api-planodeacao.grupocsc.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:7b:db:c3:2e:f8:78:f2:de:59:93:b2:d5:f2:18:07:48 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-planodeacao.grupocsc.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:7b:db:c3:2e:f8:78:f2:de:59:93:b2:d5:f2:18:07:48
Serial Number (int): 313564696049469155317566090161471410931528
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:ba:e3:e8:0f:82:d3:45:37:77:44:53:f3:aa:86:80:b3:7d:ad:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:c0:10:76:3f:9b:52:25:3f:84:ac:df:15:0e:13:fb:18:16:9e:8d
Fingerprint (sha256): e7:e5:fe:8d:fc:81:2b:3f:a6:1e:fe:a0:cc:e8:ba:0b:61:9d:82:a1:03:69:cf:32:f1:d8:17:62:ad:fd:30:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api-planodeacao.grupocsc.com.br

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-planodeacao.grupocsc.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-planodeacao.grupocsc.com.br
planodeacao.grupocsc.com.br
recargasitabirito.grupocsc.com.br
recargasitapetinga.grupocsc.com.br
recargasnanuque.grupocsc.com.br
recargasparacatu.grupocsc.com.br
recargaspousoalegre.grupocsc.com.br
recargasuba.grupocsc.com.br
recargasvisconde.grupocsc.com.br

Other certificates including the domain name grupocsc.com.br

(limited to 100 certificates)
api-planodeacao.grupocsc.com.br
api-planodeacao.grupocsc.com.br
api-planodeacao.grupocsc.com.br
planodeacao.grupocsc.com.br
marketing.grupocsc.com.br
grupocsc.com.br
*.grupocsc.com.br
api-planodeacao.grupocsc.com.br
grupocsc.com.br
api-planodeacao.grupocsc.com.br
planodeacao.grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
planodeacao.grupocsc.com.br
assinatura.grupocsc.com.br
planodeacao.grupocsc.com.br
grupocsc.com.br
marketing.grupocsc.com.br
marketing.grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
planodeacao.grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
planodeacao.grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
support.digitalresetus.com
grupocsc.com.br
api-planodeacao.grupocsc.com.br
planodeacao.grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
planodeacao.grupocsc.com.br
planodeacao.grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
suporte.grupocsc.com.br
grupocsc.com.br
planodeacao.grupocsc.com.br
marketing.grupocsc.com.br
planodeacao.grupocsc.com.br
grupocsc.com.br
assinatura.grupocsc.com.br
api-planodeacao.grupocsc.com.br
horarios.grupocsc.com.br
api-planodeacao.grupocsc.com.br
grupocsc.com.br
grupocsc.com.br
grupocsc.com.br

Certificate

The complete raw certificate details for api-planodeacao.grupocsc.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nKvr+q+dGXRBWOk+B1U
XML2E2HDBMVe2/8LNPcjj7bX0isv4dcxk/oCJRuwdCV8WjjXrAQK+8dN2j1m4FGI
3ZAD0vMpXUMHo3XtZ85LTFpqaCyzlSovwTI/KzzL3EKUg88xxkdU5zOQBi2DobD4
yGSlEbXdi3EiXl8JD/M5seWmCeybpQ8Iuu/TIdaIC3KDuNZMdSDqx0rLVGWOpOpa
d2RFOPpIl0cXSkxPm7EkpYZxy+L840+h+BNIVO7X9gsoWT6gW4rPkxrZdLLi2Vpk
YKj7qo6GKyyJlj9x5DQvdWs22BqlSv97Fm1RLpKtmg0n7kZyuEl6qVx60+t9EVeH
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313564696049469155317566090161471410931528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 12:47:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 12:47:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-planodeacao.grupocsc.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27071551174226243556113033353009186926661172921925005859709604080932466427544512983221280538964234356205277154167110839616184184026103936417169191884321725558840240283147339738798680123682892813948380569828234083043141766392089807379809331671843144198539024123602311509029171137649211214643900709954341969841029859425651914146590059032584730046224689080634125087925940565683409826075282352439983214929705906371663209196733754342653171400817523415492234202839334215604458481657227459048269184921422021185625458462087345094782446876965614015164410353722129786209820542990822156598440541830055048579503768440117319403269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dabae3e80f82d34537774453f3aa8680b37dad39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-planodeacao.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planodeacao.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasitabirito.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasitapetinga.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasnanuque.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasparacatu.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargaspousoalegre.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasuba.grupocsc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargasvisconde.grupocsc.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170cefff96e00000403004730450221008919b5aca22e1aad4d1f7427d37f080dbf6ad4031bcefa7d8944daa21597afe102202bbd98ba4f15cf55bacae4712954cdae4df9dbfa3d27a156397835d1e8e96814007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170cefff9650000040300473045022100fd646824ba2b809f9487b404a1f84670369e4b1cf907662c1346339477b0556202202ec5f2316248b2d6f61311ad692474e76c76d8228392c413a145800f86b90f51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060962ccfb985c420b8179905b6d809fed08887c7d11e5b9ac6078e2fc4ee7fac1d7d2c45ebb053f45689f315602388fa1ea5adcc2e4e02b4c832ae17092168e5a351c0dd6b5a09a379bf24248ea76ecf2000c5fa1c5f5746369c6c3fd4fde4c04fc8eb9c39ec98d8604f961f2b89084fac7df41756c0ee07061bb534f6fa6459db23135f84c1280f0908d23ebfe574fb2da94404c625d9a8ca13fd3a8664ca3016ca5af3757dce30b7208aea9a600928e6e1ec4da59feeec74a02d71f60b01c04e7079451ac86e0b41e4bf6a02765b29b27ddbc26474f7b2147b0e7a532d007cc0848173614519b4e29a924b7f08d843513fb8d8c171e340c596ae9796eedfaf