mkt.lkimobiliaria.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a2:7a:0a:31:74:27:47:af:2c:2c:10:5f:a9:63:b1:b8:ac was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.lkimobiliaria.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:7a:0a:31:74:27:47:af:2c:2c:10:5f:a9:63:b1:b8:ac
Serial Number (int): 403737105909728056759264539595362230450348
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e7:58:a1:cb:f3:5e:99:3c:af:c1:ba:ef:0b:df:f2:78:5b:02:74:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:56:e1:47:98:15:11:aa:00:c4:4c:01:8b:03:3e:e0:3f:27:f0:38
Fingerprint (sha256): 55:82:71:93:84:ba:2d:65:52:09:5c:17:cd:6b:64:37:4c:9b:a5:c2:3b:05:48:31:97:c6:2b:9e:ca:aa:72:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mkt.lkimobiliaria.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.lkimobiliaria.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mkt.lkimobiliaria.com.br
www.mkt.lkimobiliaria.com.br

Other certificates including the domain name lkimobiliaria.com.br

(limited to 100 certificates)
appointment.garethpaul.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
www.dawidfrontend.com
sni.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
meuprimeiroimovel.lkimobiliaria.com.br
sni241174.cloudflaressl.com
muxgram.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
meuprimeiroimovel.lkimobiliaria.com.br
sni241174.cloudflaressl.com
voudetour.com
sni241174.cloudflaressl.com
sni.cloudflaressl.com
sni241174.cloudflaressl.com
jacobberman.dev
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
crmthermoply.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
e-twin.at
app.luwx.dev
matimbaenergy.co.za
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
martinmade.me
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
mkt.lkimobiliaria.com.br
locyes.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
api.blackbooks.co.za
match.karla.ai
lkimobiliaria.com.br
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni143882.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
athlemouy.fr
mkt.lkimobiliaria.com.br
onhandhub.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
miladegroups.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
www.lkimobiliaria.com.br
web-logger.io
app.luwx.dev
web.evity.app
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
holiapp.live
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
www.shinesalon.shop
insights.unacast.com
signin.statusfy.com
calltrackingtools.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
verysuspicious.link
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
sni241174.cloudflaressl.com
kawena.xyz
sni241174.cloudflaressl.com
docs.useswyft.com
demo.ailumia360.com

Certificate

The complete raw certificate details for mkt.lkimobiliaria.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7FWO+bGcJTjbpYD0RSnQ
r4suE/6fNNiQibyEfX89fUe1cdFz9BKl4oD53ja3tHhnauwC0VQtK4JhOnCHP6Bd
jQjhAACv93SKN71795Ylo795qTCORbTtZkyRK97IKG46ONR+hhLUGvJF21lZcCJ0
3zAnZ4qUU/HU14vDdGYlPG5VQ0lfttwBH7pPY6c55eQ77Hbe9wr6/odS2Fh850Q0
ifl+a8XyGuInuOFyl+pZQzRpnJaXiZN9xuxlfIDumMJwnqdVLNLU2nqY7aMT08QM
9502tIpZnpdVnXDls2yq56bF6GqN0FIbmYAHo2CraV+WmyEakDloIA2WkXFabw6K
s07IYKHTDJn8fztO6zlMVKbphjQ2x0gYBK+kZWLUAjYHMMH+ypvtAUqOw/SyioZ6
pPV8kVfd5okhoQJlclj76DcMzxR+4S2hAFWdQPuTiple5WsSzcyhGIcr3SerZRpO
NLCP9BjO1qs9lsamZk0fvwDB3qScj8pmESt5z3aIyIDQa+EWdeREE9BJGVZefSA7
ENFooX6vzHUOb4jE0ez47bpWo07TXe5FzOhQGBDQ3nboAgXZ4HlUJcr7wBbt7jVC
jkqovyuiGN8SwKCfHQ+6BgSvHaiV+oo/Y6hgeBjl8/9ZrTwd6zZi1xOtxWqcdyly
qwJY3ishrxMmyoe/8nQ6lHkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403737105909728056759264539595362230450348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-04 03:09:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-02 03:09:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.lkimobiliaria.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 964159469649999911767702637672191047233719873263945720951767024713136947886833305006500532651446796748319363393847159373179491402339476202630154012485558175220606909026051938885888339882078882366503207268352403446415734585702718399372119029641089152705103869653079856947318861238498643946161113146219167402651660860449784296646605791583038258407100698681699168161484110698103415717697352128560377874374305194365017593819410150028932042712215643249300808865226150862750975817982970323271769148585903878304272227196969693257758687184891410553506762447749216042273212196219915153097647587784943923037738564886105774634033620399485023411553634121010116398081393751953377971998822279509286832170496303547880188066915637322562600901807187783585147554664174079067564573210514726776154078061457536829047439370876467060055434076219807675148939728139849771458665383781577588798411008956985188334799876135685719284365007022585913654757205886020351510341178149034399344412178075895081398575841790444295737520845916366373263322833060915620313637212791028016577070002202230584746967626060816035120817691824757615109620832137764065794770299198833695570230557248808228709196292064815642157293546678598984172608953269233809150957867103889372946797689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e758a1cbf35e993cafc1baef0bdff2785b027464
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lkimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkt.lkimobiliaria.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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