oliveirani.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:a6:97:18:80:df:fb:36:fd:e0:de:00:0c:86:de:21:6b was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oliveirani.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:a6:97:18:80:df:fb:36:fd:e0:de:00:0c:86:de:21:6b
Serial Number (int): 323489684956005829230807645460260670284139
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:7e:59:a8:ae:c7:7b:fc:f6:c4:a0:4d:1f:1c:20:4c:d2:21:37:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:a0:b5:40:e0:07:9b:5c:32:cb:ca:a2:0f:a8:a1:02:fe:78:92:f7
Fingerprint (sha256): b9:89:07:86:b1:e7:28:f1:99:f4:8c:d7:01:e0:b6:c4:be:e4:c5:d3:34:df:a6:b1:a5:96:29:d8:3d:00:c1:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate oliveirani.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oliveirani.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assinaimobiliaria.com.br
assinaimobiliaria.imobibrasil.net
cpanel.assinaimobiliaria.com.br
cpanel.dprimoimoveis.com.br
cpanel.oliveirani.com
dprimoimoveis.com.br
dprimoimoveis.imobibrasil.net
mail.assinaimobiliaria.com.br
mail.dprimoimoveis.com.br
mail.oliveirani.com
oliveirani.com
oliveirani.imobibrasil.net
webdisk.assinaimobiliaria.com.br
webdisk.dprimoimoveis.com.br
webdisk.oliveirani.com
webmail.assinaimobiliaria.com.br
webmail.dprimoimoveis.com.br
webmail.oliveirani.com
www.assinaimobiliaria.com.br
www.assinaimobiliaria.imobibrasil.net
www.dprimoimoveis.com.br
www.dprimoimoveis.imobibrasil.net
www.oliveirani.com
www.oliveirani.imobibrasil.net

Other certificates including the domain name oliveirani.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for oliveirani.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK9ynrJCUJiT74NqOQF3
MIz10ffZb48ytMYtVN5vaMeCsijsIU/3Fc/JNpFCNYLgVOEXCEROmawq+LuEM8d6
zYGR7DJFkJScJY4t1Ho1Os81H7KQdRx154NP/bXR1sLSDHi83aY7cnll4N+vucTT
DrLIeIvkHB3+HK4I43wLAvK7Or9oP9/bM8euPy2eKHcZav6LrdJxA2s8z0mUICpP
iKyDuU94dAa0FGtnY+hHnR+fptDSBwAtsExC14NkxVcsCkCc7dw+HFvIdoEHyWG8
tjqdS94rxAga2jWnecvMI1YkV38o/2rfQTrQOsAvV/IJX+NnxQqnLkSduwVE1bsF
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323489684956005829230807645460260670284139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 06:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-30 06:38:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oliveirani.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25334177495368092778359290684176092379529182344366293868283235521401728861654498376569370807937575287269622562058965365313131903492699568961253832885661814053069491166976375732469834751612244864580456956197973171622070182107842090439318772282574373308115676619595715774768771832861315005084241946146816494038341956994430488467040219328206313906848002059248110724305534312689627298254981693327341575010568645421826939141039607184408576041684054051297176769931613136826706687218167588972179308571188408867017490348826585543015814129662318409836904357607037623177640703208484356878836438882059661279020994325265017144749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							957e59a8aec77bfcf6c4a04d1f1c204cd221375e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinaimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinaimobiliaria.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.assinaimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.dprimoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.oliveirani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dprimoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dprimoimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.assinaimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dprimoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oliveirani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliveirani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliveirani.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.assinaimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.dprimoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.oliveirani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.assinaimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.dprimoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oliveirani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assinaimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assinaimobiliaria.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dprimoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dprimoimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliveirani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliveirani.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167fe0d3a2a0000040300473045022006a4c494da75df54bbcd32a7cb075a37723e9e7e64a818cad98051d4d0f6f97e022100ce27cdeb29aa509345956f7853b69de8d8bcc4db6fd3abe999ef1617161e4b6700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167fe0d3c1c00000403004630440220343c15f02d912daf9221eef7881c664652ee0d32c32ba0d92e0dfabbbf5366bd022075306f4a77603094fff9aab5fb7dcf7a31c5fabbd5cb564a8f05afbd09071993
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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