nelsen.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:55:8f:76:65:5a:be:7c:81:9c:d3:8c:91:ae:42:8a:9a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nelsen.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:55:8f:76:65:5a:be:7c:81:9c:d3:8c:91:ae:42:8a:9a
Serial Number (int): 316576330515919720930077918722887222725274
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:1d:e5:81:55:05:72:a9:d4:7d:db:20:b7:4f:30:7d:5c:70:0a:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:55:cd:1a:0c:af:64:4d:c2:fb:f9:0b:d5:c1:d3:70:5c:90:f6:e4
Fingerprint (sha256): dd:3c:b7:b5:f8:8a:ae:60:82:07:86:5f:6a:da:d4:10:65:cf:db:1f:9e:e1:29:19:2f:d7:1e:02:33:fd:a0:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nelsen.com.br

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nelsen.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img.nelsen.com.br
mail.nelsen.com.br
nelsen.com.br
www.nelsen.com.br

Other certificates including the domain name nelsen.com.br

(limited to 100 certificates)
img.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
server.nelsen.com.br
e.nelsen.com.br
server.nelsen.com.br
nelsen.com.br
sni162588.cloudflaressl.com
img.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
img.nelsen.com.br
nelsen.com.br
www.nelsen.com.br
nelsen.com.br
sni162588.cloudflaressl.com
www.nelsen.com.br
sni162588.cloudflaressl.com
mail.nelsen.com.br
sni162588.cloudflaressl.com
www.nelsen.com.br
img.nelsen.com.br
sni162588.cloudflaressl.com
nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
railsbase.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni.cloudflaressl.com
sni162588.cloudflaressl.com
www.nelsen.com.br
img.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
www.nelsen.com.br
sni162588.cloudflaressl.com
server.nelsen.com.br
nelsen.com.br
img.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
www.nelsen.com.br
nelsen.com.br
www.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
img.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
nelsen.com.br
www.nelsen.com.br
sni.cloudflaressl.com
nelsen.com.br
img.voguecuritiba.com.br
nelsen.com.br
nelsen.com.br
server.nelsen.com.br
www.nelsen.com.br
email.nelsen.com.br
sni162588.cloudflaressl.com
nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
plesk.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com
server.nelsen.com.br
e.nelsen.com.br
e.nelsen.com.br
img.nelsen.com.br
sni162588.cloudflaressl.com
sni162588.cloudflaressl.com

Certificate

The complete raw certificate details for nelsen.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2baE3LYkS11nE2St6hJ
6ym7vy3lcrbavnCOI04zv1h0LgmddxhttvNiWWvsv30N4OHASgxwRzy6vm5iQMr6
p7wOIKEjg3Ru8p0EmfJTBqrNuEhkhsj4Ikx8NhBbuPEDo1WWU/2cg0+nVgBC34GL
YY7TnbzfnyzfHNexo/fbiyGgGpEHtNDOGKvTPLMmrXh4+7wXTB31qHJeyhYkF3Ai
3mrtu4VnIKunlcfzYkHJ/0ZCYReydvpuhTkez3DmEDoU37vEgUc7eynxv/a4bWIt
9edsJCAqYC7wYn042p9uVg18b0kmi1EV1tfY53R5IdzkL85WR/xWSUMvTunup8AH
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316576330515919720930077918722887222725274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 16:47:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 16:47:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nelsen.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25172140830338970785123237286392715062197935950805652469002496639892440979763039002463530987944107535912634891833857570796340137803834768988197088424828834612568048257063318178956578522214888297037380842039408912252126593533801380632208113604433951191644921884107237001928556488860989803207657042320587950128799231414583514784101503273171530952043540213175868706277462955722226566818818048986436794147283606017839880498116974932648076531258259857823551942222931300913043999304704239722748113647995129914187076607516590050366739920367482275546055523071118098190369987550060588427548409559777453011193602339300750395199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c71de581550572a9d47ddb20b74f307d5c700a5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.nelsen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nelsen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsen.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016470b52c9d000004030047304502203a3038cdbb21b5c456db6d03f1f74b5dc92c6b213b75d78c3fb838d83cb4d83e022100ccf1ce06c078a5dd11b8e0e33d3f4db98c360cac2697abf43b49ec0357774ded0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016470b53000000004030047304502206a40ff9469ded0c8489b06196e9157583c94cc35c7616aa66be328ea8239678c022100d7e8e3558bab8a28bba10aad2019454a6296cba3936bd4fbc572f566f70d6f45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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