fwsol.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8f:0e:86:7e:7b:cf:a7:7c:9b:5a:32:2f:7e:56:5c:cb:e8 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fwsol.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:0e:86:7e:7b:cf:a7:7c:9b:5a:32:2f:7e:56:5c:cb:e8
Serial Number (int): 397128829721848159276330112788576213978088
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c7:a1:e3:e0:99:76:54:d0:3a:c8:c8:ac:55:e6:81:22:0d:12:3a:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:e2:7f:4a:83:90:78:93:19:3d:8b:1f:38:bb:88:fb:ee:48:37:27
Fingerprint (sha256): c9:b4:f4:b0:81:74:0e:57:48:ba:7f:2b:93:0f:6c:a1:e1:9f:a9:97:e2:79:43:32:44:9e:4d:c9:b4:87:3e:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fwsol.com.br

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fwsol.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.fwsol.com.br
deengenharia.com.br
deengenharia.fwsol.com.br
fwsol.com.br
mail.deengenharia.com.br
mail.fwsol.com.br
webdisk.deengenharia.com.br
webdisk.fwsol.com.br
webmail.fwsol.com.br
www.deengenharia.com.br
www.deengenharia.fwsol.com.br
www.fwsol.com.br

Other certificates including the domain name fwsol.com.br

(limited to 100 certificates)
deengenharia.com.br
deengenharia.com.br
deengenharia.com.br
engenharialuz.com.br
engenharialuz.com.br
deengenharia.com.br
deengenharia.com.br
fwsol.com.br
topdahora.fwsol.com.br
fwsol.com.br
deengenharia.com.br
deengenharia.com.br
fwsol.com.br
domomento.com.br
fwsol.com.br
fwsol.com.br
engenharialuz.com.br
fwsol.com.br
deengenharia.com.br
fwsol.com.br
fwsol.com.br
domomento.com.br
engenharialuz.com.br
deengenharia.com.br
fwsol.com.br
engenharialuz.com.br
wellingtondourado.fwsol.com.br
fwsol.com.br
engenharialuz.com.br
fwsol.com.br
fwsol.com.br
engenharialuz.com.br
deengenharia.com.br
fwsol.com.br
fwsol.com.br
deengenharia.com.br
fwsol.com.br
fwsol.com.br
deengenharia.com.br
deengenharia.com.br
fwsol.com.br
fwsol.com.br
deengenharia.com.br
topdahora.com.br
deengenharia.com.br
fwsol.com.br
deengenharia.fwsol.com.br
wellingtondourado.com.br
deengenharia.com.br
fwsol.com.br

Certificate

The complete raw certificate details for fwsol.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVgMgFXkYqKKMLRLDkiI
zfCIxem9FSOqdbd/5kD7HR5/kEfUKbCtTv9jPDVd3Luqcnh+Mp+5nXvjuafSrccp
HYgoVDh/Y1J8+pbDr2DRL8QM8iHyqrv5Ou2f9YJ5QOvHPmyCvM10Ziib9/jp/tQN
w7gBbZD4PstbyJAYuYpA2iKg7nxDNwF3l6pdDVN5rX2vl/GsJ3bifG0OLsjG/key
8KDdfg2iBWpLUv0MT4hfEZwARpjBN4VqD0xfbwCIKEgAi3kLyyoHhahfW67qnZyc
+vCrHgtgqfixxjl7lI9KQfd0dmDfO+3d0epyVUyoDdk6OjvDj1XZ9B+IhXj4Rawp
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397128829721848159276330112788576213978088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-22 05:14:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-22 05:14:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fwsol.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22387598476894851360250965511116420865371058117375840260817893477478595303302141275888684280454830065533874119097770183924938417203748266700605686127670447205218858648200706200894552350020744256507308971130202748469284573646755079698304510130421658367930434333204584306722778251654616264209858422217245150085555270352161147579530318994927552210976920652007026692608402485451959326808068151719355110407289820037994861706372676076781261864359050972494588539645824894815734503812463271476291466231317429769411802442608154682446432959699527546942510315486745076464305679967213763613128806592234018803333180418368387950859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7a1e3e0997654d03ac8c8ac55e681220d123aa8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deengenharia.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.deengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.deengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deengenharia.fwsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fwsol.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0025f656df1b62e1b0bd1148db6eaf775a57339995d9663ca39aaddbd71a9076babae58da793c153eeb029f47bd44b690e6e4bb55d09b733c0a34353bc4a11e2b409d83150580737e4196f87ce4d22143d171a781e359d5cee46894909026a97ce8eae7acc9213ae4ad0c9816ae22c319679966c192cfb008f72dd7211d18c621a99a3397480e969b9a1383bbe4fdc86963b2c3a7bd2e9e4783215ba026c0d11f17785e0bd741a1a2f6147f5941814c8d82cedd32cbf478b2708bb443c7d1574220c9956803bbb0ea91df1dfe33a73990c55899312c2115a9ca7cf94b5e9a05a1482d5614903360ab2f66f15fe6074de9e5623c892d3607ffff822e2573c47542a