baldyimoveis.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:69:cd:68:d6:53:2c:7c:fb:70:ff:26:09:af:da:7b:d1:be was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=baldyimoveis.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:cd:68:d6:53:2c:7c:fb:70:ff:26:09:af:da:7b:d1:be
Serial Number (int): 297339542407013835084318269978642929668542
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:76:1f:74:53:c8:8d:90:55:f6:2d:45:a1:9e:48:81:9b:8d:d3:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:46:67:87:89:3e:e8:15:08:a7:78:96:e5:62:ea:af:6a:88:bd:91
Fingerprint (sha256): cd:1a:f0:f3:b1:b8:cc:05:dd:cd:f2:29:e1:fa:88:b0:ab:fa:f0:48:f0:51:5a:d3:61:01:92:bf:74:d1:ed:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate baldyimoveis.com.br

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baldyimoveis.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.baldyimoveis.com
*.baldyimoveis.com.br
*.fabiobaldybroker.com.br
baldyimoveis.com
baldyimoveis.com.br
fabiobaldybroker.com.br
www.altopadraosorocaba.baldyimoveis.com
www.baldy.baldyimoveis.com
www.baldyimoveis.baldyimoveis.com
www.blog.baldyimoveis.com
www.fabiobaldybroker.baldyimoveis.com
www.lancamentosdeimoveis.baldyimoveis.com

Other certificates including the domain name baldyimoveis.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for baldyimoveis.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaYCKyt+mWTKwyQSdwWz
88NSrmbLL5yYuQLucoVRz/8m3wEHmHz/Jr8EbwWnmAlVJsDHrTmYmqrCkj8DPnH6
bpmL2QdxMFymJviW07fxZrZBcLyYt9Od7RbiZKxdp+au+cZx0Rx3ji3/N5zdXBbA
F1F+PZe0hg7UxgWRo+u3Y8Daw7vritcRPm6B91+jsCSwyUd7wVeX6x9NbFbYFXlO
gmcHrNd931qZvp6MXEKa/yb60Qo/l6JpUH/SaZbpa6OcfkxVik5OchoI7KOzirH4
MU3W/67kRvw+/qAPz9RsCs9BXdeG/9v41jMLtf8L97SdVDAh3rsTvr8nJVwFvfRh
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297339542407013835084318269978642929668542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 07:25:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 07:25:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baldyimoveis.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24950807906504449861092504100573994764107506998569649060955589261675368234128924257064968463271938912264902815692250840405136863980645071305252075938239068790474178241606519278175677923214995389760049046645823118221277772493455404924011987993893123732385696184437517594392689783708283392952625244473647876695429820533476582914826679692861651025538638667131758438604182554151284259765651555716206246653372793851007975616739171137607658538001017744240113287836323018475857558699086892336345185364961090943071074692076254630657760118591499387167462169682136060606885402664442005724401342284546577689642484991444080943491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2761f7453c88d9055f62d45a19e48819b8dd3db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (351 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baldyimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabiobaldybroker.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldyimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabiobaldybroker.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altopadraosorocaba.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldy.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldyimoveis.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabiobaldybroker.baldyimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lancamentosdeimoveis.baldyimoveis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ced53bcff0000040300463044022011814a66ffbbebc4987c59729bfad275f6ef0291ab4d9538a065d13461f2fce9022025cd1898041e9b3e491068ba74546c60779f92903c31d3bec01abae2776c56350077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ced53bd340000040300483046022100b2d7a14d8597cd0fd146d7721a8232a37f12779eaa2bc354cd78a579570d8bea022100f6c5de8b18f9fe458ee1879b2eaf0768c263ddc392396c4e0185f4e5b61942f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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