hidromassagens.com
Issued by R3
About this certificate
This digital certificate with serial number 04:f5:80:71:ee:a2:8c:bd:5b:5a:ff:f7:50:f4:b3:87:5c:fd was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hidromassagens.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:f5:80:71:ee:a2:8c:bd:5b:5a:ff:f7:50:f4:b3:87:5c:fdSerial Number (int): 431989056375768398618453368352432768638205
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 90:d7:47:c5:bd:70:ff:0b:61:68:7f:73:58:96:80:a6:48:ab:20:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 59:bf:9d:2a:b3:7d:fb:2c:98:1d:a0:f2:df:64:e0:00:b1:20:12:ef
Fingerprint (sha256): b7:de:61:78:14:6c:65:17:ea:df:d1:9b:8d:e3:ed:1c:76:34:ef:3c:f1:7d:b7:f1:fe:27:36:1d:f9:2f:51:3f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate hidromassagens.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hidromassagens.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hidromassagens.com
Other certificates including the domain name hidromassagens.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for hidromassagens.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISBPWAce6ijL1bWv/3UPSzh1z9MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjUwODI3NDlaFw0yNDA3MjQwODI3NDhaMB0xGzAZBgNVBAMT EmhpZHJvbWFzc2FnZW5zLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAMyc9lfli/25Vh3F6ma9edoFDn3e7Ti1q8EMKsdY39kMqWNavlqWJfL+YKUx pG2Rmmb48dcUltqbxawy8GGZL8jsi123LK3gdIGynYxHX8w0YOhfx+5+Fv+7K/oS 8p1aIoWx62rm8I5aUyDE1TbDQ7MK7q7OgiFaCPwYbTh+p3LuhcE8Dn73peGAQh3z 4NNd1ipiaG/Y40tz99dR8wozi40IEd1AI7vVUKbhf+pDh/Wpchbvd7ORG9CaekUz 9Jaoc9N4jxSw69o5Z4A0F/x4kddX60o3lD3OXwJkb6CX4l5QAq7X/jJumhKJRYGF TUazQGDLXHDxRdldm/vKKI9rge3TSx++fviAdWDFStiuI9b4FsSES1XXe/r8J/Di 8Xn9RlTah9mAnDi9Yl7hQ1vjBpEZth7ERrrBMAwjXqSUV0nW3iYwqABooCC/WMlW 8yI5Oiel7hnT2MBteiNSwed+aj1f0Znx1Ijn0v2sMxA+mh85hbJtwyn+owmfjlPe ed2m8M9vkSkJa2uxfjwC7fuZ9BgN0vf3lWAvt/I4Os/4ju3uXWfy5aAI/39Ouq/8 2mtpIIHKwDUxh4gH4C3CQl/szqqwuPRX6rs+xRWrj8PtiDKP15iF/MP5zkJbz7K3 Z5YYfRFV57obqbgtHfRrfjWs0GyHfVVlmdbmMWO4+F/fm/d7AgMBAAGjggITMIIC DzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJDXR8W9cP8LYWh/c1iWgKZIqyA+MB8G A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEmhpZHJvbWFzc2FnZW5z LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA 7wB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjxSVJvgAAAQD AEYwRAIgNkmZvrn6VKy7Nz2cvielifGLpeT013wqtd4WlbrnzlkCIApa9IyIQ1ua hNd7nMrI8SVrTkZ+ognK5DCbWgRb+tELAHYAGZgQcQnw1lIuMIDSnj9ku4NuKMz5 D1KO7t/OSj8WtMoAAAGPFJUnQgAABAMARzBFAiEA2kn4wm7iAjcoXgplI+lVlLcM 7I88VD1Jhiiw7cPxHt0CIHuC/VsF6vjXqcDS6SW3IfzT7T4Hd8rtEiF7lA/a5KzD MA0GCSqGSIb3DQEBCwUAA4IBAQBg6i9a8ILYqNUV0sS8cGKiiolSKx8z78NOU//y DiDJnrX1+4jDpsGM8yH4fVGx0oyYiN/tf2glVi/rqCTUnWFu3WZs8k6BQdjqUzVn SxhFtiolUwyWE2wefkDwiXpshL+blKeZ1pyjgKwU5xxYG+J6gFTwAhi4p5V3Oj7C yMxVaEFBBESFC/sWLQGpxWD/K8PAoYg/2I0HJ4/ZKTPyCTZ93roUI4reoyx9RK04 gnjMt33rIc7JpcJZasw4ZYaBV6AW7XxlVAc6KBq6rA0KiQriGnk4uEy/D/+zvmRN XaPJcNQp9xYk4h3gWMnyRxCx6V0OcPqlinh6VoqDyn7j9XY1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzJz2V+WL/blWHcXqZr15 2gUOfd7tOLWrwQwqx1jf2QypY1q+WpYl8v5gpTGkbZGaZvjx1xSW2pvFrDLwYZkv yOyLXbcsreB0gbKdjEdfzDRg6F/H7n4W/7sr+hLynVoihbHraubwjlpTIMTVNsND swrurs6CIVoI/BhtOH6ncu6FwTwOfvel4YBCHfPg013WKmJob9jjS3P311HzCjOL jQgR3UAju9VQpuF/6kOH9alyFu93s5Eb0Jp6RTP0lqhz03iPFLDr2jlngDQX/HiR 11frSjeUPc5fAmRvoJfiXlACrtf+Mm6aEolFgYVNRrNAYMtccPFF2V2b+8ooj2uB 7dNLH75++IB1YMVK2K4j1vgWxIRLVdd7+vwn8OLxef1GVNqH2YCcOL1iXuFDW+MG kRm2HsRGusEwDCNepJRXSdbeJjCoAGigIL9YyVbzIjk6J6XuGdPYwG16I1LB535q PV/RmfHUiOfS/awzED6aHzmFsm3DKf6jCZ+OU9553abwz2+RKQlra7F+PALt+5n0 GA3S9/eVYC+38jg6z/iO7e5dZ/LloAj/f066r/zaa2kggcrANTGHiAfgLcJCX+zO qrC49Ffquz7FFauPw+2IMo/XmIX8w/nOQlvPsrdnlhh9EVXnuhupuC0d9Gt+NazQ bId9VWWZ1uYxY7j4X9+b93sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 431989056375768398618453368352432768638205 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 08:27:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 08:27:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hidromassagens.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834748757958871293808682407618035950785941549874173463067718893950163527329208778955848144070026146983719927938630319345371298526120303888411619271844230767201000921731788916445268706880456339520066159897300346133090393226461977414689922047151220927591293849519754163301406912731778762440984446915715260398577898346905378510623442895169056892288533852310777408532050403494580063736587363947331026426785089657419069560202097141798400064284359339997178025246742526559829428378559885180841599948766338555362249515328360252589646162276435971047185306057373867421162188222569609032481675909601241121096310938041521623721418988180730305841616767915334877061576053880151050638072342975756903789350622961422239682181377332945916418746272258793744958200152542752205542596485719030362933500853983371760857134380583546354563765230843624983914854465060429029815547049934631132067513983568899907167291181600924437775361396317584733429107667098720759617888286984997294972395862531546038250294479952177707609505465236583123360532655812142633577991552556707802726421904631092685821004926730860500974627516524742185879605660222656503095045246006593498527308105438482797271688402816493953610304407356155055858123648549717340099853947422840476166518651 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 90d747c5bd70ff0b61687f73589680a648ab203e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hidromassagens.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f149526f800000403004630440220364999beb9fa54acbb373d9cbe27a589f18ba5e4f4d77c2ab5de1695bae7ce5902200a5af48c88435b9a84d77b9ccac8f1256b4e467ea209cae4309b5a045bfad10b0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f149527420000040300473045022100da49f8c26ee20237285e0a6523e95594b70cec8f3c543d498628b0edc3f11edd02207b82fd5b05eaf8d7a9c0d2e925b721fcd3ed3e0777caed12217b940fdae4acc3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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