saojosedopeixe.pi.gov.br.itransparencia.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0d:83:aa:8d:da:02:33:85:19:d3:26:d9:f7:61:6c:06:79 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saojosedopeixe.pi.gov.br.itransparencia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:83:aa:8d:da:02:33:85:19:d3:26:d9:f7:61:6c:06:79
Serial Number (int): 265935543000258889661725541633217222411897
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:d5:46:85:ef:e5:fa:8e:55:2c:40:ea:f7:bd:86:ed:72:12:dd:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:c1:5b:9a:7c:79:a9:08:4a:44:71:45:02:06:83:ff:06:02:7b:e3
Fingerprint (sha256): e2:ec:42:fa:14:3c:dc:25:e7:da:c0:e3:ab:c1:23:70:e1:dd:ed:97:0f:ee:2e:68:dd:a1:e0:ba:f9:1d:ab:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saojosedopeixe.pi.gov.br.itransparencia.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saojosedopeixe.pi.gov.br.itransparencia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.saojosedopeixe.pi.gov.br
saojosedopeixe.pi.gov.br
saojosedopeixe.pi.gov.br.itransparencia.com
www.saojosedopeixe.pi.gov.br.itransparencia.com

Other certificates including the domain name itransparencia.com

(limited to 100 certificates)
www.riachofrio.pi.gov.br.itransparencia.com
floresdopiaui.pi.gov.br
*.passagemfranca.pi.gov.br
cpcontacts.parnarama.ma.leg.br
mail.valencadopiaui.pi.leg.br
www.protocolo.itransparencia.com
www.suportcenter.itransparencia.com
saojoaodavarjota.pi.leg.br
altolonga.pi.gov.br
riachofrio.pi.gov.br
www.center.itransparencia.com
altolonga.pi.gov.br
altolonga.pi.gov.br
*.pi.gov.br.itransparencia.com
www.saojosedopeixe.pi.gov.br.itransparencia.com
*.pi.gov.br.itransparencia.com
*.saojosedopeixe.pi.gov.br
*.pi.gov.br.itransparencia.com
*.franciscoayres.pi.gov.br
floresdopiaui.pi.gov.br
www.riograndedopiaui.pi.leg.br.itransparencia.com
saojosedopeixe.pi.gov.br
www.franciscoayres.pi.gov.br.itransparencia.com
dirceuarcoverde.pi.gov.br
www.construcasa.itransparencia.com
passagemfranca.pi.gov.br
www.admin.itransparencia.com
altolonga.pi.gov.br
*.passagemfranca.pi.gov.br
www.labiras.itransparencia.com
saojosedopeixe.pi.gov.br.itransparencia.com
santana.ap.itransparencia.com
mail.barradalcantara.pi.leg.br
*.altolonga.pi.gov.br
www.protocolo.itransparencia.com

Certificate

The complete raw certificate details for saojosedopeixe.pi.gov.br.itransparencia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23INSn/IX7Lky5gjGqS2
1FVrfhzO/qZLPDy7iSBw5F9w7lwiHz1LAI2Vu/dzHFIVNZDeJZuek2azXrz14fkU
cedjbbPcwiAESL+uEeoOujyZNWEbf5K8VnXES7QALjWGHXDEudwB5CyGssKWRJpN
FRC/QJF+hxVc+rZLT4iY2ZDYvSTfnlR3ZGXlne7UXovxm7PZ3/FjymK3huwTSaqV
skjPu3fr0StOclkJcyXYq6KBDWzjUga29+m7cyTMrJl7HTMhVh73B6mvkg1wA0u/
RnbbPDzQlYVGnogTSqzqDqQRkwMigL00usw+HgADSutnx2x72UYRLWcfAuN+ANg9
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265935543000258889661725541633217222411897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 16:23:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 16:23:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saojosedopeixe.pi.gov.br.itransparencia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27702429884475326424115267421484643921810566244402742757646299460198202906680452804174475933365329179679707979219501989571256079076962225535227772403870678352555683376810374548693106483056333606263849230318311972192022011932816758714337726427366124217118960734900291125286430269423835377343002328519798880032811301779333152481123781141097675365795140684580143078954927633654106588767899389704836268167491796841342128463564837422489646125972301718385688096926523023617542172873946009993078793321500635263930494405750316486711230450059502674537901453351536695146985998715947851230139769526283403327988957648180215299333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6dd54685efe5fa8e552c40eaf7bd86ed7212dda6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saojosedopeixe.pi.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saojosedopeixe.pi.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saojosedopeixe.pi.gov.br.itransparencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saojosedopeixe.pi.gov.br.itransparencia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a6b85663d0000040300473045022100c4a25e5b7eeab6ad0519ff0c4c7e966fb3fc1ef9ef36a5caaabec1bdf4f021ee0220182aa15b97d0bcb7e62e433f5a228d6119ac094b6b871f12d313096c82bd94460075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6b8566540000040300463044022046bc5f44e605847fc037d03f7140f98b0055f76626493b1588223207742373fc02206cf72cbf5a0863ae7f6a176c581dbdd7b1d035c2fbd768d45eeabf12ba3b6f0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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