cabofriobrasilimoveis.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:6c:49:b2:55:06:2a:81:c5:8f:f5:8d:7b:ee:77:15:97 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cabofriobrasilimoveis.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:6c:49:b2:55:06:2a:81:c5:8f:f5:8d:7b:ee:77:15:97
Serial Number (int): 332940094126898472785353674225496425436567
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:df:c5:2b:53:ee:36:80:7b:0e:e4:9e:f4:48:c1:a8:3c:30:75:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:f6:b7:ad:14:2a:77:95:15:ed:65:d7:33:a9:bb:6f:3b:86:6c:92
Fingerprint (sha256): ad:af:05:55:4b:15:6d:c4:ea:ce:53:87:fd:74:3f:f9:00:74:14:fe:54:99:a8:59:92:99:7a:20:07:03:4d:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cabofriobrasilimoveis.com.br

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cabofriobrasilimoveis.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cabofriobrasilimoveis.com.br
cabofriobrasilimoveis.imobibrasil.net
cpanel.cabofriobrasilimoveis.com.br
imoveisgb.com.br
imoveisgb.imobibrasil.net
mail.cabofriobrasilimoveis.com.br
webdisk.cabofriobrasilimoveis.com.br
webmail.cabofriobrasilimoveis.com.br
www.cabofriobrasilimoveis.com.br
www.cabofriobrasilimoveis.imobibrasil.net
www.imoveisgb.com.br
www.imoveisgb.imobibrasil.net

Other certificates including the domain name cabofriobrasilimoveis.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for cabofriobrasilimoveis.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j3Y2E0vYBHhCMBSMU4K
Siok2aTVeoQU7Xkj02yCjJDCfLkSl7dPyhqLvFQ9xH12B1ocFUJ4up5CkhmAYa1j
P3t2HhSOC7KEMQDYJBht8p+/UPLUEx3u1dIT4fIzfURGcMBV7hNZmp1Jv6F766ws
ECeoBpuKj8KKMnhL4D1OGrI3MVm+2zCNEfef4dH2GBre0/+ULvbL7649BidHTSy8
VQX/6yzZL72XUGA7MQ4vorq+Mie78USZ9ed3Q50nYb5eEB3BZ6GSHHdVS0/1NXtn
/wLhZT+Be31FxwI8T7VYdJHThZGexVz6O8jMZLm8UuOleO+ZWkkDCax9nT+Q5Ady
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332940094126898472785353674225496425436567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 16:43:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 16:43:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cabofriobrasilimoveis.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28560354839603261199529889963824426009656866811740974068649729518374444509283353793547176991886342787785248723957641144126775120295426625205907946593260121284000276042706247410464576275906826879814672160238137069153002892683308942915787904644254427530169831205997055288687291550144997023954396652864498036572504273670804285426401048416328932804513107918699604125809504612114394469438917948292027968222509012063063352915630929959707032574488083866997348712894102630063276953562461930070495287931838973570459485150489183106702731255310506687009079516116290678256559154887688369003651991599440741372195806633261057667759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99dfc52b53ee36807b0ee49ef448c1a83c30758a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (396 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabofriobrasilimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabofriobrasilimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cabofriobrasilimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoveisgb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoveisgb.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cabofriobrasilimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cabofriobrasilimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cabofriobrasilimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabofriobrasilimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabofriobrasilimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveisgb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveisgb.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cfd5ff771000004030046304402200a2b5e80cc0c2efd5777c3bd7dd2504f113ca618da47cd3a2a50563de6a016d502201fa3bd87c98e41de920b29f41e8d2d968d343cbfd381af3ba23ef79b1c5c4aa6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cfd5ff791000004030047304502204b95e681badba20b53078069d5eeff1345178d78570b23cfb72039e7dc369527022100804cded5571ba3ac36bfd635a0531435fba25a507966f8f27a22d40140c8e466
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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