alicerceimoveis.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:76:e7:86:6f:ca:aa:01:78:63:f0:f6:0e:0b:74:05:16:83 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alicerceimoveis.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:76:e7:86:6f:ca:aa:01:78:63:f0:f6:0e:0b:74:05:16:83
Serial Number (int): 301797926794161006924432734918843067340419
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:5a:15:4f:49:37:ef:9c:93:c8:dc:ab:34:3c:8c:64:7c:c0:fe:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:79:3a:f8:3f:73:e3:ed:ae:fa:b0:0a:93:4c:96:16:45:4b:a3:ba
Fingerprint (sha256): 09:4e:2f:2e:d1:58:85:ad:c3:9e:47:52:4a:54:a4:cf:60:9c:d2:b1:cc:fa:85:c5:c1:2c:30:b2:1a:19:d0:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alicerceimoveis.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alicerceimoveis.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alicerceimoveis.com.br
alicerceimoveis.com.br

Other certificates including the domain name alicerceimoveis.com.br

(limited to 100 certificates)
www.alicerceimoveis.com.br
alicerceimoveis.com.br
www.alicerceimoveis.com.br
alicerceimoveis.com.br
alicerceimoveis.com.br
alicerceimoveis.com.br
alicerceimoveis.com.br
*.alicerceimoveis.com.br
www.alicerceimoveis.com.br
alicerceimoveis.com.br
www.alicerceimoveis.com.br
alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
alicerceimoveis.com.br
alicerceimoveis.com.br
alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
www.alicerceimoveis.com.br
alicerceimoveis.com.br

Certificate

The complete raw certificate details for alicerceimoveis.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqf70TiqgWxyrOW+se60
4RxHBEA8Xm39xRT8NEicpEj52yrzKBevYkGtskF3l1vWPQSPSpvCNzpVOfM985jP
xvmnmf5nbqYk/RRwgrLC6BOah20wjd1fBNERYicdFlD+408BAkj6FdC8LK5np2p/
SowsgLLtoKSqmyeYb9w32FR4VGhpqw9Ni+Mi+K+bM1TtECywrnFS2pcP404JAEEe
IJA734QM9pqoVoC4EL75NW6Vn/8fjD8izGnJbjL3tbtX4W0cmLxsipgxKIcxREmY
qFwsj0nbQy3EjHezWbOa7wWsB8vKCHwx0FvsaqTPZAqkoYGgQYzau3PmVrR11+7m
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301797926794161006924432734918843067340419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 00:26:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 00:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alicerceimoveis.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25078020213958153019230722456872521348925328550387242536441632676202598025226564266477327418657570309595648387458289398237046630443288765250205355027876123327024357811871434193366851507355614253566545822819107451399545080843133515645451889936314982558342190005677799514160740669781012999423597213900026723621295924897642793585991041410701050128150145522632334230634001458914878004200661921748707314901636774608788804620439236027072614882778791988636074726591946698120683384530718965079941541363612399457451908563525035767766531268541074031302215610751732852447846012493978131558994414467980170293579572320088848524997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							165a154f4937ef9c93c8dcab343c8c647cc0fe81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alicerceimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alicerceimoveis.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e6e10a5f4000004030047304502205aba2f4d2f6cdf71ed05c328d7361b39460e80ed1f10eba79ed1ce2e39c3565a022100ec59cc1b3bb7afa503cafeca19cf971ed217c697c0f58ae9360b68b982a72f2b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6e10adbf00000403004730450221008235c333b9e8f8cce31a6d92d6ad8eddb869b0a2a5877917f4a7242aa46bb96502202520cf6f8f464eb1f92bc8ece1b70cffadafb6869f3c617ac629355583ed26c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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