startlink.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:3b:3b:9b:2b:46:08:90:ba:09:70:05:36:0f:95:f5:1e:0a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=startlink.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3b:3b:9b:2b:46:08:90:ba:09:70:05:36:0f:95:f5:1e:0a
Serial Number (int): 281492747579072727395945732745755813551626
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:c4:2d:80:a8:00:2d:ae:de:5a:83:22:eb:5d:0c:5f:2c:44:b0:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:d3:d8:d6:09:ac:4e:eb:fe:bc:70:3c:a3:96:17:41:19:5b:f5:44
Fingerprint (sha256): dc:0b:bb:19:56:a0:4a:a9:d6:0c:1c:c5:5a:f9:05:7b:ee:68:84:e7:be:af:6e:38:75:4f:1e:db:67:10:d9:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate startlink.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for startlink.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

startlink.com.br
www.startlink.com.br

Other certificates including the domain name startlink.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for startlink.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAzs7mytGCJC6CXAFNg+V9R4KMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDMxMTU4NDBaFw0yNDA3MDIxMTU4MzlaMBsxGTAXBgNVBAMT
EHN0YXJ0bGluay5jb20uYnIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDC3fFD8R9IgVXNPxJHYE50fhup6/D6BDkZeItOaxvaXDqod6iW1CriUBsELF7+
opHUWHjLoE1qCKdMr3iv6FafLxw78eM/BymnH9vYGdojOvNQd4gxFmYzlro1eGnW
BwNV6+u1fy/6yGdfBo9bhBeuE//T/5djEIBJnRis4LdEGvCedO3A23EFjLEF061J
N0xRQYteNHdl+/8CGTE0LX3BHgAY/Vt1X4YmUAI42byuSN0zBHo0dME6p+VEKZ4G
SZYyJQm2o1wyJzuXUK05hWjxsjd0vFaZm6S0HhTaKF2dcRFxufuuPJmQcKnIQZq2
mhziT3G6N78EajZRnIgp53JC3TlLQv3l4rElXos1Cbk+HdC5CkBDJ1603EBDfyJP
8QeIPeSt+2GWuhyrAjtJUcHmoJccCcDBT4+6s/0oEsmdQYp7jL4X1GRUchMsdBPe
BETL78IsM6dV4ITuR5DvupXmf5x14JdY/MTpWBwq6naamcovdsbLwSV1FvauA6+W
PTOsxiX+Cv9eJMSJu2WQtRrd4Edfu9x1ykWPjzVGUEB7bgUGQWqqR6UxD6kzIDr6
Abu7solR9CpxYXu5a5wNOQlsUD0ZD1SaF6jJDgjWUVnA34qfm0Qil3NiaoTUQbLx
T5h0WR8StjB3GRHMwnvqAqnn4KAiWHgMcjGsd91Xu5xXXwIDAQABo4ICKDCCAiQw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQjxC2AqAAtrt5agyLrXQxfLESwRDAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzAxBgNVHREEKjAoghBzdGFydGxpbmsuY29tLmJy
ghR3d3cuc3RhcnRsaW5rLmNvbS5icjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/
KIXs+GRuAAABjqQKR28AAAQDAEcwRQIhAO6doDElr44C+DKXxZU780phu9hJlF43
gLNajuCtocSRAiBDKW8Z9ZU1P9mWnzerE2yJvXJQby4Q43tDRO1yzQo7tAB2AN/h
VuuqBa+1nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJcAAABjqQKSDsAAAQDAEcwRQIh
ANBi1Z9ArNfmbxbteMZ5XJaAQ5d4YXjDmqprCsPwTD92AiAvBqVSUPPERyhmYhuZ
Z5CSKuWoAQ1OTRwKQwIuBkQ2/TANBgkqhkiG9w0BAQsFAAOCAQEAhRKbnouw6Ubj
hGH5SIa90AFA7c/+hzi/SjA/AVCCEwRZc4Aj4sGgPKYCuMw+nuFzhIVGgmuOxrJV
5+L/4FXju2S4z9yM40mvspzTf/p0FM/VUTP7hY7F5QfAhe97vNdCu1wJnCIc2RZh
9u+o7ZL6/JlrocoICp9UHhej46szlzUW9mc40kgUlHHGyNAf1t3qD3YafmPi+N3a
0SFTnOBh1YSGBDqo9JWQ8m0WPSVJPQCFI4Oc1uNRaa8MtIoppGiwijA5ay8CqXcy
yyqGgWxoaLPsnp6Oa9Nit9FMpeOzoHT7rMujcY2BEgoEWGA0IJK0O8DNZI9Wxo/b
+SE+ah0BIg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281492747579072727395945732745755813551626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 11:58:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 11:58:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'startlink.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794987848300854672219185546492583757072541770406600043204111521430340494762598958610346475390930733852052537511531456754693096416450380713535453327448072241728524264296382393462530712382355511800937800642077167560839995244978150202726187274505945066411955154295605947623839370336534163790534502290506430514743172745587331994820770744724329067993256534685365256455547716387045494242209088957448342000442122641358860661321934276482705687042824375415666614831069324778104420584256984361496844345314196486837231725552597661774477070887310932153686700191295711210307675836977303790610332181000108050524088373314008433628799935802351705390245454771843819334667506521568166312024599998452469259773428196248363221905224593235762046677520490142748547801174180872485909542046424440278078424517186168821809801076059576145859849481452958019987648203775311742048761441930075957678237272775841280576236059374467194984057737158617902615021861500533303279249548541116904943016266659711539944779544143288300797878537034795040211000639543503293824060492067698649119724898601500949407832324041297940263537772679410982351997435965383854048739010825218088412532610935373360868956235492503625643241610518898004526947134048145501926879331449432499981932383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23c42d80a8002daede5a8322eb5d0c5f2c44b044
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startlink.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.startlink.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ea40a476f0000040300473045022100ee9da03125af8e02f83297c5953bf34a61bbd849945e3780b35a8ee0ada1c491022043296f19f595353fd9969f37ab136c89bd72506f2e10e37b4344ed72cd0a3bb4007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea40a483b0000040300473045022100d062d59f40acd7e66f16ed78c6795c96804397786178c39aaa6b0ac3f04c3f7602202f06a55250f3c4472866621b996790922ae5a8010d4e4d1c0a43022e064436fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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