gecex.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:a5:eb:08:7d:35:a2:b6:e4:05:49:c1:24:62:46:01:43 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gecex.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:a5:eb:08:7d:35:a2:b6:e4:05:49:c1:24:62:46:01:43
Serial Number (int): 296606484569383065038797768933080163549507
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:62:6c:18:a9:3a:81:c8:af:90:e3:27:17:ab:d2:67:ee:4a:69:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:b9:e8:35:cd:ea:95:9f:2b:da:4c:6f:36:31:a1:db:7a:a3:af:2a
Fingerprint (sha256): fb:66:01:db:48:78:4b:78:4a:3d:ca:59:20:6d:d5:0a:07:41:a3:46:40:c2:48:dd:13:4f:f2:8a:ad:35:03:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gecex.com.br

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gecex.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.gecex.com.br
autodiscover.staffinformatica.com.br
cpanel.gecex.com.br
cpanel.staffinformatica.com.br
gecex.com.br
gecex.staffinformatica.com.br
mail.gecex.com.br
staffinformatica.com.br
webdisk.gecex.com.br
webdisk.staffinformatica.com.br
webmail.gecex.com.br
www.gecex.staffinformatica.com.br

Other certificates including the domain name gecex.com.br

(limited to 100 certificates)
www.staffinformatica.com.br
www.staffinformatica.com.br
*.staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.com.br
staffinformatica.com.br
www.staffinformatica.com.br
staffinformatica.com.br
staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.com.br
gecex.com.br
gecex.com.br
staffinformatica.com.br
gecex.com.br
www.staffinformatica.com.br
staffinformatica.com.br
*.staffinformatica.com.br
www.staffinformatica.com.br
www.staffinformatica.com.br
gecex.staffinformatica.com.br
gecex.com.br
gecex.com.br
www.staffinformatica.com.br
gecex.com.br

Certificate

The complete raw certificate details for gecex.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzgkq7XnLOAn9rLF5n7P
J4Qca0HUaECa+dBGuWLqJnMdeZsciLGcbXNiwuM+1GcbEYVcU60gVItPRa+Ew1OY
t7ohWsC1j1ASDk0H6642v6TOYX9YyFnRVPXb1/8an9+LWL3bgbuOuH398q62GM7I
O3zubtVVAyV6YcKDvRnFfcYQV7sq21nZy2uqBEbjxXT2oYMpdedhUv2mNmDu5Nxr
pj2fPv9GCVzNav1JmoH+yKObf0db3J5IwV7HhLaueS/cxYGgY02d2AhHjvgGghVy
IbTLR0RrCniSOCp+92X0d22FlirVXGud6dbyELLNgJN/g75ruR4zj7wifoAwqWFf
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296606484569383065038797768933080163549507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 10:08:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 10:08:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gecex.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19594622535739521654897065928169108146278049792804480650171559942726773099066099466857587470158092881564622414993003130591616537642090202756487576254599906467220943018527550430780085346413362250247265771817750082663530981701807019285869818013116917326133126142722112523039049031650682861491488359891940629736974619789080452454952636367125054070626319620685772257184718367346374305865299147048526866687905279527665066708875723743434583040131718888309620523764837834613841752637690337665460990238461033563915995844921826046799970390323809147041754530764775112662746680313064364612611561219103857353873771965132971269977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55626c18a93a81c8af90e32717abd267ee4a6909
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (323 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gecex.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gecex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecex.staffinformatica.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168994c458500000403004630440220494ef33da911f3fbe40dfc88359227998161c58a512e19d87ffdee6b14a3f64a022077d6185dd31910044e288279dd680c653677747854dbd7fb0ef9b96d820248e4007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168994c45d10000040300483046022100bc28c5d8d7b4ea390676022f4bee6902abbbbac98feb384ca1754ede10612a6602210087ab1d73026c9ad0f9535e5a130817be5dde2616f368cf1c78bb2ba1c5effe74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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