*.baldyimoveis.com

Issued by R3

About this certificate

This digital certificate with serial number 03:01:21:9e:41:b9:24:19:f1:c1:a8:61:9e:6d:6a:51:2c:b4 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.baldyimoveis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:01:21:9e:41:b9:24:19:f1:c1:a8:61:9e:6d:6a:51:2c:b4
Serial Number (int): 261721826401991236257565422496893772049588
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:9c:7a:6e:55:d0:04:f4:91:5d:99:0e:5a:f9:ff:38:0d:a9:76:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:14:ee:73:47:8c:b1:bd:24:a9:78:a6:97:2a:ed:5f:16:ae:c0:04
Fingerprint (sha256): 0c:b1:21:bc:49:42:8b:d8:61:17:c3:c3:c5:76:6d:22:a0:e1:34:df:9a:f6:66:fa:a9:1a:51:6b:5c:55:e1:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.baldyimoveis.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.baldyimoveis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.baldyimoveis.com
*.fabiobaldybroker.com.br
baldyimoveis.com
fabiobaldybroker.com.br
www.altopadraosorocaba.baldyimoveis.com
www.baldy.baldyimoveis.com
www.baldyimoveis.baldyimoveis.com
www.blog.baldyimoveis.com
www.fabiobaldybroker.baldyimoveis.com
www.lancamentosdeimoveis.baldyimoveis.com

Other certificates including the domain name baldyimoveis.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.baldyimoveis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/SYlqIryZO5z9hQaj1H
bfkjDnDeC62lcU19m/+qXCGbMV02OoSOYiUVjj5/UAldk3cIxan6vZr+COv1/Rgo
R2wypxnZMnR3xhL+N4sbSWP+aMY1kLxYGzG2CZP7HGhXyo0P/3/NNFJmUF6GLXoA
Dy1moniaTo+VocKf00Wwj2ncborzDpl3I+UguSEd2LhFku2DHqBj/8f8CPbEJ3ws
hfgKx2oJGf0usLC9Lo8W3A6GZIBOS5eBCMztEU83upIKpFs3vpE+WfCcDizdj4Jy
KC5srwW6x2aQbn6jefiDhNfXN5anTd9IXXoaTtqz4M9bVu1VitTDWeZSTCk+KhGI
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261721826401991236257565422496893772049588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 07:26:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 07:26:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.baldyimoveis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28776710034178432412596190037073331644322673645927804790968570547801245302088896268198694173474933847746440373153300686887223623791422420940747482738727074982451068358041592781786311979678986909235906786579406725154364285439570942560978687401338143495082534317670227007166222320317526242251844068089364109534428433702381628633967246125671654039665603698779787504379721566545772640399464233785626850351374061324787584304645913922559429810367503323376765131929132480793559590890097427121986090685996597558550820711276665287410981948202894716469940070585073952791148952644187213700292565708493126435530269194158972438551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							619c7a6e55d004f4915d990e5af9ff380da9760a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (307 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabiobaldybroker.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabiobaldybroker.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altopadraosorocaba.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldy.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldyimoveis.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabiobaldybroker.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lancamentosdeimoveis.baldyimoveis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e277827dd0000040300463044022006160bc2333e3c8069bdcc9b061b368f66ed1f0536d23df594d72408cd55b4f8022055231a993421d04acb68d3dd671f3d0efba24d3e1518159686eafbf63e36fa6d00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e277827d20000040300483046022100f46abe55da253f88000c708cb9ca6a981e1bf266453c958388a8cbba6c826ed902210089b6b4c2e620e424742c693805e90df86da29629f657884064816de18780d562
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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