web-cert1.vivo.com.br

Issued by Valid Certificadora Digital AlphaSSL CA 2018

About this certificate

This digital certificate with serial number 50:94:3d:2c:6a:19:68:e3:57:67:ab:e4 was issued on by VALID CERTIFICADORA DIGITAL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=web-cert1.vivo.com.br

VALID CERTIFICADORA DIGITAL

Organization: VALID CERTIFICADORA DIGITAL
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 50:94:3d:2c:6a:19:68:e3:57:67:ab:e4
Serial Number (int): 24938010690668022075488709604
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 20:52:71:93:33:ad:64:8b:5c:cc:26:ef:d2:28:52:e5:24:58:bc:3a
AuthorityKeyId: 88:07:ee:19:0a:28:60:48:a6:ce:58:ab:e7:86:ac:7d:c5:46:26:32

Fingerprint (sha1): 88:ed:85:76:dc:79:20:f8:3b:9b:cf:fd:e8:08:a6:68:c9:6e:21:f5
Fingerprint (sha256): 00:39:3e:71:e0:7f:f5:6f:a6:a6:de:a3:9a:5f:1f:5e:5e:33:0d:f1:38:b7:8c:b5:f6:c2:ec:c1:16:54:91:01

Issuing Certificate URL: http://secure.globalsign.com/cacert/validalphasslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/validalphasslca2018
CRL Distribution Point: http://crl.globalsign.com/validalphasslca2018.crl

Check the revocation status for certificate web-cert1.vivo.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web-cert1.vivo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web-cert1.vivo.com.br

Other certificates including the domain name vivo.com.br

(limited to 100 certificates)
appstore.vivo.com.br
www.portalsva3.vivo.com.br
web-cert1.vivo.com.br
tracking.vivo.com.br
auth.vivo.com.br
web-cert2.vivo.com.br
scc.vivo.com.br
dashboardbnachml.vivo.com.br
autenticaint.vivo.com.br
denodo.vivo.com.br
protecao.vivo.com.br
image.serviciokia.com.ec
www.loja.vivo.com.br
consorcio.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
*.cpq.b2b.vivo.com.br
image.serviciokia.com.ec
vivo360.vivo.com.br
click.vivo.com.br
extranet-bancos.vivo.com.br
web-cert3.vivo.com.br
auth-esteira1.vivo.com.br
tracking.vivo.com.br
easl2.pre.gestaocontactcenter.vivo.com.br
hml1036-meuvivo.vivo.com.br
configuraraparelhos.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
recarga-api.vivo.com.br
homeassist.vivo.com.br
sni.cloudflaressl.com
auth.vivo.com.br
api.digital.vivo.com.br
login.vivo.com.br
lojaempresas.vivo.com.br
movimenta.vivo.com.br
homeassist.vivo.com.br
celular.vivo.com.br
sni.cloudflaressl.com
accounts-api.vivotools.com.br
lgpdfront.vivo.com.br
spdt.vivo.com.br
accounts-api.vivotools.com.br
vivostore.vivo.com.br
autenticaintx5.vivo.com.br
sni.cloudflaressl.com
callidus.vivo.com.br
joguejunto.vivo.com.br
lojavirtual.vivo.com.br
autenticaint.vivo.com.br
www.vivo.com.br
appstore.vivo.com.br
mvms.vivo.com.br
integracao.vivo.com.br
segurancaonline.vivo.com.br
sni.cloudflaressl.com
meuvivofixo.vivo.com.br
servicos.vivo.com.br
*.mve.vivo.com.br
author.lojaempresas.vivo.com.br
esteira2-mve.vivo.com.br
gedoc.vivo.com.br
image.serviciokia.com.ec
loja.vivo.com.br
vivoemdia.vivo.com.br
mvapp.vivo.com.br
director.virtualdesktop.vivo.com.br
pre-meuvivo.vivo.com.br
mvapp.vivo.com.br
sni.cloudflaressl.com
mve.vivo.com.br
image.serviciokia.com.ec
accounts-api.vivotools.com.br
vivostore.vivo.com.br
www.vivo.com.br
iqdirect.com.br
author.lojaempresas.vivo.com.br
mve.vivo.com.br
sni.cloudflaressl.com
autentica-esteira2.vivo.com.br
minas.vivo.com.br
contadigital.vivo.com.br
internetgratis.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
portal.virtualdesktop.vivo.com.br
joguejunto.vivo.com.br
mailbr2.telefonica.com
servicos.vivo.com.br
seguros.vivo.com.br
cognos.vivo.com.br
sni.cloudflaressl.com
meuvivo.vivo.com.br
aceitedigital-qa3.vivo.com.br
autenticaintx5.vivo.com.br
sgrs.vivo.com.br
sni.cloudflaressl.com
temvivopratudo.vivo.com.br

Certificate

The complete raw certificate details for web-cert1.vivo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh1af0mOSeGX1xkE7fNf
2/vURCbmO1oV8JIrS9g5P2HfSe6LBtx1v43mAQiIyShkgDJJobrBTRvYiE4FH43P
U/Zye8QyZKnHyuxLAOhFY6mPdUI4BkDmG7i+EMNVMinIvDwaIhWYDalITUiwFRBD
buhyC2R10aJjer9q37subTt7K41/EgHV1a7OucarSKhRttpW56qnB660tGcs5fic
G3376YvYdevJ/sJbIAiJruiu47cfGJk43NmWoPQ4nYbQJ5hIELOicUvqy7kmrxwV
GPWDG44LKfWHXafWZcxmpvEu5tIL8o9Rts5WtlnQuWwuUw1/MVvlpN96Svku2kwf
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24938010690668022075488709604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VALID CERTIFICADORA DIGITAL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valid Certificadora Digital AlphaSSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-04 13:16:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 13:16:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web-cert1.vivo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19455173717446909226618953674921892202654414110170196047698546008692236583313970308104731840739499806798855150777593955771066734728895917669995398908480191659459441273260877703721397901147492197874964839109516180634518040578942003084282913806297489110607925550669749041279374414706015862145695682367436538283198736015147446212022128662754505611931491814299563621486695697065507017233495292973794019590851756578135917609173190164020408476404091976752806938904511517534132578791911902929677005345249931144282439551418217942914281420450327000603696707149239755827220612422167372979877846289336295183574846340657826242423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/validalphasslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/validalphasslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/validalphasslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-cert1.vivo.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8807ee190a286048a6ce58abe786ac7dc5462632
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2052719333ad648b5ccc26efd22852e52458bc3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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