ponttoi.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:55:25:24:3a:76:10:a7:25:d7:72:ff:9f:7d:79:d0:eb was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ponttoi.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:55:25:24:3a:76:10:a7:25:d7:72:ff:9f:7d:79:d0:eb
Serial Number (int): 325763402372762111692861334857277077311723
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:63:34:90:cd:04:6f:50:ed:19:27:3d:30:6e:37:94:5c:7d:d0:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:b3:ad:2e:05:92:7d:26:01:3c:57:8b:6c:90:0c:50:e4:29:11:39
Fingerprint (sha256): 7f:6e:ff:cf:79:83:90:b5:14:f3:ac:09:ca:2a:e6:e3:fc:3a:ee:dd:e6:e9:09:f8:95:4d:b8:fe:0d:27:e1:2f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ponttoi.com.br

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ponttoi.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.pedroimobiliaria.com.br
cpanel.ponttoi.com.br
mail.pedroimobiliaria.com.br
mail.ponttoi.com.br
pedroimobiliaria.com.br
pedroimobiliaria.imobibrasil.net
ponttoi.com.br
ponttoi.imobibrasil.net
webdisk.pedroimobiliaria.com.br
webdisk.ponttoi.com.br
webmail.pedroimobiliaria.com.br
webmail.ponttoi.com.br
www.pedroimobiliaria.com.br
www.pedroimobiliaria.imobibrasil.net
www.ponttoi.com.br
www.ponttoi.imobibrasil.net

Other certificates including the domain name ponttoi.com.br

(limited to 100 certificates)
imobibrasil.net
ponttoi.com.br
imobibrasil.net
davipraiagrandeimoveis.com
ponttoi.com.br
ponttoi.com.br
imobibrasil.net
davipraiagrandeimoveis.com
www.higgeimoveis.imobibrasil.net

Certificate

The complete raw certificate details for ponttoi.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx5l31AIdAssn1BSIYBr
O4Xy1MO0evOUPkhOdAqvThCuouKsUPsKicBpp8pGHjAymG6TNmxb4q8QqaZRT8cm
bUeiwcITQxc+CJsLpqeU6txZY8tx2i5ucHr8oYC5kiY7m/NE+6wm/77TnpWNtm7u
+OpVTegKvLIZB+wSnWa3DyjwmacFRZoqszECRd9oOeNpMmQ8e2kHXT/5zRBkMF46
/nK7l1MV3gP6EP+tusTZ6SjiLM24/kT4yeUN8RRdwfNMh9RDxXeWwkUtcTVfKvqu
EvjfrnaQp16xoFV8HjYUNpWMu3aQ2Jnlan2jWXwg50OLPyk1He4mR7OOFdCoWgn2
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325763402372762111692861334857277077311723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 10:37:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 10:37:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ponttoi.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21601739931460771538037555155154036366498006041190179021775217622179819667443024415906109087946606691165613034577303901046957081496777793330159358373869410533394784997043697538229066332733462882633055545196784067228629753689192085973336672390220829724857184660766342551483129320684056614899160899760006949956153266714842373846191986567104663454281591060494164170997016382495731573104789784876865836257762328176483876721299460532965528484420500692878124467733879825973396112839415644270314062032359933263431324967443591779623460704981200486868298528915077436733694842665414203472682659464305763547817941677571949852297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c633490cd046f50ed19273d306e37945c7dd0d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pedroimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ponttoi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pedroimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ponttoi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedroimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedroimobiliaria.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponttoi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponttoi.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pedroimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ponttoi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pedroimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ponttoi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedroimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedroimobiliaria.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponttoi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponttoi.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ad50852b20000040300473045022019639f5ba09ba5bb0b3ec3618649a324319d14b3428bb5b3d6f3df97f2482db3022100b48bae73957987d41c640c44b2f288064bc1e8264c0202edc24f72f7bbf2d99c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ad50852b7000004030046304402207e1edff59d0b3ad65bea30f785110ef0f945cf8d2571c45d5a0c36e224b313c102203678567200dc006bf3ed2ef510a85d9a7985b2c77025ade1d7699bcbfb0e5996
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001c76b97b63a428ba2d19bae35c78b68a2915d0bd7d75f1802ba06046216133d6c42a1fdb9e917bc81703fd8b9107e285abdc3dedec09e4e79b7c3086929a61f9703303277486306f3dddde8d196c708a9d0c35a61e19b49ef54d851a51d55116e26575f75aa5f868b13cc7d5b8e7dc5c27e094a101ac9268a0268ae5ee53ac9620ad01c7a8c36443d39955851c447468c100b31617d28abacfbddbe44769f576cb0fadd2a2d46223e9324ffc3f0c79a8d7cc2415a838a0bc0c2d905d89296c184dc05bd5d9552e0fbe70e02433bad1e12e40d29c11937c91b5107c67cb68352ffd3757cfee9f54bbf0423b6bd104e56edc0c444a8b1dbe110dd8bdce440c5b59