www.tatianaalves.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:00:31:45:81:cd:95:94:7a:55:d3:f3:3c:29:ff:ad:7f:81 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.tatianaalves.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:31:45:81:cd:95:94:7a:55:d3:f3:3c:29:ff:ad:7f:81
Serial Number (int): 261402350868276344672436667707302666403713
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:0c:12:e7:e0:20:6e:17:21:7b:eb:8b:73:40:cd:af:b8:7d:63:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:30:c3:0b:7b:7c:57:5d:64:92:cc:6f:8e:04:8c:7a:56:d8:85:94
Fingerprint (sha256): a9:bc:89:f8:80:a1:fb:5a:25:77:1e:e4:7e:85:22:1f:da:24:0f:af:0c:ad:d8:80:04:b4:34:57:3e:1b:b0:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.tatianaalves.com.br

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tatianaalves.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.douglasmoiteimoveis.com.br
*.imobibrasil.net
*.r2imoveis.com
douglasmoiteimoveis.com.br
kfbrokers.com.br
r2imoveis.com
sindiximobiliaria.com.br
tatianaalves.com.br
www.andreflima.imobibrasil.net
www.corretorwilliam.imobibrasil.net
www.douglasmoiteimoveis.imobibrasil.net
www.evangelistaimoveisdf.imobibrasil.net
www.imovelachado.imobibrasil.net
www.janinabastoscorretora.imobibrasil.net
www.kfbrokers.com.br
www.kfbrokers.imobibrasil.net
www.r2imoveis.imobibrasil.net
www.rebecacorretoraimoveis.imobibrasil.net
www.sindiximobiliaria.com.br
www.sindiximobiliaria.imobibrasil.net
www.skylineimobiliaria.imobibrasil.net
www.tatianaalves.com.br
www.tatianaalves.imobibrasil.net

Other certificates including the domain name tatianaalves.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tatianaalves.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz17BztTt+BK7QtJPV40j
kxzLMqPooaTcKjgDl4hT1bVsD49f/rnlvEPY5bEpiuPzUMznzUN/4MFgc5sd2yiv
lG70y/eY5gK2X8GJ7QrVr9kq5vKoGUE4UlQWr95x0NoSPSB3Yyy5sTSsDSE5Yv34
KGyGOPjmjL1U9CzQDqFSb6a8a32AP9yckkzxyAeLkhh381XS49yFX1vjYgnkDx/v
wSXm8KNcnc6YgHgMaPV/FtljYvFoRVqRbZ7CqW2HC4ZuI51FfURtNbAx9lE/e72i
Dn8Eu8d90KDtT1Kxd3e0J1HkYIhN4wrZziuzURSjZYTawGicuGBt4gOFI17CdmCs
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261402350868276344672436667707302666403713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 13:23:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 13:23:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tatianaalves.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26178055576889264516445677948809259502514250158719899201926638127531047573441094658823634949771131643727009896642276018079780507178659261865970899601708061059601679669692805843934795494570740250096798584641420021506546300812876114448821001251991826937115538398388228156407085341489673459420230467538850095070257818566134222052105069949828562680578302608946754406547626864509158127319256722906407394631292899711018506420909713091466390437171152958147046370798041377378023956546500514555672177363425680721831120434085901755130383682669818253449593334819906837350078294482669273274839329119567373278121611913033334959227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							940c12e7e0206e17217beb8b7340cdafb87d63e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (703 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.douglasmoiteimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r2imoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douglasmoiteimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfbrokers.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r2imoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sindiximobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatianaalves.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andreflima.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corretorwilliam.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasmoiteimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evangelistaimoveisdf.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imovelachado.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janinabastoscorretora.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfbrokers.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfbrokers.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.r2imoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebecacorretoraimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sindiximobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sindiximobiliaria.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skylineimobiliaria.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatianaalves.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatianaalves.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e668b558b00000403004730450220558e67dfc00fafc8f28105e564a86d0417ac4f62ff6b73a60f028bb326b9a7620221009be0568cbb20ea85c88efb7fb92c0186cdba947ccefbe18dd21ace169384ebe8007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e668b557300000403004630440220407a597a4c08ab6f4fe20fdfe0ee10915fd228f268e5e016ee271f49cac6f82902201f6a24c56c1c2ed0ae4381e683637600119e3e137e430ba51ec0b657954e86c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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