printstyle.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:d7:2a:9f:89:c8:5c:f6:e9:35:6c:7a:17:60:ce:aa:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=printstyle.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:d7:2a:9f:89:c8:5c:f6:e9:35:6c:7a:17:60:ce:aa:8b
Serial Number (int): 284762064077285765465029469570451200977547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:44:97:73:ca:f9:1c:9b:c5:b3:6c:a6:8c:0a:eb:7d:04:9f:56:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:57:ea:ba:bb:82:3c:71:30:0c:78:de:33:f8:66:d2:5a:c4:65:2a
Fingerprint (sha256): ff:5f:e2:aa:d9:b3:0f:90:47:91:f8:23:87:5d:3f:90:f0:35:19:2f:7e:98:6e:d6:c7:86:3d:9c:dc:53:3e:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate printstyle.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for printstyle.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

printstyle.com.br

Other certificates including the domain name printstyle.com.br

(limited to 100 certificates)
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br
www.printstyle.com.br
www.printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
printstyle.com.br
www.printstyle.com.br
printstyle.com.br

Certificate

The complete raw certificate details for printstyle.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnUrb1LPA1/YUHGBTZYVx
yDcy7yodhu385+A1Jo6b8EAXB6Q1ZpYu/C9onMySx7+xHzbHVf2RiIHDWJS6UpIV
S4HnXu2BH5PIBi/YVEtKqeXBjA1JbEcdwJ0hxOESjfNA5gkS8pLQh+R6HMC7VG54
uM5LSNrEW8+AACrPvaBoPBVlVvzW7pYgP5HJivhLGROaz1HuLwFNcvj+Z/6/UonA
K8HiLENpbrXO4GeUzsK+rwRPMKJ86vEEDaQDbs1Y6fvODpzMefd8gPttWd8P+j/L
Egw6AyFzHjznl55ek1g4zxuJMurryR6W7u/I1/aUy59TcA/Rxr4FQLU54hJWIV2M
cKsGfg297NRtnWL35Al1qK24LIVyj57q8xhA6EGL3qZd821SCT6fK93rJSQDaCgo
txofwc8oV2jPSYiFIVHtxfw6qqStr2tj3lxVr3p7mq5kFR5gP/bRACsXTcb6+Sb6
DVc2tVOrIgXzkgJoPOU0cNgXD9tMDK82M5QaHSRRVEFYHMU+fZcIziwnxNEMmrIC
4Ow1Hw6ix2K6JHIYBjBEQ2FsqGqOSiUnvAVE4lqAmoAYuZ5ZSHzyQIfHsZRoG9/T
/d2AlE6z5irD+XuNU7qYy4XpqZEOnQcQcq8kHRpsWUW2ecECNofeM3Mq1DYCOp8N
QA8ia+eBFhOFjCkT+cryG2MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284762064077285765465029469570451200977547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 07:26:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 07:26:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'printstyle.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641697075358243693386102496399805194332296162043353062415959697351953590522188972064305109649037310843452854912941247741434889222846855977498295389089815116773417017753009078540171698566111754623219254994375403155487114680228670744698604181828506771594437400079793948461675515880325752824402992353137645262143494090964658900010895972175404497497903418008831720329948105670511988735877116701062914685880460406284258275817178233445058043175272726824347687795673824111233745850138204343192101767378946021479615895816780480169776306502068007214443197647638438377827105880789690966655309028246264719698537398642101134260872822715483383652284576552890288103854607056904654838346986305938302018849303243714825098031133214400791057999156087461144439367854938781087418791482438643079185158631728417856484140607246862068682182440830352188226843893338476039144693222283934572238602650810463689791626343202717497553957922035381244124584936416262550174436489042403012980048193106111158392282370698890988488464289577287781706703580634574711440904030866286730552870754908849219461736624309919275591060697770228764009405330228990154947110862408285535275129052482782280142518516742447194840499783559766883551366876784877675959554050919328112811580259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5449773caf91c9bc5b36ca68c0aeb7d049f5603
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printstyle.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dafa072c900000403004830460221009be4497470749fe032dc26bf08cdc23774dd3c4ed2daf474b01e6c86b79795dc022100a7deb1bc1235f1d41f4b2850ec989e491fb836ee9557c7929e4eb23ac3b08bed007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dafa072c40000040300463044022076b449a828a0917e5b3102767666d2770ec4e1a6e92ab15c7b73293da8738f9a02200ff1c9a9ee7fcbc9dbc3dbee0f002a5b74cf216fb9db4583afb5c2c6896acab2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0005deaa5580b686e07889948d95bd4cbab9336abef431474d6e855fa5c11a0d7eb089e877a75f47675e190feea96ff887a71db5759c3e8a9cbc64d3fd695737f2328df62306252473142f9d9ea9b875d109bccb8e6e079eea7893ad614e5ed1747c139eef34138505428d890f4e321075106f36cd151270dcbb47822f6276f0a103484a16c47ce7d4f13d3624ca4f859ac8a51f8b3007cc483fd43c267079e1e2aeca676d182462be8fa3ed25da54ee1883be2faa9727456bb9b30579289ca4b3263494b4df0d27aa8c71d7ae3c44a4969df3d4579998a62d2999d368e6a86e102f2167a654b01afefa3cdc064d81f042e10878c0b2438b20791ceec9da9f564a