universosub.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:0f:ea:3c:fe:68:35:96:84:3e:8a:31:1a:c9:76:b8:56 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=universosub.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:0f:ea:3c:fe:68:35:96:84:3e:8a:31:1a:c9:76:b8:56
Serial Number (int): 302532178847216745629306335013520759240790
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:65:f1:9a:a6:e9:69:ff:af:f9:51:53:b4:6a:89:f2:b3:96:22:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:df:db:ef:4b:bd:e1:d0:6d:8c:9a:c6:cd:55:c9:20:24:e4:10:2c
Fingerprint (sha256): d5:29:fa:17:43:9b:95:8c:5b:96:ac:2f:95:02:46:91:3d:2e:53:54:c5:5d:90:d5:21:25:c3:6a:f1:57:02:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate universosub.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for universosub.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

universosub.com.br
www.universosub.com.br

Other certificates including the domain name universosub.com.br

(limited to 100 certificates)
static2.universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br
static2.universosub.com.br
static2.universosub.com.br
universosub.com.br
universosub.com.br
universosub.com.br
universosub.com.br
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
www.universosub.com.br
universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
static3.universosub.com.br
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
static3.universosub.com.br
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
static.universosub.com.br
static2.universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
static.universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
static.universosub.com.br
universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
www.universosub.com.br
static3.universosub.com.br
universosub.com.br
universosub.com.br
static.universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br
universosub.com.br
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
universosub.com.br
universosub.com.br
sni26271.cloudflaressl.com
static3.universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br
sni26271.cloudflaressl.com
sni26271.cloudflaressl.com
universosub.com.br

Certificate

The complete raw certificate details for universosub.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302532178847216745629306335013520759240790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-06 07:04:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 07:04:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'universosub.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685785373624084794769145733860589581270245981564831974323031758555827144287646124452462983552300999569330436857949188520715556881573541749127488733338810577190032128259296742872407387855510349365026136330631435886306768870501340016788691674660013706037230117719295109763321549128587455673697066371759807556032152981374580597581886489362769158430582623717755299029698739227120540752427164535169353444669720056160738891444818712980409359429084422890424760344012018754758874796740820735569836261147193856106061731393184783864289494264742831615360938083322963614571368292831965187594786481288331581075592580680348058683530572376645080584086991243211485059591016705156155879767208885377030539154545334752402353657553411783790555616395786963084714059077156088239752004528972759126587128274282865062572354286781382224706437351902582087322942187046655683674451129426550274622601120860513157689839778016216130465397938473528687233468837125902147170636602675356776091641904583346316597667986709713060578098980568639496444706658325994822559986128264050829011444149549817238390249041354061415814735193391204143280969404254829963785699298549171750690649528990643026101400212854690052184026723087449996167263709264881673243040030616132379101371331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b665f19aa6e969ffaff95153b46a89f2b39622e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universosub.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universosub.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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