alleqmed.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:e4:0d:39:e5:53:cb:51:ff:46:c7:41:b9:f2:21:8f:32 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alleqmed.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:e4:0d:39:e5:53:cb:51:ff:46:c7:41:b9:f2:21:8f:32
Serial Number (int): 293966815309934545419562530972760780410674
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:0a:36:9d:e9:30:96:dc:0d:47:1f:22:35:0d:95:e2:3b:30:06:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:51:f5:0e:a2:15:78:8f:31:28:2a:78:b5:d0:bb:7b:8f:56:01:2f
Fingerprint (sha256): ef:12:d9:5b:7b:64:4d:bf:b2:6c:a8:c2:15:f1:3b:4e:e6:c9:1a:6d:b3:a5:cf:08:b9:73:2b:2c:26:e6:4c:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alleqmed.com.br

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alleqmed.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alleqmed.com.br
cpanel.alleqmed.com.br
cpanel.ragadalimp.com.br
cpanel.ragadamed.com.br
mail.alleqmed.com.br
mail.ragadalimp.com.br
mail.ragadamed.com.br
ragadalimp.alleqmed.com.br
ragadalimp.com.br
ragadamed.alleqmed.com.br
ragadamed.com.br
webdisk.alleqmed.com.br
webdisk.ragadalimp.com.br
webdisk.ragadamed.com.br
webmail.alleqmed.com.br
webmail.ragadalimp.com.br
webmail.ragadamed.com.br
www.alleqmed.com.br
www.ragadalimp.alleqmed.com.br
www.ragadalimp.com.br
www.ragadamed.alleqmed.com.br
www.ragadamed.com.br

Other certificates including the domain name alleqmed.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for alleqmed.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LUxjp2x9QmNytoosUhr
bpk7aQqz9TXw5tI8SxUR53HKGqCHrHvGSmOmUQCz/egwwInu9RCHnwtrbJ9y0J6H
W/bcRciiJxiIRwAdxOfkU76K1ubKlBhJMNxUyyrrH+Ze2Ls1sU9CB9XGObMtAvxx
W9AqdbdO8ASDfxe4j3TtOdSlafJaKgOd9VNwmga0mlYU1UivWqPOX77cjlrEgZ3H
7e65CSH6uKTeGnSpf6auYkF2IJAcivWEopvn8Bg/J6RGhlHXDd6O/KsiqIJ9cn68
ICWXmLEIHF0sz8d2ViSY8KReK+Wb8veaTXdXdyBpo+jmv11Z/km0OfoIABvbcTLl
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293966815309934545419562530972760780410674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 23:51:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 23:51:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alleqmed.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27356823758264665978550048005484946295723509558644383263565715991372345862541819205016463535479730608700427055308595857071068985937085741712122726340774695285212089622866912950631848095341595355526410978238965443303165882441443099013619728015903964428978524753464002484032206100395319547336669981689230184406325502087319831044642398854018171351458361164194435756179101576486173892116916196014542830255528287171143818318795994795199232580992063277450817713733049443498114721793784544417394766982111594240177962099584682562359043294322228419402622861044358438733186350781464824789953006368290195847747055151425839621607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e80a369de93096dc0d471f22350d95e23b300698
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (542 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadalimp.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadamed.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ragadamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadalimp.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadalimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadamed.alleqmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragadamed.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016811318c1e0000040300463044022017beb3cb3ef9d5b6fc87ed2a7fc35577633ae1cf5a2a339f14688eb29b08f050022007c2b37968abf0a205d1efaf2bb8befa6bc2d95b0135866960d287656e7dca2800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016811318c470000040300473045022100b033d3fab5dafe1f92652738d2ab1366534fb4ae33efd24d4541c3345257aa53022050c7a34109ba1dad13c2015c7e957319495042e9befd95e01fe3c6f454a5d6f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a059c9b6ca163ced7b198ac1fed3ec9627e5d7aecdea34c2e511ad3b7c3ebc3f9c07227353f4898a073c13de92b021ea91c6277a29b045da4b234f1c5a51ff14b1fab7fb799d197c1339e59859421fc6ce79603cf9918a54c11673f60deaf67495cf8533bba9a5d56a585f7be30861191cbe5e851e91db115420c667847795bc16752a0482a67edfd4e6ee6ed1f51f4915172359cf9a0bbd94985eaf7c5c1e90a97f343570ad32b04e87c2d37cf619f5c2733a67d87b1d61aa69b4336abf410ed54a0e3596d5a8009cc9019bda9f8a518db0b96050ddfd3030a2e1ab59d2cf8f93b5959ca4d2852d7906af7558033716561552dd55b98e99c181208cf757c9f