loja.novatronica.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f7:59:af:e5:00:96:35:35:99:3d:e7:4d:7c:2a:84:1c:2b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=loja.novatronica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:59:af:e5:00:96:35:35:99:3d:e7:4d:7c:2a:84:1c:2b
Serial Number (int): 345505817013045927836735062682563195968555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:cd:bf:4c:5d:b4:cb:e4:66:4d:26:b7:db:21:8d:d7:10:b9:ca:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:fa:75:92:83:2a:f7:bc:2e:ed:4f:66:e1:62:55:cc:7e:4c:27:cd
Fingerprint (sha256): bc:ba:70:a4:2b:d5:5d:e8:b3:c7:3f:d8:56:29:58:d7:a5:13:b3:a0:a8:88:6c:80:f5:aa:b6:f0:65:db:4b:eb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate loja.novatronica.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loja.novatronica.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loja.novatronica.com
novatronica.com
www.novatronica.com

Other certificates including the domain name novatronica.com

(limited to 100 certificates)
novatronica.com
www.novatronica.com
mkt.multienergy.com.br
novatronica.com
tcremote.novatronica.com
mkt.pajunet.com.br
novatronica.com
tcremote.novatronica.com
mkt.agrobrasilia.com.br
novatronica.com
loja.novatronica.com
novatronica.com
www.novatronica.com
novatronica.com
mkt.dermadoctor.com.br
egoi.novatronica.com
www.novatronica.com
novatronica.com
novatronica.com
www.novatronica.com
roadmilestones.nvapps.novatronica.com
mkt.agrobrasilia.com.br
mkt.rfmsomnii.com
www.novatronica.com
mkt.batistacarioca.com.br
mkt.nutriestilo.com.br
novatronica.com
www.novatronica.com
mkt.algarveraceresort.com
mkt.dohlerhomes.pt
www.novatronica.com
www.novatronica.com
mkt.kingwine.com.br
novatronica.com
mkt.pedemeia.pt
novatronica.com
demo.surveys.novatronica.com
www.novatronica.com
mkt.estudodoaudio.com.br
novatronica.com
egoi.novatronica.com
novatronica.com
mkt.estudodoaudio.com.br
novatronica.com
mkt.pedemeia.pt
novatronica.com
mkt.castelomagico.pt
mkt.dohlerhomes.pt
novatronica.com
mkt.castelomagico.pt
www.novatronica.com
www.novatronica.com
loja.novatronica.com
loja.novatronica.com
mkt.kingwine.com.br
www.novatronica.com
mkt.rfmsomnii.com
novatronica.com
novatronica.com
www.novatronica.com
mkt.batistacarioca.com.br
tcremote.novatronica.com
mkt.pajunet.com.br
mkt.dermadoctor.com.br
novatronica.com
mkt.multienergy.com.br
egoi.agavetadodinheiro.com.br
nc.novatronica.com
loja.novatronica.com
www.novatronica.com
egoi.agavetadodinheiro.com.br
mkt.algarveraceresort.com
loja.novatronica.com
egoi.agavetadodinheiro.com.br
novatronica.com
www.novatronica.com
www.novatronica.com
egoi.agavetadodinheiro.com.br
www.novatronica.com

Certificate

The complete raw certificate details for loja.novatronica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345505817013045927836735062682563195968555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 06:10:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 06:10:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loja.novatronica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678387697170110401993418237715134402510630841634952714741879344737633493823648319130699201757180273982274623067482875653106920310268044371678991163347197358358328214431879355835611425116109039011419524800091280720320902981880322777604372288716246614007989942540030405042543552328111281469909552366163361835694582883631124397220838044010879682074132678573920771793381179923629913864428488628313834170828088073054596673673788241092677648888361918543513301124179624210963943988448840695757202080743549046774383184502239569638580788722218850061424120062896101890925289687095508024033369534206612388990798489799397526450535956805747680004592862214350739949020658984459149899707219942494708380884226080855131662464627511207681984195578140920283567029140634772923902638132582140516793600701427067697323394464886301558089004408387617497131679941790946557254194207624055223413321008051403892301122394037703628109938030006888752774380666444802184260982321297531208703152764810635764413743077545161145851933471498498562140374126205706266643631211749281551592815689740336917253523718805243869793481965210850364682375548851064730995031967372707036313690056459579937125583939091486164851004738516196782454149089491949944650135123932323980054254451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0acdbf4c5db4cbe4664d26b7db218dd710b9ca43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novatronica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afeac4aeb000004030046304402206358dfd3ee990287c47a47e8bf6f1433b7e8c0974c973e442c7434a4266d16d10220330b6f2abbd2ab16e7172b8f2c4d6c19c6a7940f3df4c085f325c81c93533cac007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afeac4b1b0000040300483046022100e6a4e50619f9f8a5f7a412986394fe667bc6ffa7d4a8a8ae81eb2e09ea070501022100eb53ccbb3fa775d0f62385cdc7ed4facdafb9e65c7ffeef158c7e795e754fc22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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