brettasimoveis.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:aa:38:ec:5a:63:11:26:e8:68:2a:72:6b:07:b7:58:b6:52 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brettasimoveis.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:38:ec:5a:63:11:26:e8:68:2a:72:6b:07:b7:58:b6:52
Serial Number (int): 319260524154928608936269487996799710443090
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:33:6d:c6:20:70:7a:15:58:2d:84:65:ed:0c:f2:a9:84:7e:2b:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:42:b3:b3:d8:04:be:5f:f5:0d:e4:66:b5:96:8d:cc:b5:20:38:59
Fingerprint (sha256): 8b:23:87:a0:24:3a:88:26:83:1d:5c:49:da:2d:b1:5e:13:a5:b1:90:b5:df:62:07:47:e9:d3:52:c5:b8:b0:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brettasimoveis.com.br

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brettasimoveis.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bellazanahimoveis.com
*.brettasimoveis.com.br
*.imobibrasil.net
*.imobiliariaimperioourinhos.com.br
*.urbanizziimoveis.com.br
bellazanahimoveis.com
brettasimoveis.com.br
cacondeimoveis.com.br
imobiliariaimperioourinhos.com.br
urbanizziimoveis.com.br
vsaimoveis.com.br
www.bellazanahimoveis.imobibrasil.net
www.brettasimoveis.imobibrasil.net
www.cacondeimoveis.com.br
www.cacondeimoveis.imobibrasil.net
www.davialvarengaimoveis.imobibrasil.net
www.imobiliariaimperioourinhos.imobibrasil.net
www.nossoimovel.imobibrasil.net
www.renatomarques.imobibrasil.net
www.uplifeimob.imobibrasil.net
www.urbanizziimoveis.imobibrasil.net
www.vsaimoveis.com.br
www.vsaimoveis.imobibrasil.net

Other certificates including the domain name brettasimoveis.com.br

(limited to 100 certificates)
www.adhimoveis.imobibrasil.net
www.montenegroimoveisfortaleza.imobibrasil.net
www.adhimoveis.imobibrasil.net
imoveisal.com.br
brettasimoveis.com.br
imoveisal.com.br

Certificate

The complete raw certificate details for brettasimoveis.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ekZRQ4ueB1VISh5b4n
cHTxFUgDHQPOIyUtKmM9BuTZvD+6cUffrqHDd/cqRbwDXdJwyH547dvRE01ctAfP
DpukeeeC87L3JdYKm8H3nAGFE6Lvxr5D3B5bGhsECvF9jpOYxLEcKUnWKpTIc+Y4
glcY8kJ9cXJR3Sz/R1o7gO/LADx8XWP4nDq9et2TJkDpxcalBoCtk7AP+fVf3qsD
3HEDp8wWgLNhW5opeMnumKB3b6hzm34XRhWom41mSneq2cfBd2uPaCdKFVvu8nLK
E9kaneVzLOlBpQhaC6eclrRMVMUr/SUq8nK6JpGUhJPQeK3UQyAZjfwADzzQ7ldd
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319260524154928608936269487996799710443090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 13:24:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 13:24:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brettasimoveis.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21148684574985314366481259676237771909498016586744953181395556900511281416341697863903788297761104928996116098186548889186846501956914567076063942784929008859282052259337367223186064253502414034252662470166487831957176358616607011838652615800400451971678557349159663301271097874481584324906253537166891180811877574634728046267756313855987032561480899210315343577634118574031118937642738502949167600485354201401240257107124733936051499817850037960835153580170498159263425356152721075450482469240320096529019588034928120323263038649077574304612066828913135724850308859173614438792446203153277521134807211547788613999989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9336dc620707a15582d8465ed0cf2a9847e2bd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (706 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellazanahimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brettasimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imobiliariaimperioourinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanizziimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellazanahimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brettasimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacondeimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobiliariaimperioourinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanizziimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellazanahimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brettasimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacondeimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacondeimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davialvarengaimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imobiliariaimperioourinhos.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nossoimovel.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renatomarques.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uplifeimob.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbanizziimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsaimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186c6c2c8de0000040300473045022100e4fa49239f57fc466f28e01e77cda9b17c93e2e89f34bf60286ab8557637c5d402201190e42c7b0c636d03b49efd5c47f89f7b4e764237ad9852bb64013b0bd5b74b007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186c6c2c8d6000004030046304402203f06bdd42e4f3577b669dc96235d5870df54872af7ae52878c3e0bfc85e99aa702203ecdce53c898765ead41d981c3e3f838abe4002718f0b28fb6eb68d91f06cad8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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