bestsf.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:f3:0e:5f:fc:4e:7a:af:a0:b5:15:7b:2c:bf:5e:ec:dd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bestsf.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:f3:0e:5f:fc:4e:7a:af:a0:b5:15:7b:2c:bf:5e:ec:dd
Serial Number (int): 336181773192916714932651185351342688234717
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:2f:30:6a:2d:fe:34:e4:81:06:5e:86:64:55:ff:3e:48:ce:1f:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:83:f2:aa:c3:ce:53:6b:ee:8e:af:80:64:91:3c:5d:57:cf:4c:fd
Fingerprint (sha256): e1:aa:5d:9f:15:69:0a:1c:4a:97:06:58:ce:63:1b:62:14:63:5c:04:3b:21:24:36:db:27:b7:94:c7:e5:79:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bestsf.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bestsf.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bestsf.com.br
www.bestsf.com.br

Other certificates including the domain name bestsf.com.br

(limited to 100 certificates)
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
portal.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
api.bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
www.bestsf.com.br
app.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com

Certificate

The complete raw certificate details for bestsf.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336181773192916714932651185351342688234717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-28 15:00:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-26 15:00:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bestsf.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874392551393237118810842401384479530794089668081209967056074742687243402591826632683055157098301770507291722449847907843730381543528902669851586988225472373026930683506657600726191023025891443147020109827244511341725460480285111055990898325480456253574905531228229848758512174965271302479114980735538069045687688042864421742151847301671852408204720592797970454960412386403525980873990222303538672787737760380683658655755260556007491090872274881587184902379251887084357275506040541487565533413302298964975628377389422017900976853599548147524415162955170746573134090905269603682246451297223647068418570053366201091876466920067559630584675903830995549815372237811236355825548894070995151580011472287447217206585082050165946713752854303861730657728829732300335577186053669267242550413576947809804679808729909606131133671354421011531707833742888173671783294150878192503201969542293293801665094606855335363427133812417477672357074194658361434549130089633006012796151985596864612289761370111767822552111951718936582158108859619029147361702608537394438172778728487835995792540250659355971780875088101846486616326240663327906789863439536078457222248444635216515584985906703286499529664304959885957332570779332330808585586055716821649963523587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							022f306a2dfe34e481065e866455ff3e48ce1f5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsf.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163a77a6cfc000004030048304602210081812cfde79a3ec18cf1e91fad6eaaca4710e36cfc086f6e59a6e95def5b27de0221008b9dcdbda817fda1e901c9586596f3e2bc03e169f3d3ea9389b0f639e49bf863007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163a77a6d26000004030046304402200cfd0c0c2262335b0ca5fce5fc4912165530205d8b7c87f530416af1503653ce02200d4fa23982270f21d7b6c9b6db110dad7dbb6104ccf5032db3ac80665ba8699f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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