laurodefreitas.ba.gov.br

Issued by R3

About this certificate

This digital certificate with serial number 03:b9:5c:fc:e1:4d:ac:43:9e:85:37:6a:9d:b1:b6:17:a6:0e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=laurodefreitas.ba.gov.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b9:5c:fc:e1:4d:ac:43:9e:85:37:6a:9d:b1:b6:17:a6:0e
Serial Number (int): 324412697679770961221000240164519173137934
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:7c:a1:2f:1f:8e:a3:24:3f:66:0b:cd:b3:dc:65:9f:89:47:fb:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:22:f6:f8:93:4c:25:a9:20:2e:fb:06:33:f5:f0:3c:0f:d9:4a:8a
Fingerprint (sha256): e1:e8:5e:89:9c:28:a0:64:d1:84:f0:c8:5c:33:bc:cf:2b:6b:7d:da:85:3f:f6:1b:b0:6f:8c:68:48:40:b5:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate laurodefreitas.ba.gov.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for laurodefreitas.ba.gov.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

laurodefreitas.ba.gov.br
www.laurodefreitas.ba.gov.br

Other certificates including the domain name laurodefreitas.ba.gov.br

(limited to 100 certificates)
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
api.cimu.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
sefaz.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
secult.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
api.cimu.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
solos.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
sedur.laurodefreitas.ba.gov.br
pmlf.navegarte.org
api.cimu.laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br
laurodefreitas.ba.gov.br

Certificate

The complete raw certificate details for laurodefreitas.ba.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXqxTbh7HkKVP252UuoE
6bfVOWNOyCfqX3WOfujWoOM/4Q4HAa4CJ0Q4cai8kmOi4pE7TfE5D6m/36YQHXge
VARyuMUvIEf8nXeTnDuMhopp/tR3OGw4aY0TPzufC0Hkb5BRdcOfqfAOajqDQ++G
co1a/fMyckuSoIbAh7cPLGzCX7S9ixuwhaiOiMVunx4ptnVtub62zZGsCJ0zCZTs
ZvrtREzTOz0VShXfaBn89VZ2nCgOabrwjHYiJMyrC7TvwqfD1XjsiLmF81BmzdQT
g7TcR3EtufKR1JkAW93XggAnwo6plvX4MmkPNjkK778EHY4DQ4d+TfDCQqTE00RE
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324412697679770961221000240164519173137934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 11:42:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 11:42:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'laurodefreitas.ba.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24424494830589043786504122528764797165722902151168785311355403358725239973867322262316492383792855224488145889580936537391245964657080668482872024407425318802955375032573790861822602216557995045542968944352378015825996901830830099038615894654767075124726816268113567880116963073503102766091417859677664758925834461265346773476055337283152469256197214179411319513881656253174058710025069704083946172459691823228738970963326201600934276423099313058646608248705091565154226018155343479282870017686588580155158715107533651919158187642322611862809464870874914287544105975148972215118543068084687776132411820190700295963893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e77ca12f1f8ea3243f660bcdb3dc659f8947fb45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurodefreitas.ba.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurodefreitas.ba.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f24ba08a30000040300483046022100d00f750407efc18a523a59b8cb033b41c7648cadbe28d62df76f06b51ad87c9402210083a45c0d216041aa074fef162e04e84574d5286cad159764083cf3777dd002690076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f24ba08ab000004030047304502206bc68b96f37f42bb8810d01dbb0588d86aee3c6acf500cc0bb1426b74acd7133022100c91ceba84c43efa94c3be5e7447adc413d65a2cf695db121beddc258e3b4d315
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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