auth-esteira1.vivo.com.br

- TELEFONICA BRASIL S A -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 17:12:43:6c:52:b4:c9:73:04:b9:9d:66 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TELEFONICA BRASIL S A

Organization: TELEFONICA BRASIL S A
State / Province: SP
Locality: SAO PAULO
Country: BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:12:43:6c:52:b4:c9:73:04:b9:9d:66
Serial Number (int): 7140234287406321835431271782
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 8e:d5:52:d7:68:58:e2:be:d2:6c:27:de:7e:2b:6a:5b:d4:99:48:dc
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): eb:cb:97:98:f4:42:47:03:aa:59:62:e0:76:64:35:f1:f5:73:24:3e
Fingerprint (sha256): 02:08:3b:f6:2b:84:e6:c2:dc:0b:be:ec:8d:00:14:11:06:71:78:5e:56:22:55:58:33:c1:90:d0:43:40:70:1d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate auth-esteira1.vivo.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth-esteira1.vivo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth-esteira1.vivo.com.br

Other certificates including the domain name vivo.com.br

(limited to 100 certificates)
appstore.vivo.com.br
www.portalsva3.vivo.com.br
web-cert1.vivo.com.br
tracking.vivo.com.br
auth.vivo.com.br
web-cert2.vivo.com.br
scc.vivo.com.br
dashboardbnachml.vivo.com.br
autenticaint.vivo.com.br
denodo.vivo.com.br
protecao.vivo.com.br
image.serviciokia.com.ec
www.loja.vivo.com.br
consorcio.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
*.cpq.b2b.vivo.com.br
image.serviciokia.com.ec
vivo360.vivo.com.br
click.vivo.com.br
extranet-bancos.vivo.com.br
web-cert3.vivo.com.br
auth-esteira1.vivo.com.br
tracking.vivo.com.br
easl2.pre.gestaocontactcenter.vivo.com.br
hml1036-meuvivo.vivo.com.br
configuraraparelhos.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
recarga-api.vivo.com.br
homeassist.vivo.com.br
sni.cloudflaressl.com
auth.vivo.com.br
api.digital.vivo.com.br
login.vivo.com.br
lojaempresas.vivo.com.br
movimenta.vivo.com.br
homeassist.vivo.com.br
celular.vivo.com.br
sni.cloudflaressl.com
accounts-api.vivotools.com.br
lgpdfront.vivo.com.br
spdt.vivo.com.br
accounts-api.vivotools.com.br
vivostore.vivo.com.br
autenticaintx5.vivo.com.br
sni.cloudflaressl.com
callidus.vivo.com.br
joguejunto.vivo.com.br
lojavirtual.vivo.com.br
autenticaint.vivo.com.br
www.vivo.com.br
appstore.vivo.com.br
mvms.vivo.com.br
integracao.vivo.com.br
segurancaonline.vivo.com.br
sni.cloudflaressl.com
meuvivofixo.vivo.com.br
servicos.vivo.com.br
*.mve.vivo.com.br
author.lojaempresas.vivo.com.br
esteira2-mve.vivo.com.br
gedoc.vivo.com.br
image.serviciokia.com.ec
loja.vivo.com.br
vivoemdia.vivo.com.br
mvapp.vivo.com.br
director.virtualdesktop.vivo.com.br
pre-meuvivo.vivo.com.br
mvapp.vivo.com.br
sni.cloudflaressl.com
mve.vivo.com.br
image.serviciokia.com.ec
api.digital.vivo.com.br
accounts-api.vivotools.com.br
vivostore.vivo.com.br
www.vivo.com.br
iqdirect.com.br
author.lojaempresas.vivo.com.br
mve.vivo.com.br
sni.cloudflaressl.com
autentica-esteira2.vivo.com.br
minas.vivo.com.br
contadigital.vivo.com.br
internetgratis.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
portal.virtualdesktop.vivo.com.br
joguejunto.vivo.com.br
mailbr2.telefonica.com
servicos.vivo.com.br
seguros.vivo.com.br
cognos.vivo.com.br
sni.cloudflaressl.com
meuvivo.vivo.com.br
aceitedigital-qa3.vivo.com.br
autenticaintx5.vivo.com.br
sgrs.vivo.com.br
sni.cloudflaressl.com

Certificate

The complete raw certificate details for auth-esteira1.vivo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvp7ujICwrdWjNc5EJ8G
/hlk2c49iK9UnAbGStiy5w59gXLNVeivKcqnrAcVsApVB6gU++xgRLonQBeNJ+3V
YlVbEB2GqWRGQ3Wdtt6LErdfBVSXyL+zUca3hfDlLD5G+eBaRbBTRHdnSRqdzYCA
CficickR611Y5J4G85J3ctEj7eiMATEAMej8SKZimKGdRX4TzaptNYZTMg6gDhzH
VhjINoxheziUuv5FjszlNY7GrGqR9O+JsO1ZMITDKHrYE29IodlRHR8PK2+AknAA
KaXrW55BAzR0QwSJzdLY9FSyLFSPPdGFcuwtUkPXH2rb7BUcGQfHfddRrSuYQHuH
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7140234287406321835431271782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 11:31:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 11:31:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAO PAULO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TELEFONICA BRASIL S A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth-esteira1.vivo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22593936207629241407401051364006749605618648759885515491755182379690563765566776883101584004092551672195797527622052012983050519520008482644678630032483878953718803573849218132285745054593352977956180854920444650883559527574284113651049186506344745010442659100887535242400365905777075425938186901098332379762160428100424569365443999141947826696553433694936248503886132064766769637911346335777484523848305502330837147289310082837552095805531647343398015263252347587518739335684493529388888523677104919827888802921620784793240677701226736237569225493182015869394473117559841296160186733424999293233017604412192874792941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-esteira1.vivo.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ed552d76858e2bed26c27de7e2b6a5bd49948dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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