marketing.abreuadvogados.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8d:b8:56:3e:dd:49:bd:97:61:9e:cc:2f:73:66:f3:23:a1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marketing.abreuadvogados.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8d:b8:56:3e:dd:49:bd:97:61:9e:cc:2f:73:66:f3:23:a1
Serial Number (int): 396673983226689209400252737689011774235553
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:d6:93:1f:42:3e:93:8d:9e:c3:cf:c6:7a:31:5a:11:d8:8b:9c:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:a4:18:a6:2d:8e:f1:e2:38:9e:d2:ab:ba:bd:ad:5c:30:81:bc:a9
Fingerprint (sha256): bb:90:bf:28:4e:47:db:70:25:ec:a5:37:97:cf:16:38:e4:a6:a5:9d:3d:6a:a0:20:fd:54:88:ce:b1:6d:81:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate marketing.abreuadvogados.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marketing.abreuadvogados.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marketing.abreuadvogados.com

Other certificates including the domain name abreuadvogados.com

(limited to 100 certificates)
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
webmail2010.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
webmail2010.abreuadvogados.com
remoto.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
marketing.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
webmail2010.abreuadvogados.com
mkt.valorcar.pt

Certificate

The complete raw certificate details for marketing.abreuadvogados.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgISBI24Vj7dSb2XYZ7ML3Nm8yOhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTcxMDU5MjNaFw0x
OTA0MTcxMDU5MjNaMCcxJTAjBgNVBAMTHG1hcmtldGluZy5hYnJldWFkdm9nYWRv
cy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC237Z7bvVQT38V
37nOyZnwpM4EM0Uw1Kn3urYySEMCTjyXk9QlG8dn5lYUatuQe0C1Fvy1AsmjqxvG
rbYmg4LF+QzqqcYk6VSAUAUFcKE9STcnZRSHv4lLP0L+qgl4MJHkFuymvKIvjhpa
omyEwvhE+rZdTJms4btm92gf1fPmDHWLmpayQVfbj59uxlNcTFZW1yYJdKOL5bG2
qu0+L3H9IgPkJHyLToM1XhYG2rxhdsNeoKgKrbtsV8Izf3a91iRzTGIHu3kh8wKL
UDgskbCQJu2PcH6LJUA+ORIykzktedwYV47vpKSrg11zE0DQqhe7eOwh1M43oOb0
muGoyoI9/rwRroNPdXTV390k8EAsAdLjAAmKBHcNdUldGiD6o0OpEZk8xn8xchc7
uGjvdQHKRrm+x+wXdxwcRrjzVgyX5jeOJqlxjBmVKWG6D1RFStmp+Rg+hToXy6I/
1AKGuWNzLoStTFpXcoYFPix8NhJB2Yv8zelRNphFvKoxfhTgFVdTpFEfA5vBkqyk
WhwIngHfN8xhJbf8gPT83eHBTTrIIspI7eRbm7sjUrX4iMhlxhxgES6zOCP6jQtW
LM7wea/24YziebP2aXG86gfauFh5RerLMBFg/objG+5cX5nneB8+fsxUrFv2fSSf
/dLEC7b2I9bUeb4msq1nq2/eEfyDhQIDAQABo4ICcjCCAm4wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBTo1pMfQj6TjZ7Dz8Z6MVoR2Iuc9zAfBgNVHSMEGDAWgBSoSmpj
BH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0
dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0
dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CHG1h
cmtldGluZy5hYnJldWFkdm9nYWRvcy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0ftqDMa0zEJEhnM4l
T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWhbrhzvAAAEAwBIMEYCIQDr6ZvcufQNf+Ti
GltjPC2GdwT48RsBixh6FWAoRp3ZJgIhAIM4fiv9UEmqTBF/iGKim6ffoAOnqkAL
8/NWOYF6lq04AHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFo
W64c4wAABAMARzBFAiEAgNYpAp3OQYM9Wsk4RzgdB6uNGT2a03duVtBby6Dv8C4C
IFX5zyAWmqF6HCcUa6FwPeSYvon8e3Mj6x1LyiIugpErMA0GCSqGSIb3DQEBCwUA
A4IBAQBOjYI6upn0m1mL9QD7VT71kroXx2kCqM34BcgxSr52TheTCPojZsyhe0/g
WN++gnkr5VRYyzkOjGKSIvKrU1KSeZji78Zl5hYeFBqggZjDm/exNQvwi1rzhxRm
ofg6RDxQvXR/OitNvrmG/bpaXyZDzIzVGhYaa4naLCJU5dfJMM7+Ve0Q7JzNknif
/70s3jWxfCBYu/H+/S+u6MYl4YjnFDH2G2dKY4czwdX3AipPbUmGH/pzyPVkjdBK
HLf5xBj8Irb2hyLX6RER0NUpdHwkEEdig3xKQH/MkU2gdshvGZoDDuuLOmrz+KTC
+zSXdZiV3+vTG2hKIi0XKpbQ8rqL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396673983226689209400252737689011774235553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 10:59:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 10:59:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marketing.abreuadvogados.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746060332422268662584237226089244336915493159397826079360525105460302661467254854617083526016771338032746875103427529473937824153487086714375150191968406197898064304808694503176160328810054055815035947084835612892141838171553958535127497616011903235420917836176874998511702383382421592317904674344479573688901863947378387235123250231847599825839489451918683217254139676734339055745268695564325430418069585850862117309754977613854659248728178481021104156200884592683326998515014842630392386968186910757643958322953697928413390689000026634418249560916613847060046888530493029709633697369039458121312171248093876499162834703538100933764929155629778938260160685327195633596025819686539413457234639010419691417208955970489222456682789081940972300019338364148603755743376602915842647561076061498715945922016739455246822867236169727694571921350921836868707971287262675391386848228894153814636975095349841857329070573072134466217040096322380588677937701200669578710940295317203393920995434069746881903721989298436780396071019598580873138291211376375309160044790027163465388336638132246752237749426335961545106084711301815530249828791665233456672074104965075112995542311395970615434582519034341485897845788228607430716410953258699880329413509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8d6931f423e938d9ec3cfc67a315a11d88b9cf7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.abreuadvogados.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001685bae1cef0000040300483046022100ebe99bdcb9f40d7fe4e21a5b633c2d867704f8f11b018b187a156028469dd92602210083387e2bfd5049aa4c117f8862a29ba7dfa003a7aa400bf3f35639817a96ad3800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001685bae1ce3000004030047304502210080d629029dce41833d5ac93847381d07ab8d193d9ad3776e56d05bcba0eff02e022055f9cf20169aa17a1c27146ba1703de498be89fc7b7323eb1d4bca222e82912b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e8d823aba99f49b598bf500fb553ef592ba17c76902a8cdf805c8314abe764e179308fa2366cca17b4fe058dfbe82792be55458cb390e8c629222f2ab5352927998e2efc665e6161e141aa08198c39bf7b1350bf08b5af3871466a1f83a443c50bd747f3a2b4dbeb986fdba5a5f2643cc8cd51a161a6b89da2c2254e5d7c930cefe55ed10ec9ccd92789fffbd2cde35b17c2058bbf1fefd2faee8c625e188e71431f61b674a638733c1d5f7022a4f6d49861ffa73c8f5648dd04a1cb7f9c418fc22b6f68722d7e91111d0d529747c24104762837c4a407fcc914da076c86f199a030eeb8b3a6af3f8a4c2fb3497759895dfebd31b684a222d172a96d0f2ba8b