recife.ftd.implystudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:42:ed:5b:2a:ef:45:36:94:6b:3f:34:e9:3e:39:9a:79:d8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recife.ftd.implystudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:42:ed:5b:2a:ef:45:36:94:6b:3f:34:e9:3e:39:9a:79:d8
Serial Number (int): 371223280348656231549110582741609809082840
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 12:84:24:e5:df:59:db:7d:b7:18:ea:96:83:84:c7:1b:d4:6c:a0:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:b0:0c:7a:40:41:7a:b0:a0:bd:7e:ee:89:cd:10:2a:99:8d:1b:41
Fingerprint (sha256): fc:d4:60:66:6f:4b:37:f2:42:90:32:14:a1:c0:e3:e1:9a:bd:9f:af:90:fd:2f:ef:d8:a5:f8:93:f4:e8:69:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate recife.ftd.implystudio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recife.ftd.implystudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recife.ftd.implystudio.com

Other certificates including the domain name implystudio.com

(limited to 100 certificates)
metabase.implystudio.com
recife.ftd.implystudio.com
registry.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
api.test.fretapp.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
api.staging.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
api.test.fretapp.implystudio.com
api.staging.fretapp.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
api.test.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
staging.ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com

Certificate

The complete raw certificate details for recife.ftd.implystudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371223280348656231549110582741609809082840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 23:00:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 23:00:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recife.ftd.implystudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923583945609620456233104341522094244079618359661662493435944329785019475235895756842358193109213827594616263092633815493333498231758564569453293939620056206829370956647491649289274041855824185815916059855591564595273478546739850708606883489790395358974363845836132383557201062754157331667925151631056050243884756977029025478180617335241446488291367156699146553214150620879345432505347245842100210040733387927855292629149161058224485319381151974481009900612662318299442469557366290355466958149976442867398045112714283678613342990702569632872354798456003435294296100886515455242120539551352142969870886323492759734208976808357678141787419828276769309205639457554483940065576092961085721968944633509662184545928233551172483693070173320356406892741630927901547948522455313628023202072472434908770096823301422439831122137607695795333287569289088882348223715730438992775209268235795720023282916933063747477207829296133860308478929193869351416159774186157328550271714134568785761316967862327164171201406745887561277634554727168872617411188646335557958529283337353811310825558526891784271631625245006120538608556328981644404716890848171326141058775565213918058139673749265652137855112532046432113871633089576787603349798887291373217481978001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							128424e5df59db7db718ea968384c71bd46ca0c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recife.ftd.implystudio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ddc2a1f91000004030047304502205c640c6a892af08d186ce4a32ec001df2201fc8a997c43035c88ab06a7bc601f022100ff8237a72f66c1742de11251b8d6acd75ab80467c7400948b72b01170978782c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ddc2a1f840000040300473045022100d20b251463cd387db39b38904ffcde1a8cc1d651484851952321fcbac54e7cc4022021b8965a5e7c5afdbd58fa2bab4000115c3a8a4815505354535e2817b10ef85b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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