recife.ftd.implystudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:fc:72:32:05:13:72:72:06:f4:c1:44:08:d9:c0:17:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recife.ftd.implystudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:fc:72:32:05:13:72:72:06:f4:c1:44:08:d9:c0:17:7a
Serial Number (int): 308971665188593497697965161269750292027258
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:e0:95:6e:da:31:f0:2b:5d:18:db:b4:da:cf:e1:9b:35:88:ea:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:78:98:2b:bb:e0:a9:b8:fc:3e:88:96:a6:a7:d2:ea:05:06:b2:68
Fingerprint (sha256): b9:64:c4:59:9d:7c:6d:43:d9:da:f7:c6:d4:f5:3a:9b:56:ec:34:b4:d9:4a:2e:70:66:3b:09:8e:6d:d3:e6:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate recife.ftd.implystudio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recife.ftd.implystudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recife.ftd.implystudio.com

Other certificates including the domain name implystudio.com

(limited to 100 certificates)
metabase.implystudio.com
recife.ftd.implystudio.com
registry.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
api.test.fretapp.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
api.staging.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
api.test.fretapp.implystudio.com
api.staging.fretapp.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
api.test.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
staging.ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com

Certificate

The complete raw certificate details for recife.ftd.implystudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2bfpmNcGhrJIZZJ2kXw7
NMbDVRMZqTyGGEbq0a32App1+IAMEQnT3i75lNDOUxwJuaUUaOUJRuUjH17cb2mj
235Eaa0NHmYaPbUuIoanjkWxEMXzDl+NdCVmAFpZDEPuGfYumODyMlnaQONllplb
cy6rC5YC03COXnq3wOzj5AYZLwdU2iDsSy+LLvxSzO1tBXLMxijKo1QKyI7eMcpZ
RWyuN9mRnRO25TCOFv77qS98q1Iu8HGBPi7xH8XbLF7aN07nt/SnijnZy8xNhzUX
6alUsNGpqvbDt8ow5EsMZHvTYfnPYVAsKdIQ1OqYL5fPIzqPbOJIBsgDtlvTgX9W
aAaGHSvcHxSGTZ3YPInGg7zqMcrAz5Mtf+V2ILECc9Rni4mRcT427IasO22/Mbgb
R6Jwt9zhMZBexGkWY1eqvx/ioooBPJyYHPTR/pIpFYCUxjNiqR1gitqInO15HO8+
3Ksf6hFn2Y7BQQcD0/ShOh4bIx8KZwTlLhRCvDFME8WbMtUmzbLwJtpQeftqnLrg
HM9F0nFW+FB0/vYZ8NS/rNBsYgUaFf/5UmPYExqBa4BSUzDJEvKxcXqnT78xDt3n
uhQT7NsAq2HWd/POWuoINdsl43Smx9EBcASG1qGpXx5ZF/O3FGPuJ3o1HFspmjEw
3yz5DjIZc0PvKhn9PuuNpUECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308971665188593497697965161269750292027258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 23:00:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 23:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recife.ftd.implystudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888213612339843720337551431327732934513164603693472800165162191827501274731370622458386138353137709537685498797255712758267179250604608043809649596881200678734839061032280252402804770243002782605294742963520489366580261398050425514511073202619744175281243300720934036643462684071416418109037958797286738459359700811172883925296166105464708591740207248150075422765217192537770667708239765381197014215844439359318868422157301212639997235260980609599091249072798595155141971221368563845279150836800000973594756963833706810349298010830779675881546597575757459057107355124735819989320483364335847357445888577645714816512703310564138794643016090348953803717399284434594877724250001111696722073645528316263106588408789560043237632914818951613289128318057252769545092863923541353652780699112109769282469322543274089170286766035754212735796334186840458223851964303851364650626359632643935342960799085783062490119554759394119169007998420073028523947150351577135526871054380555826582455514829789277486566742332298111458302091968710293759871249793126106821706855086325454742787362449532549592953893553078593962229430420634281883815719700155262727792007740276815514776774178778185152542119826241656435836213247796814178291691452199789632083043649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27e0956eda31f02b5d18dbb4dacfe19b3588eac8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recife.ftd.implystudio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f1127d0900000040300483046022100f1430cc4741020aab84588a19a493d39a1c280bc5f0ac8802133ee056ed5257d022100d84525342368eb9812fd17bd4d0d01c3537e2cfafc54102e3e8207f6637a8d5a00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1127d0c500000403004830460221008bf19f71cf722e645115c63ef9aa8307225097a7bb43fa80e4ca9a11ff9ffec7022100ea3a094633233c1a80d0b08f96d7137eacb35f00e58fcd0ada409b9308a1813f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00338fa21cd9fb96eb1c9440e2c11cb29e4821d56659fe403f0667fe2f10f22375c99e1fc4fded0fea8f368168605ebd00212f37f264a62c9d5651a340036e7d50482eb9d27af8e2086990232310d7f6e5ad08f7209ad159eb79b033f581d10a48921cd03da3e3a2f0760560147c5b604bfe2d08a787009d318278849413a8c33800460f91aba4d9f39e01cb1272481276fb4df5f2399b5fbfea773b473215c90d835770d5afb4a1c027586bee1dc1db1580ebf99b3d48350b0807255dc463054ce7fa9b224e49a191d94b35716089f64aab5b36712208160176226e9f7e0048bcded187948d904efc84ede021a48dbbd8b73a7515dad93661172e9f0b124410d9