recife.ftd.implystudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:6e:ad:22:08:7a:f0:69:0a:9d:cd:3f:f3:86:0a:4d:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recife.ftd.implystudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:6e:ad:22:08:7a:f0:69:0a:9d:cd:3f:f3:86:0a:4d:ea
Serial Number (int): 314227738705192868681604056893358282001898
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:6e:47:92:9f:42:9c:8c:79:cb:33:19:b8:66:f5:a0:81:b6:29:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:6b:f8:22:20:08:2e:99:7d:06:7d:ab:7b:7c:1d:2e:2d:bb:4d:ce
Fingerprint (sha256): b7:45:d5:c1:c2:37:e1:ea:3c:39:83:41:47:e0:65:2c:73:f1:23:d5:c3:00:04:0b:69:e6:bf:39:17:4f:e4:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate recife.ftd.implystudio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recife.ftd.implystudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recife.ftd.implystudio.com

Other certificates including the domain name implystudio.com

(limited to 100 certificates)
metabase.implystudio.com
recife.ftd.implystudio.com
registry.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
api.test.fretapp.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
api.staging.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
api.test.fretapp.implystudio.com
api.staging.fretapp.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
api.test.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
staging.ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com

Certificate

The complete raw certificate details for recife.ftd.implystudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8MwDuX3H382J+GkbwE+h
iyWZZ3kD0Eoa+/ZgqLWPVSCGAyS//mF/3L6LtdmGQ+vkM4BCzNVj0Mkgx7n/ojcr
2VqdyKK5eDAxwjf8zu+H7y9qQJpeCzGpLIPlFV+A3D8GDkNOD4fh2kdVVl+/h3uB
kFdCuQdW5q7flCk9EuVA19b2fWaJoRomzzrZJlB7070ShGzR/ZAH2OlIqeFMy9gW
QKE+n12BMtCD35+6TOx7mZyiTN7icN/p7aRBZfGyvoWetD+9KT33dT81QjR4QN6V
J6798c/sN+BvbtUeU8dVN6gAB4qXgDQItoZs182Ygt69HRhGH7yEVWh7tvjMEJyB
gvfs3Q/Dwl8dKb1RKP0ZLuiEpnExMLH0FOM/07ZlSedi8t/binzZRhZKI7ztv0mT
ag3JA9ELf75rcU0tRrKidixBZOy/oSdCWW2Aq+iy0kBdNuhAoGE9QIef/R6IcLyl
vnqBpOWeOdJxiyUzVUFJAgg4DDNaWcrD5CzIRol4P5+G0i2SvlM4nOxbatd/Tw6w
cfZQvF+59HL2DcUWX7tsGiIZYbDjku/nY4MGGtGNMlU2ZPQx8znHqg66pfwUHA2U
lo5r/tiK8woKDQbDdtd2NbkO5IENIJBfQWEkxQNoTIt/6Y6oVhDu6AGJ08++HAXE
zGWQJ33Qy2E+CZ/YT3jdHZ0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314227738705192868681604056893358282001898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 23:00:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 23:00:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recife.ftd.implystudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982365774547954815867699436993098951327770229990273052863383189510076175193360942357712985568053301767737560424347670887272040669578140648983797046533481430990279101137821905328762963502726022844360835115636315627286419926539454746590593838739283474056637979568456457233079539755387331950848968979343447479068769396979083880105492586651432071866350542435014698058762400102452826328069573296311901664177179056396288031661202358754637187076959133078689036495399225866959172022899825390065971151333167174384131836486334071749201566973039922986266986008927953817891079241919459189902998849806622562847971039502126050950812055431268506873931918916288348266438754737881856719797563777466466858226738137293722447072026652321788370664109862174409027315409844943785304870964598340341062811388021448628546103942546291278691076531574785762899396455285996324423637271398607183050844572811604873900942410105733494724588528478333485218670453168949965946196264552255053101012686944401939829645201238721251546271258140528235342762972912185168423459637103227104877675521483700384411897195171800870622441371698320187728109588916055618507335714021282965577264324492402170633502184603931792470052007421273343727622016000800088649811990118426546133605789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f16e47929f429c8c79cb3319b866f5a081b6299d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recife.ftd.implystudio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b6d08b7dd0000040300473045022002238f9553e9480b9ceda8491e5f33ce9bd95c1971244766009b1c36f87ad242022100c3c89406bdccaed6102ea2e84a1b586d53ebccc5c41eeeb95c2c2f97e74edfbc007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6d08b7f4000004030046304402201d98d66ecde5bd089d28d25c0c79dd62e6cf0a0d3295ba552065a6cc38b61c0702206a1a00a5a201d8e08676a482a8da4844feaa27b33165e31079c307d92043bb3d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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