gecex.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:4c:16:a7:65:2b:d3:69:ef:6b:80:79:ab:e4:2c:e3:01 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gecex.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:4c:16:a7:65:2b:d3:69:ef:6b:80:79:ab:e4:2c:e3:01
Serial Number (int): 278452115094716216148393860167604460380929
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:78:f3:59:26:ba:24:a2:72:aa:21:f2:ff:e1:21:7a:9d:1c:78:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:3d:d9:02:cc:db:76:58:03:ed:3a:2e:05:fc:bc:8a:f7:d6:b4:82
Fingerprint (sha256): b2:db:24:6b:99:d5:8d:90:90:49:b7:e1:c1:8b:41:40:15:db:10:02:3a:fa:34:53:66:14:d0:1f:65:96:b4:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gecex.com.br

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gecex.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.gecex.com.br
autodiscover.staffinformatica.com.br
cpanel.gecex.com.br
cpanel.staffinformatica.com.br
downloads.staffinformatica.com.br
gecex.com.br
gecex.staffinformatica.com.br
mail.gecex.com.br
mail.staffinformatica.com.br
staffinformatica.com.br
webdisk.gecex.com.br
webdisk.staffinformatica.com.br
webmail.gecex.com.br
webmail.staffinformatica.com.br
www.downloads.staffinformatica.com.br
www.gecex.com.br
www.gecex.staffinformatica.com.br
www.staffinformatica.com.br

Other certificates including the domain name gecex.com.br

(limited to 100 certificates)
www.staffinformatica.com.br
www.staffinformatica.com.br
*.staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.com.br
staffinformatica.com.br
www.staffinformatica.com.br
staffinformatica.com.br
staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.com.br
gecex.com.br
gecex.com.br
staffinformatica.com.br
gecex.com.br
www.staffinformatica.com.br
staffinformatica.com.br
*.staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.staffinformatica.com.br
gecex.com.br
gecex.com.br
www.staffinformatica.com.br
gecex.com.br

Certificate

The complete raw certificate details for gecex.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VTqoLgqLvrDf6XuKW/Z
qAdZWM04eUm656MlxgIjZWVa/z6Cz9DcQcvuzTLbTkcA1l/HtK/JdsPoIjAKmgaI
5aR5LQSt5qPphYm/DRA6tp/59SxyO+C+Qa409sLr7LCF+zwKQ3+zJR+KQOjx1UJ9
HiRQAS2BVV8FJo1db2kSjBvlU0pTtu/5RuvUYnnneMlr0GtN5qB9UaGniqzDOtDd
y+JbW5cmEPyZmj0R68SYHScL6NpuYvNad5q4CTjhHfG9ruiLdaQlrEbvknQBmbM8
JcnB53HUU618SPbGLgRUzxOGuKzo3lS5EVs+wOXwvc39EzQ2Qxw0MBob2QZJ7DZg
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278452115094716216148393860167604460380929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 10:47:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 10:47:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gecex.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28445492511513565773979851864307796201502262268134179093121995922830218189287701272003635141674484054923163126691301550843636032514392194935632884007680844042497735068271368156426529962177060845792252827209853098249446126779048303576652025410019828222499931392349936715228027950006415108002421929576830341883963316810828899944004358804049720963281057333108989401729899237178335443186872302851782275294654657218052475348500070716699876974284521776507744373228199104554430666156477361731678267198297116474194617127819028076240437168406115960625624482810633083684081955244973900025916003010166106190806449003054031593657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2778f35926ba24a272aa21f2ffe1217a9d1c786e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (507 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecex.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downloads.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecex.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017116ab4dcf0000040300473045022100c9e023b206cc68992066107eede31bff56ce8b8b12a4b89e31027e5be10058ce0220330f3b4a3c766d6c3b928c4fb4ad0cdd4378d9ed1acd31980a5e6b92c3ad4d5f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017116ab4de00000040300473045022059ab84c45d00387a6fd1f65f5eda4dc04b3c734aac8584b1a53b00de727325aa022100ad065041bcab3c3dbf709d950e762b89580d9cbf3005887047dfdabbbcb684cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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