salumidimartinafranca.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:e9:9a:31:9c:bd:5f:6e:82:71:89:88:8d:0a:46:da:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=salumidimartinafranca.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:e9:9a:31:9c:bd:5f:6e:82:71:89:88:8d:0a:46:da:3a
Serial Number (int): 295335322863444019552419921496172464101946
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:d6:e5:e0:9d:8f:90:8d:9e:dd:8c:31:1e:0a:4f:f9:28:65:89:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:de:c0:ab:44:0c:c2:fd:cc:9a:25:23:38:08:99:07:47:10:22:60
Fingerprint (sha256): be:21:2a:6f:4d:c7:96:e8:ff:ef:6c:a1:4b:11:97:17:d2:d4:92:74:6a:5c:63:42:56:84:f8:cb:3f:68:1e:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate salumidimartinafranca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for salumidimartinafranca.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

salumidimartinafranca.com

Other certificates including the domain name salumidimartinafranca.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for salumidimartinafranca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx/j0kkG2Sh8xhcxAoSrA
A5E/7JQ6BrbF1mK43+eeNc8lzAAKLGfB9Gm4GyZIZ0Ywg+bIIwfPZAqU27tJwoV3
AYvWy+KPCqJd+ckL2Ix8meoqh+7uveD/2Dywj6BJp6Ef5rtJOkh2CY4alXl82EOc
vY6VZ+EB3WeV/ybPNOaKG9qiPiNQ01PVvPtxm1BzeUCJd9ZsFGOLj/6J6Dj9dM2z
sM3eJocGPbQB1Mh0zSyKaY78DMMqmuDbkzvWeeJicHuiwQXENh2Saq7oS2TtQn8I
VLbEQvntwZbFZPr8zE53PJQBweFnnihLb1qz+yVhT6VokQ3qL7OgVJCkTsx/f8Uv
nEIwnRicpYU0T+q1/Ns1jbUqkJqB2z6eAIjkcyyKjAD0T2TGdwT4/lZcmJvNF3lW
eGWJeUfEpfLhrLQZOEaaSBQqwGVjavHSQshVgZvTXie4obqfH6dcqQMF/c5crF6X
ZoG3dLB0ZeDgfVZt9x8z9Zz7+SzqPT0XON7LdWCX2x+IxkFGlTJQHKGPcr1GAK5/
mz4pCRkVONap5I9Nt/AdkYBCCIQof/4SmZxwVUAUQuRY3IwkufUE1x01P+HDuxHx
9tmwsmmxn5hOKdv4lcLukZObK4234AGFGMPmDzZ/Rf1w3nC2HuuZ6uI2GKsHJtkk
SUBZEe3CL0ex1qGqfkLa/2ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295335322863444019552419921496172464101946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 16:42:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 16:42:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salumidimartinafranca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815816549396016113043669310848667270078736010289214479649444317038526212046367864055623287934912493666821045135202867485649180789928967494706708539381104275566631121721661127604893579615792022181300162766206960065835147100749785307146606243266903763299072129826052059684561635239795975657678526362100667692800057461729967065406921885652160073885648703961616840782946779033754111509703144142151869517532723284239814939361471065746789526762432512834034980820074112872606867442700695743954424150910754159091999235816567204939759128060511734622306051452236970154532551427197682521542538874935027305796205541768696284831223515851618119531424154098741345547373521801421335834860099149463451429183772455881472204021613211650987925642824276910418300469099132574646256325408757458421243747997704972907104262754566174218844694205369939287237567647252792522108638985809162482871421337417451770869845235442829467894781703094562961447456390212251514269838151339504566922277545925342693816355854532201009636110542962770899572894322161672298496898622503544961026904606004352755337110697950195244092413915235582714869953231625321629920039529627630249978990835517610799721718051717243075821893302150813923852605534018829205457591397437666063554379617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16d6e5e09d8f908d9edd8c311e0a4ff928658932
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salumidimartinafranca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017001d890000000040300473045022007b7cc2ece71eea594ee50fe3be5115da6ab754cd74bd03a182e7c34323dca3e022100aca23607dc63f0f0bd090e4aae7f0fc55b50c92247401943146aa55319661ba9007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017001d89006000004030046304402206ec2e65663b10455fab385daba6353beb105440aed9e289ecfddac89ce8e2aee0220630b3d4a317841a5cdd8bb0b343351c1605d7e37ff5e08a2888c57a2865905d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00368b934707069b441e5e33b1616308cb024275ad8a73eb67f4a19362331d946687b3f321e6d9e793f4f977d1be9165f78c666d853dba33f28e8cb79b75eab9d1b3af7e470e0d3c778d9f0131f859cc829305fb0fe8face7caed5091d6dfa0ce52f79b0d3eb6244edff73e6efde09b8c2c3822976a3c590b3d68c7b77e3101bd5a2f88669abb656cf4c05d4f6fcd24e06bccfb6d56e915bd447f6117b5e74cbdf99ae4186241847c0c3a2d3dfa4eb33797ec695e251e4030daecc620c941a88637cd02d64c0f59c350ddc0efcedebb6efb994a3a51d61f1449d42fa1b2262e5d61645a32b8b0fdfc3337ec3ca9b40f427175e3e9c18c733902601e8cc868017e7