bestsf.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:db:f3:0e:5f:fc:4e:7a:af:a0:b5:15:7b:2c:bf:5e:ec:dd was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bestsf.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:db:f3:0e:5f:fc:4e:7a:af:a0:b5:15:7b:2c:bf:5e:ec:ddSerial Number (int): 336181773192916714932651185351342688234717
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 02:2f:30:6a:2d:fe:34:e4:81:06:5e:86:64:55:ff:3e:48:ce:1f:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 78:83:f2:aa:c3:ce:53:6b:ee:8e:af:80:64:91:3c:5d:57:cf:4c:fd
Fingerprint (sha256): e1:aa:5d:9f:15:69:0a:1c:4a:97:06:58:ce:63:1b:62:14:63:5c:04:3b:21:24:36:db:27:b7:94:c7:e5:79:0e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bestsf.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bestsf.com.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bestsf.com.br
www.bestsf.com.br
www.bestsf.com.br
Other certificates including the domain name bestsf.com.br
(limited to 100 certificates)
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
portal.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
api.bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
www.bestsf.com.br
app.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
portal.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
api.bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
www.bestsf.com.br
app.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
Certificate
The complete raw certificate details for bestsf.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgISA9vzDl/8TnqvoLUVeyy/XuzdMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MjgxNTAwMDhaFw0x ODA4MjYxNTAwMDhaMBgxFjAUBgNVBAMTDWJlc3RzZi5jb20uYnIwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDWVKIMkx2PkM0prjKoXBKf6m5W0nhPF04f s4yiDDAKju3R2M0hqbKXmbjZwwBNdeRzjDsMSXBOGDf0M/5otawyg/Cb8Zgl6vxg 6WgARDmDwsJJdzBZ8pJ40ULN7fA8ER6u1NZcN+NGjQgHmMIxuIE5ePLy04Jv764i 5ytoRu6hK+kAJ/UI3/7PClwUj/alEgnDe5r5lx77v5qtedEVEKDYYDg/XwN8ZoH5 Imcuc3mhbTZhjwWnpnbIKPilIIe5K82vJceke/5YnJZpRiaEXPJGLIeDWfYzDWqc i7Mc6hX/ohdam7Flj9uwy+mDdRVCh+qj3ISxAU5e0KLKoUThmlyTIW0DFJtpsxac iyQivQKsXaOQOv0HvNMk48dH5XdD7fKATDJOFV9j0YDYiuFH2egg1vIF6J/QXRbz gPg3oQGDMX+TG8AfywUv6ekgSp919Qu2dXsRUhPDv/TiY3CKohyWX+UK9TRZfUQc Ya9GB5GsviAgKggXNCIYNrgSIjDX6hjnMsNGUgxoaRmN5+I5Oosc/KymMVgcSUDJ OUuFYk8sNhL1fV4DdGLTTkap6JNmyt8boK9Oxiuse9RHaM6sc6YW8iXGzY3P3xab 39MwujZ+4qs1+kcNjrAjAPEYo/RKWbbmR+6ZkiJkv6w2LzknZUUwZlIpjDuYUdrN levmXx6eAwIDAQABo4IDKDCCAyQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQCLzBq Lf405IEGXoZkVf8+SM4fXTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWJlc3RzZi5jb20uYnKCEXd3 dy5iZXN0c2YuY29tLmJyMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdwDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWOn emz8AAAEAwBIMEYCIQCBgSz955o+wYzx6R+tbqrKRxDjbPwIb25Zpuld71sn3gIh AIudzb2oF/2h6QHJWGWW8+K8A+Fp89Pqk4mw9jnkm/hjAHUAKTxRllTIOWW6qlD8 WAfUt2+/WHopctykwwz05UVH9HgAAAFjp3ptJgAABAMARjBEAiAM/QwMImIzWwyl /OX8SRIWVTAgXYt8h/UwQWrxUDZTzgIgDU+iOYInDyHXtsm22xENrX27YQTM9QMt s6yAZluoaZ8wDQYJKoZIhvcNAQELBQADggEBAABK+VcnIdzl2J657Eeu7HyIat46 KTfucQOlaWoPzqC2bQkEarCe9cWO7mOgxPPDaSFOWj4wsqPd0c0ouHTqP7CA9kQo GR96ax+FmtEHnHE76/md4mF4OdentUODekzdn25BVOUhXG36kQFyCiZDlC0fD/xP t2DL9PWiz+tyU0dx/T5SDoEvp3xofvEde5zwYOCKd3g6KPm8+qg14PTh7D3YIJH1 iSA0LrAumG4z/l0R77Eji2AEhQ8G7oCLl+01Zu7JfDcTGIVeCHLQx1wxy1Jjv/c1 F2FwbRwM/jli50EQe9Uw9ijMwhcYe1sa/Ken3IdIn4QgkqZlaNFQtwpqX4E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1lSiDJMdj5DNKa4yqFwS n+puVtJ4TxdOH7OMogwwCo7t0djNIamyl5m42cMATXXkc4w7DElwThg39DP+aLWs MoPwm/GYJer8YOloAEQ5g8LCSXcwWfKSeNFCze3wPBEertTWXDfjRo0IB5jCMbiB OXjy8tOCb++uIucraEbuoSvpACf1CN/+zwpcFI/2pRIJw3ua+Zce+7+arXnRFRCg 2GA4P18DfGaB+SJnLnN5oW02YY8Fp6Z2yCj4pSCHuSvNryXHpHv+WJyWaUYmhFzy RiyHg1n2Mw1qnIuzHOoV/6IXWpuxZY/bsMvpg3UVQofqo9yEsQFOXtCiyqFE4Zpc kyFtAxSbabMWnIskIr0CrF2jkDr9B7zTJOPHR+V3Q+3ygEwyThVfY9GA2IrhR9no INbyBeif0F0W84D4N6EBgzF/kxvAH8sFL+npIEqfdfULtnV7EVITw7/04mNwiqIc ll/lCvU0WX1EHGGvRgeRrL4gICoIFzQiGDa4EiIw1+oY5zLDRlIMaGkZjefiOTqL HPyspjFYHElAyTlLhWJPLDYS9X1eA3Ri005GqeiTZsrfG6CvTsYrrHvUR2jOrHOm FvIlxs2Nz98Wm9/TMLo2fuKrNfpHDY6wIwDxGKP0Slm25kfumZIiZL+sNi85J2VF MGZSKYw7mFHazZXr5l8engMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336181773192916714932651185351342688234717 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-28 15:00:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-26 15:00:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bestsf.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874392551393237118810842401384479530794089668081209967056074742687243402591826632683055157098301770507291722449847907843730381543528902669851586988225472373026930683506657600726191023025891443147020109827244511341725460480285111055990898325480456253574905531228229848758512174965271302479114980735538069045687688042864421742151847301671852408204720592797970454960412386403525980873990222303538672787737760380683658655755260556007491090872274881587184902379251887084357275506040541487565533413302298964975628377389422017900976853599548147524415162955170746573134090905269603682246451297223647068418570053366201091876466920067559630584675903830995549815372237811236355825548894070995151580011472287447217206585082050165946713752854303861730657728829732300335577186053669267242550413576947809804679808729909606131133671354421011531707833742888173671783294150878192503201969542293293801665094606855335363427133812417477672357074194658361434549130089633006012796151985596864612289761370111767822552111951718936582158108859619029147361702608537394438172778728487835995792540250659355971780875088101846486616326240663327906789863439536078457222248444635216515584985906703286499529664304959885957332570779332330808585586055716821649963523587 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 022f306a2dfe34e481065e866455ff3e48ce1f5d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsf.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsf.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163a77a6cfc000004030048304602210081812cfde79a3ec18cf1e91fad6eaaca4710e36cfc086f6e59a6e95def5b27de0221008b9dcdbda817fda1e901c9586596f3e2bc03e169f3d3ea9389b0f639e49bf863007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163a77a6d26000004030046304402200cfd0c0c2262335b0ca5fce5fc4912165530205d8b7c87f530416af1503653ce02200d4fa23982270f21d7b6c9b6db110dad7dbb6104ccf5032db3ac80665ba8699f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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