*.leonardonegocioimobiliario.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:37:34:ab:4c:f7:6f:c8:0c:6b:65:a4:14:74:eb:dc:12:b0 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.leonardonegocioimobiliario.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:37:34:ab:4c:f7:6f:c8:0c:6b:65:a4:14:74:eb:dc:12:b0
Serial Number (int): 367234683207303307856350537346653701804720
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c7:cd:bd:2e:21:57:1f:72:fc:13:69:e0:95:a4:93:9c:29:6c:bb:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:e3:e1:c7:8c:5a:f5:90:cb:54:de:6c:9c:7e:23:4d:78:05:54:ce
Fingerprint (sha256): 03:50:3c:c7:1b:d1:90:c2:a2:28:ca:92:18:48:f0:fc:d9:b5:56:9b:1d:09:71:7f:99:cd:6c:a7:16:67:2a:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.leonardonegocioimobiliario.com.br

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.leonardonegocioimobiliario.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.imobibrasil.net
*.leonardonegocioimobiliario.com.br
*.mantelliassessoria.com.br
*.melovieiraempreendimentos.com.br
gatimob.com.br
imobiliariasafra.com.br
leonardonegocioimobiliario.com.br
luanaferrazimoveis.com.br
mantelliassessoria.com.br
melovieiraempreendimentos.com.br
viaurbanaimoveis.com.br
www.deboralucena.imobibrasil.net
www.gatimob.com.br
www.gatimob.imobibrasil.net
www.imobiliariasafra.com.br
www.imobiliariasafra.imobibrasil.net
www.leonardonegocioimobiliario.imobibrasil.net
www.luanaferrazimoveis.com.br
www.luanaferrazimoveis.imobibrasil.net
www.mantelliassessoria.imobibrasil.net
www.melovieiraempreendimentos.imobibrasil.net
www.viaurbanaimoveis.com.br
www.viaurbanaimoveis.imobibrasil.net

Other certificates including the domain name leonardonegocioimobiliario.com.br

(limited to 100 certificates)
*.leonardonegocioimobiliario.com.br

Certificate

The complete raw certificate details for *.leonardonegocioimobiliario.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPTxhBOZ4cxUPB+NW9Zc
7gioqqJUh6Y6zpxks10oc/6zv8UCJrxpgF0Q6E1HgQoSyscBqnCDfeZkxwEDNY/L
UgXOC1/1cE4WM5jmF+/dBmzuOsxDZ1dJr/o2U9oMG3OXkctKY+SercOuzsSfsZfO
COfTgE77cgrQOQ6AY7SZlSD62GsdCYleRrf2kJzj5EQxeXmtm0jaoX569KWmTCZL
Kz8RhMYI15fy4MlS0iVQSwOtJ6H4zUbxLkWAPUtbyoiyB+xiYAYJ/3wNS6hUvx7r
hCk9XYmuVLrLF+RAv+MrzgBb0+IwMePVS3nfA0Q+Z06MCZDQTtdVxPEpNx+oQzt0
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367234683207303307856350537346653701804720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 00:38:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 00:38:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.leonardonegocioimobiliario.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21328821337237899840639909145344320846400775381815049026310411636809592760482051841801869491834067996112175549056551998529846026313818729963659111960463451492404243999340403117967038015198994830010926163654645406808201715297585893571021167120737619149627431511574062323382295360350655644339398173234311462868275402732214705541529395784340177813227278705974701628093384312400958678258386357464902326402374343532538324667042057678439343907371347155231672476760497084888031719850083040272500733630371948685322651894349839760968364760883423683591115412543371694721473854201461133817886618238113440213477781708978056295461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7cdbd2e21571f72fc1369e095a4939c296cbbe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leonardonegocioimobiliario.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mantelliassessoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melovieiraempreendimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatimob.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobiliariasafra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardonegocioimobiliario.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luanaferrazimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantelliassessoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melovieiraempreendimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaurbanaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deboralucena.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatimob.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatimob.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imobiliariasafra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imobiliariasafra.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonardonegocioimobiliario.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luanaferrazimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luanaferrazimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mantelliassessoria.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melovieiraempreendimentos.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viaurbanaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viaurbanaimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001897b3f2d58000004030048304602210080670577ba207c80317a94321c592eb6ad248e22b542851afaf27917f5b41a060221009ec05266b529383c191f40104f0059e808f7ff6848047cfea9f62bd02812aa99007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001897b3f2db00000040300473045022100930aa0b5758409dac231683ca2b0aa47540de5c5b8b5aa9a391583b76c3e4772022064faf8c800da8e912ca69f887c4d70a14a70b851ccc45052fe4833809b42bb5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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