3:63:81:86:bf:dc:0b:97:31:51:b1:40:a7:f4:09:f7:db:be:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:8f:42:22:9d:93:97:6e:12:f2:e9:ea:d1:a0:6b:70:5b:4b:55:08
Fingerprint (sha256): af:d9:be:6b:07:02:89:ab:a2:9a:8e:db:c1:49:06:8d:bf:4a:8d:4b:9d:4a:1e:5d:81:c9:f1:ee:1b:87:02:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate santellocouros.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santellocouros.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

santellocouros.com.br
www.santellocouros.com.br

Other certificates including the domain name santellocouros.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for santellocouros.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIh7vuK+9Me+9oTDEYMp
kdNNztcqLffz5wvYONfnhghGieWWP9Ei+x6ULC2BWoVSz+ckhZ8eI4WMHYqhHq3W
gybYlxGpsZ1xtOBUxXbjs8VbtlYFOw2UmAofOMRNv0vuLO8/DdTCVCqCKlXXcKrZ
YxXA9Pm1M9S96laGAmaPoPB11FsnsWZQJpltr9/ezlyTRIwd9WRUjd/cDvvzaIBo
BNp1t09j+2zMgzZV6KUifGXqXgire5nZD6rPJWYU+4qcK+7A96aOtpm55J/VSZeq
x/RRRW05hJrLX5BaKj9X6g3hF/FIU7jno/Dt2a0b0qeYnk6D7fA8Nh5LCfo4Q8bW
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328234604200647298604484161026432996538412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 13:45:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 13:45:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santellocouros.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22790197357673342940777951046037244091074794679745354395303010499053321046872901380334269979815293756574447097165933603647531104492017487798102690251709395869624686659328529311542616105186757643760437125757648186955418808383230304320628060039765052371640385986525550681639053451158364754396327514130266097214746422770592585229487380080486459967271334053391221908623097322094601534373922621566754907420745119453551005991675927019322745002428559117481353103518954154996429613634945525788864738317131736877153906280044378187793701944681220665708340866956252155922362461171727039788664971504459623731918168980508402702001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35e3638186bfdc0b973151b140a7f409f7dbbe99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santellocouros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santellocouros.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018acccdda730000040300473045022100a5fea1b6d43dca448bdc455265d42c7bf36e4820057f2c7dc39cc3e64a4f784702201600349375a9a4429ce154563251b1829449e5ccea74a957f3877b4cf6ca47af0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acccddc720000040300473045022078d36a6026897af821faa16541dd098a47e78efb84714d0af8895aff4ecbfe9a022100f3d155969ceeb0f6f2d5a992428eeadf34ac8d176c0bef5f23ba772580778c5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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