www.artesanatodare.criasis.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:98:0c:59:45:00:e1:98:d4:ac:4a:1d:d2:9a:9c:27:fb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.artesanatodare.criasis.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9d:98:0c:59:45:00:e1:98:d4:ac:4a:1d:d2:9a:9c:27:fb
Serial Number (int): 314963296175391159002749583138254036412411
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:bd:ba:c1:64:19:aa:eb:d1:a4:d5:19:a4:14:c1:b5:9e:fa:2c:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:0f:bc:6e:4f:ec:f4:5c:e2:b0:a1:f9:e1:3d:4f:c7:16:ed:66:54
Fingerprint (sha256): f8:51:f7:f0:25:e2:6d:6f:3e:8b:bf:aa:de:b5:ad:7c:84:a3:27:24:5c:f4:10:50:53:2a:be:1f:aa:35:35:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.artesanatodare.criasis.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.artesanatodare.criasis.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.criasis.com.br
www.artesanatodare.criasis.com.br

Other certificates including the domain name criasis.com.br

(limited to 100 certificates)
criasis.evoluthiva.com.br
camaraviamao.criasis.com.br
criasis.evoluthiva.com.br
fluxosaude.criasis.com.br
criasis.evoluthiva.com.br
criasis.com.br
criasis.com.br
criasis.com.br
criasis.evoluthiva.com.br
criasis.com.br
criasis.com.br
artesanatodare.criasis.com.br
*.criasis.com.br
criasis.com.br
criasis.com.br
criasis.evoluthiva.com.br
criasis.evoluthiva.com.br
criasis.evoluthiva.com.br
pizzax.com.br
artesanatodare.criasis.com.br
camaraviamao.criasis.com.br
criasis.com.br
fluxosaude.criasis.com.br
artesanatodare.criasis.com.br
*.criasis.com.br
criasis.com.br
criasis.evoluthiva.com.br
criasis.com.br
fluxosaude.criasis.com.br
criasis.com.br
camaraviamao.criasis.com.br
camaraviamao.criasis.com.br
*.criasis.com.br
criasis.com.br
artesanatodare.criasis.com.br
criasis.com.br
www.artesanatodare.criasis.com.br

Certificate

The complete raw certificate details for www.artesanatodare.criasis.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto1P6OxdBo6JgAm5BH87
JwuycBRnovovv6mVaHbZfC96INkXnP1SdqX4tvhkwbyIiKZ0gnql4Duujwa05fDQ
N5XmD/y8YpHS1br9mOuuOcIeGWP/+XkozemyWBUl4rVDAhkshVHoj92AiPSbhBgr
FqcFg7YTIiDN7x9hfxy3LLCeo4e/USMVI+aBGmIbhwLAnMEbm2InEv1Z7YptrfJg
mdus0MDGaE/Hb6jbDsZikXvweJZ4h6rL1CoFV22NSpZvDGKJUlb+6B7pslXEuThW
ksCu6Q9BBYdHVEc69Q+o/OvXF4jblgqawimAmVO9wv5+2LxwKrEsT2vkZXjpVoK8
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314963296175391159002749583138254036412411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 02:32:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 02:32:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.artesanatodare.criasis.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23045055121085006174671154266575143843030943834036503183378761033224169025722623682412451903868379690413208588261712024634899874366203214470863189018589757565348530283734357836923090995482370614125758073888706761495959346191479166990875606420240391507128365238528055625584021993340535112513221426913051829170678471660810022731617065658969279713077044345881334250709468601502606885190186388579048086824900670873666490312306654976285197001647221521313335375777181997570153010862384348173103954400685791210995990293983898821673905385873822756529470135548191061123139455673377148593695405301774463924812211951516403285027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88bdbac16419aaebd1a4d519a414c1b59efa2c2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criasis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artesanatodare.criasis.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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