dimarol.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:a4:9c:89:43:c2:b6:c2:67:0a:da:2f:39:19:23:69:1e:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dimarol.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:9c:89:43:c2:b6:c2:67:0a:da:2f:39:19:23:69:1e:cd
Serial Number (int): 317351238256674982357852863667904832937677
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:0a:3f:aa:df:da:22:1d:7c:fa:33:43:3c:02:78:e1:d6:61:96:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:54:3b:5d:93:af:1d:9d:3c:0e:0b:30:93:50:6d:b5:84:12:53:95
Fingerprint (sha256): c2:75:38:a1:8c:d7:7b:2d:b3:6d:ac:d8:84:b2:76:72:11:24:fd:ee:63:6e:f3:0f:c3:4a:9e:4c:00:11:e1:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dimarol.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dimarol.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dimarol.com.br

Other certificates including the domain name dimarol.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for dimarol.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34+zGKP0jvgzCM2vXy1L
VnyAztvcVvcl27+W+N2i0NNyqfIFp5zmE2+NWH9Hm1rI0rS8r9ugvPOcGUyy0RDx
ekc6oTfpDK4up1W0i8cwIHk89/6kW/m2ZM33nzRwiXlk6lE+Eb9bxdIsSoS3jlHf
PBIVF8hva9rRh741hjMF51Be9vnQBN3OJH2H7KHmKV/z/LfUdSQDVJfMHcu9Jhx/
SIlDVpKCIMjUUHzhXf7lnj8JEpRtOaFSvKpWwg5CLW1K5RhGCnUY67RBEpl0qTYh
XXyeEvoTJ6RfPf7gGAW7S+bB4nnDMeXoTcqLj5tqotyiVXGVpXXJzeL9vlPqlt4P
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317351238256674982357852863667904832937677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 23:41:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 23:41:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dimarol.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28222002918616457287594811095530803275429488292394157894398353729035577632054943482999725135141746083388342707967764549901708223602851192397053260916075425919837540438767743044599671856860252904975335523783823734365537284146561536723530534100689813582090933063359371843228801491788854040319482373288185088337172455403785501840828087640963402930116720518681483749464667708069002289491446245499679674862883282657139805938840951112440177016250489131786650245814662775548584359899787233053315623159527723751364802548881238431650045742054989011714932455900032596963042465178580959570727195422997098958789436740732756823907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							260a3faadfda221d7cfa33433c0278e1d661965e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimarol.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189c324d63d0000040300463044022008e955a025d0652cd79f35a5a55f70a14a76622749611a1c80ebbb0d1ee602c702202071de406bf7bee6c85dde11a7df1ce801c3275b73e8db4ba1b09eb5a28efd23007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189c324d603000004030047304502205080c062c0ef3c07f452168f2173abb8609fcb362cd153e53c2486c9e4f891e7022100b8a9c190f0c74e80e9be0866a89b9e16336d2b164a29ed6c28b7b9e4535e21db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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