devservices.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:e2:3a:3c:99:b0:74:00:35:45:a6:5a:12:e9:bf:83:95 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=devservices.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:e2:3a:3c:99:b0:74:00:35:45:a6:5a:12:e9:bf:83:95
Serial Number (int): 264359824640034528336746407882968348459925
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:c3:c5:2f:48:50:6d:6c:b7:9c:60:a4:65:53:db:ea:b3:09:7b:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:e4:a3:10:ae:99:9a:53:c8:17:a3:c7:a8:dd:94:e4:2e:18:82:03
Fingerprint (sha256): b0:02:47:3a:10:21:4b:ed:1d:f5:3e:f1:76:40:f4:02:6b:d0:9c:0f:78:41:97:14:99:f7:12:91:25:a4:fc:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate devservices.com.br

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devservices.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.devservices.com.br
devservices.com.br
sistemas.devservices.com.br
update.devservices.com.br
www.devservices.com.br

Other certificates including the domain name devservices.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for devservices.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264359824640034528336746407882968348459925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 22:49:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 22:49:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devservices.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757012249042285947698319058690267508453817316679132666189919282873095720147491896072889947594446342565177145897207674570097287012574584614302813535711146495612846387246171597371842244032760411181317462321930643793532157526050186152249714956031783989582462950296734291757515144114087849384013760668048129700104821762586418409080732432570352593112860322241031546485340491891522976147609716263400111627306444217097054468767817028563284070432506558775137544694885655750479205598401409935855126669936067759613841667491560095858665896116833109938204720348831436877823347374317427273979646978612513647382439686165573576420679916234751768980412588248552074421146106439515123649561430108158024936414317952692279645431829256607159142434589739052964772602408997812646428515556897814784191857666520340762527632756020468850316218744651587212585549713115511999275670068611139763359026121439696438166199628588670266013965054196790981215923112046396477089803971451969649270770812143305163669853568685646704649996008090890635963599075340367820526544664808006557383516118054203109299377225145729227395327030453187594759556497631846502158879753615352256476583466625384916708312447394082461262492806833739311555117330175154607154292240398627705210998111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4c3c52f48506d6cb79c60a46553dbeab3097b23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemas.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devservices.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a75cd823d000004030046304402206aa2a33dbcfc6be82350202df1b37ecbe2d70019656ebb66c8c7afe08b3182e9022061736f4b2ee88d6efd118f18eab58e4f9f51275bcac3a16d79c6dc0a680e4153007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a75cd822c00000403004630440220291d0da35289984b59fe8cac95afb0db772ee3af42f34e49fc675da4e283554402205c8d06d3af5c86ead05d0b57a30ebb9ffc551577ea9751cc160edf03a9fdad51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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