bestsf.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8c:6b:3f:fc:1d:ba:27:58:cc:67:3c:b1:40:f1:c2:eb:3d was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bestsf.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:6b:3f:fc:1d:ba:27:58:cc:67:3c:b1:40:f1:c2:eb:3d
Serial Number (int): 396231234719745893776316520904680185981757
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:6d:a6:ac:3b:5b:5c:d1:77:e4:49:c5:32:af:a7:d2:fc:bb:e1:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:9c:ed:74:40:38:f6:01:36:dd:26:fb:99:be:e4:82:b7:5d:4a:94
Fingerprint (sha256): fa:9d:ee:f9:64:33:82:30:bc:19:a4:e9:80:d2:69:91:63:62:3f:dc:e2:02:5f:32:ec:de:3f:6e:82:27:95:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bestsf.com.br

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bestsf.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.bestsf.com.br
bestsf.com.br
master.bestsf.com.br
www.bestsf.com.br

Other certificates including the domain name bestsf.com.br

(limited to 100 certificates)
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
portal.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
api.bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
www.bestsf.com.br
app.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com

Certificate

The complete raw certificate details for bestsf.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISBIxrP/wduidYzGc8sUDxwus9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTExODA2NDVaFw0y
MDA0MTAxODA2NDVaMBgxFjAUBgNVBAMTDWJlc3RzZi5jb20uYnIwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhdtvsrfhBH5jfdLjF1qyQXuuM1VrE842
NOY0lmcaTzXQVsH9pM1+BTZ9bpIG35IlaSFyIBFePgkVZvTtxRUvCdcr/yBtnWgu
+l/9wQ9+TTh0PT9nKpTfhh5g0IXutuXKxkEU23yaqZSjTqUgUHYn/44oTrvdbGoO
Zpgh/yiQL0g7PLkT161Tq0Gkl3iAM1hfetb1ylKYQiqU8pDKGNiLU9+GHeg3TpXA
kFeBPBgP3ra6r4Awfsjpn06vqXT+oFQtXKjI/Zp0LXA4wp8CYf3TpZZ4ifSnV4T2
+1YnQZM9wQLWw0GLaF9gb9d8rdE6R+HTemSNinNvj+uR9tjROBuNAgMBAAGjggKe
MIICmjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCFtpqw7W1zRd+RJxTKvp9L8u+Gp
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wVAYDVR0RBE0wS4IRYXBwLmJlc3RzZi5jb20uYnKCDWJlc3RzZi5jb20uYnKC
FG1hc3Rlci5iZXN0c2YuY29tLmJyghF3d3cuYmVzdHNmLmNvbS5icjBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3
AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABb5YAY2UAAAQDAEgw
RgIhAP9kBzgvVp4wMhY7J1QDYUHIxJ1SGpzDx0yx7SqvCDUyAiEAoSqCzhKgW66q
mLy0uIjzOLR/1WF45AOSabsuQnJplDgAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3
au68YToaadOiHAAAAW+WAGOJAAAEAwBGMEQCIGh5lePYIML9Qe/TPRwZg73GEwdJ
m0FuCYCasSQpR067AiBsSwT8UpeI282Pmzv13vS4pUyv5Jj94Du18gBYMgGlFjAN
BgkqhkiG9w0BAQsFAAOCAQEAKB1GrZRQDO5xOU6h5+85OnYuRDY2+allNyzqXDAO
qxxaed8rCTrJSUBvzaHNKLOM/+XU8YwX9ly0JEemX84gQpmkixM/K4FQMUGvqJqo
8KC+17I5+p93/XdEHUogD5aKcQ56PpMixTDj15jIM4VeDwb1femTLfywyuz277s7
jeCIz7IMevPNg4xsg8csVYlIxJo6YkL+tKZSkvXx00xU+GzeY54wjFWLSmSPrkp8
7KYF01EomyLYPadShlQlL5WYOxHzPr6Zw7nAz66lGXLrDcll9noUh+r4yBiW5cQP
D+9zQCkGbmRXZeudXF9sOpiwIO6UuL+2PcjHp8xxIcYKrQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YXbb7K34QR+Y33S4xda
skF7rjNVaxPONjTmNJZnGk810FbB/aTNfgU2fW6SBt+SJWkhciARXj4JFWb07cUV
LwnXK/8gbZ1oLvpf/cEPfk04dD0/ZyqU34YeYNCF7rblysZBFNt8mqmUo06lIFB2
J/+OKE673WxqDmaYIf8okC9IOzy5E9etU6tBpJd4gDNYX3rW9cpSmEIqlPKQyhjY
i1Pfhh3oN06VwJBXgTwYD962uq+AMH7I6Z9Or6l0/qBULVyoyP2adC1wOMKfAmH9
06WWeIn0p1eE9vtWJ0GTPcEC1sNBi2hfYG/XfK3ROkfh03pkjYpzb4/rkfbY0Tgb
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396231234719745893776316520904680185981757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 18:06:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 18:06:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bestsf.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26954766389970604408505734836059718000540510412902997368643452497951461712167228094988502589995701944101385872657722710036686550184419206247064609812475813675208122327021330452091286972608233481793979739574666269132892423206872730039124230246764872438170304260298316069460671471887972487472005592333876642043694394968051934309190576755907087228204310180235426832925149331225801492033360606530825214138362167474125149923465183142122413766635144857406255017271141562724604757366096295291345206228080290686801045410439787606587111489256700938453891565258157926812464664921092080908303335319533478878611252727151576226701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							216da6ac3b5b5cd177e449c532afa7d2fcbbe1a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.bestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsf.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f960063650000040300483046022100ff6407382f569e3032163b2754036141c8c49d521a9cc3c74cb1ed2aaf083532022100a12a82ce12a05baeaa98bcb4b888f338b47fd56178e4039269bb2e427269943800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9600638900000403004630440220687995e3d820c2fd41efd33d1c1983bdc61307499b416e09809ab12429474ebb02206c4b04fc529788dbcd8f9b3bf5def4b8a54cafe498fde03bb5f200583201a516
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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