*.germanbernstein.com.br

Issued by R11

About this certificate

This digital certificate with serial number 04:f8:62:0e:00:dd:7f:11:5a:b4:0d:78:0d:ae:c9:48:65:6c was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.germanbernstein.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f8:62:0e:00:dd:7f:11:5a:b4:0d:78:0d:ae:c9:48:65:6c
Serial Number (int): 432969507776725416260516903984962317346156
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:a0:7a:94:75:4f:a0:98:ed:21:ce:a8:10:71:f0:ba:08:50:c4:2e
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 33:58:f0:1a:61:97:d9:4d:6c:eb:e8:20:28:42:7f:50:6d:d6:76:66
Fingerprint (sha256): aa:7a:88:70:44:eb:ed:4f:34:8f:a6:f2:51:69:2d:5a:03:19:53:7b:3a:f1:d5:0b:10:fa:57:5a:3d:3a:12:51

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate *.germanbernstein.com.br

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.germanbernstein.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.boeiraconsultoriaimob.com.br
*.gaiaimoveis.com.br
*.germanbernstein.com.br
*.imobibrasil.net
*.mmvcorretora.com
boeiraconsultoriaimob.com.br
gaiaimoveis.com.br
germanbernstein.com.br
leandroalvescorretor.com.br
lindifranco.com.br
mmvcorretora.com
www.aluguearacatuba.imobibrasil.net
www.boeiraconsultoriaimob.imobibrasil.net
www.conixempreendimentos.imobibrasil.net
www.dicoimoveis.imobibrasil.net
www.gaiaimoveis.imobibrasil.net
www.germanbernstein.imobibrasil.net
www.leandroalvescorretor.com.br
www.leandroalvescorretor.imobibrasil.net
www.lindifranco.com.br
www.lindifranco.imobibrasil.net
www.masterimoveisvalinhos.imobibrasil.net
www.mmvcorretora.imobibrasil.net

Other certificates including the domain name germanbernstein.com.br

(limited to 100 certificates)
*.germanbernstein.com.br
granimobi.com.br

Certificate

The complete raw certificate details for *.germanbernstein.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHOhZ/etgofcuKaDCEgD
/P8t1pLGjrDLquDJfIKBn/EoSGfUUVNd6viSBLy9OoEQwROUbup2I14U+kzwLFLS
tdYC64/IRit4XiHyvdNyNt3+F09u1nwmoJTHO/4DIEoM8sN3m9gIxMUoZMtHEeX3
1Y0dBIRzHuZRUdvcT0mM6H5mS9OsBNLOJgOalaVC5z/DcJZRAC9f42wRMJjjfoNy
zALiAZcCgcb5oBFVY7vaFIWlHVyWLCH3rAuFhKzD/eMqD4oVECNAmhhei4Uuv4QA
MracZuhhVnZLbsMUu45joKbcWOcmUB/HXzXePqCklT7LC0wwyGEF7T9q7tfmoeos
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432969507776725416260516903984962317346156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 16:49:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 16:49:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.germanbernstein.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20760101535514867968435526463977152835511741875595875474491136547758939420508598713680740005619065331713352165500515814578242004299337177842435171252495259553743086408678695841214700206184224487564470913470783159176672571767920468026414900904615505176924544009458631793165206126498518953708870322381036499459529981929023168435971104021245482561606404948595071616186637500214878922845463976850531645228130293064816938929735126201103650302170352327399246570453613433715847015121735928331221071180274583294160932288105090947566119891306979973923595726949855897270036129523496899149071022198133651468563711187399861742729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0a07a94754fa098ed21cea81071f0ba0850c42e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (698 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boeiraconsultoriaimob.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaiaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.germanbernstein.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmvcorretora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boeiraconsultoriaimob.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaiaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germanbernstein.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leandroalvescorretor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindifranco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmvcorretora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluguearacatuba.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boeiraconsultoriaimob.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conixempreendimentos.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dicoimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaiaimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germanbernstein.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leandroalvescorretor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leandroalvescorretor.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindifranco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindifranco.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterimoveisvalinhos.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmvcorretora.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff3d2257500000403004830460221009f028b0b37ad5e73a85e898f35c6469c2cfdd262281e1098cbbef8952dbc5958022100a2e6cda1faef20283abbd3b4c35eb0a17e8e1672ac69bbe6e4fd7354cf7e0633007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff3d226360000040300483046022100ba6839e3fdd945b9b18565937b453e91facbaa3cae12c384302cfb862f1acf8d022100ac2d5f13c4bfbc61c32b61444695de0fa9103bbbbeb9ddf29351af296a6a3137
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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