ccdealer.fiat.com.br

- FCA FIAT CHRYSLER AUTOMOVEIS BRASIL LTDA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:fc:96:32:1c:36:cf:4e:7a:4c:9a:78:d4:3e:09:7d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FCA FIAT CHRYSLER AUTOMOVEIS BRASIL LTDA

Organization: FCA FIAT CHRYSLER AUTOMOVEIS BRASIL LTDA
State / Province: Minas Gerais
Locality: Betim
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:fc:96:32:1c:36:cf:4e:7a:4c:9a:78:d4:3e:09:7d
Serial Number (int): 3969961131501123018755203040651643261
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 44:b6:19:87:81:c1:ed:a6:b8:14:f4:ab:02:3c:00:17:83:ea:eb:5f
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): e4:34:06:02:cc:ec:46:35:0a:f8:a6:3e:e9:51:1e:04:7d:3d:6b:01
Fingerprint (sha256): 00:88:5b:c0:ff:e4:66:7a:16:df:81:46:1c:7a:29:4d:84:f2:b2:36:ea:b9:99:83:ee:43:0a:c9:a9:9a:51:fa

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate ccdealer.fiat.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ccdealer.fiat.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ccdealer.fiat.com.br

Other certificates including the domain name fiat.com.br

(limited to 100 certificates)
ccdealer.fiat.com.br
espaider.fiat.com.br
www.fiat.com.br
scp.fiat.com.br
www.fiat.com.br
www.fiat.com.br
efs.fiat.com.br
scp.fiat.com.br
sapiensr3.fiat.com.br
www.fiat.com.br
app.fiat.com.br
www.fiat.com.br
www.fiat.com.br
paixaopelofutebol.fiat.com.br
www.fiat.com.br
obtlatam.fiat.com.br
cceservice.fiat.com.br
www.fiat.com.br
www.fiat.com.br
elog.fiat.com.br
*.fiat.com.br
beneficiosbianco.fiat.com.br
*.portalstellantis.com.br
elog.fiat.com.br
autoseg.fiat.com.br
www.fiat.com.br
boleto.fiat.com.br
fiat.com.br
ccdealer.fiat.com.br
www.fiat.com.br
www.fiat.com.br
painelcontrole.fiat.com.br
*.fcalatam.com.br
obtlatam.fiat.com.br
fiat.com.br
cmpsms.fiat.com.br
www.fiat.com.br
email.fiatgroup.com
www.fiat.com.br
rtmmecanica.fiat.com.br
sapiensr3.fiat.com.br
scp.fiat.com.br
espaider.fiat.com.br
integracaocrm.fiat.com.br
www.fiat.com.br
www.webdealer.fiat.com.br
boleto.fiat.com.br
www.fiat.com.br
services-tcae-bra-prod.fiat.com.br
*.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
scp.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
rtmcarroceria.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
*.fcalatam.com.br
boletocpfh.fiat.com.br
*.fiat.com.br
ac.fiat.com.br
msc.fiat.com.br
services-tcae-bra-prod.fiat.com.br
espaiderfca.fiat.com.br
www.fiat.com.br
*.fiat.com.br
www.fiat.com.br
sapiensbw.fiat.com.br
*.fiat.com.br
sapiensr3.fiat.com.br
fcalatam.com
www.paixaopelofutebol.fiat.com.br
*.fiat.com.br
painelcontrole.fiat.com.br
www.fiat.com.br
elog.fiat.com.br
www.fiat.com.br
fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.paixaopelofutebol.fiat.com.br
qca.fiat.com.br
fcalatam.com
beneficiosrosso.fiat.com.br
paixaopelofutebol.fiat.com.br
scp.fiat.com.br
promocaobigdrive.fiat.com.br
www.fiat.com.br
cceservice.fiat.com.br
www.fiat.com.br
elog.fiat.com.br
www.paixaopelofutebol.fiat.com.br
www.fiat.com.br
www.fiat.com.br

Certificate

The complete raw certificate details for ccdealer.fiat.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm4vgpuLv8UCx0n5rnlF
zEVgDbJ4vsJjEqvO0bxZSc+WPVaybI3cRSRybSlWSiGx4eTaV/TsUNhetlR80Yt1
vs+r+BEF6OsR5uFw4Iqp019KS3zL02PZ5MRQadCDN6afrTAiYKjKfE8EFvw3wltV
eSwKtR4FmOCVxg85ygxggUm+pw6afsK7FYC8GEIzlQGIsGP6ivbSh47DxJX10X64
W6cofiE2FvSFehWGdY/BEcwT2h6VrxEHHnrXFSj0etXciOoYGhdix6vKfdYAqWfs
rg2rLa1nPzWJEGXov7VZDX4boL8htFjmNHzZHUJ6Pwcm3x6YQGZpPLCW4johEeGf
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3969961131501123018755203040651643261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minas Gerais'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Betim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FCA FIAT CHRYSLER AUTOMOVEIS BRASIL LTDA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ccdealer.fiat.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23029706041682565358327882008071702950278150225259978260912315472472058143293135029479010128042441923205208516773150536902677039417439413231584735018611886541593381285153341071297881495085357885472864993888878878547525062633121955612533951381958454425224990027807609874747677783073227070316233868520315156248332901478696926013283940357878550027315843443014907256092701631579248049486022062713025195179095312996212552111436618070391978919119596278986315315317016805201653844706428550437555572425841841810266420997558694539317426426533709127433752552333308690905367281103852379556385652135638783079513640536328133255109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44b6198781c1eda6b814f4ab023c001783eaeb5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdealer.fiat.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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