*.ebc.rnp.br
- REDE NACIONAL DE ENSINO E PESQUISA - RNP -
Issued by RNP ICPEdu OV SSL CA 2019
About this certificate
This digital certificate with serial number 66:9b:e4:0e:9c:83:78:4c:c9:75:5b:ee was issued on by Rede Nacional de Ensino e Pesquisa - RNP.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
REDE NACIONAL DE ENSINO E PESQUISA - RNP
Organization:
REDE NACIONAL DE ENSINO E PESQUISA - RNP
State / Province:
Rio de Janeiro
Locality: Rio de Janeiro
Country: BR
Locality: Rio de Janeiro
Country: BR
Rede Nacional de Ensino e Pesquisa - RNP
Organization:
Rede Nacional de Ensino e Pesquisa - RNP
Country:
BR
This certificate will expire on
Certificate Details
Serial Number (hex): 66:9b:e4:0e:9c:83:78:4c:c9:75:5b:eeSerial Number (int): 31755931472907966006108183534
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 68:d5:98:07:82:62:0a:6f:4b:e9:2f:44:60:35:8f:38:0b:9f:e2:21
AuthorityKeyId: ab:30:c7:07:28:4b:cb:7a:8e:5b:fe:61:69:f7:d4:7a:b2:85:9b:48
Fingerprint (sha1): a4:3a:27:dd:0d:08:72:22:f6:53:8c:1d:eb:57:dd:ad:8d:5e:be:2f
Fingerprint (sha256): 03:7e:88:68:35:d0:93:06:52:65:cf:7b:c1:0f:41:7e:86:cd:f4:aa:ef:ba:d8:ca:83:8d:10:14:55:db:b7:da
Issuing Certificate URL: http://secure.globalsign.com/cacert/rnpicpeduovsslca2019.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/rnpicpeduovsslca2019CRL Distribution Point: http://crl.globalsign.com/rnpicpeduovsslca2019.crl
Check the revocation status for certificate *.ebc.rnp.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ebc.rnp.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ebc.rnp.br
ebc.rnp.br
ebc.rnp.br
Other certificates including the domain name rnp.br
(limited to 100 certificates)
*.teste16.tst.apps.rnp.br
cert00047-azurecdn.akamaized.net
lcp-drm.prd.app.rnp.br
cert00047-azurecdn.akamaized.net
viaipe.rnp.br
*.pop-mt.rnp.br
homolog.perfil.rnp.br
marker-eduroam.rnp.br
*.dev.mconf.rnp.br
cert00047-azurecdn.akamaized.net
hipchat-pratico.rnp.br
hmg.splunk.rnp.br
atendimento.rnp.br
www.pop-pi.rnp.br
filesender.rnp.br
va05-cps.rnp.br
*.ebc.rnp.br
splunk.rnp.br
nuvem.esr.rnp.br
mp.mconf.rnp.br
*.teste17.tst.apps.rnp.br
p1.icpedu.rnp.br
*.pop-ba.rnp.br
*.cafe.rnp.br
viaipecoletor-rn.rnp.br
*.pop-pr.rnp.br
*.repositorio.rnp.br
cert00047-azurecdn.akamaized.net
*.fies.hmg.apps.rnp.br
portal-fibre.cafeexpresso.rnp.br
git.pop-pi.rnp.br
dados.rnp.br
*.curadoria-homolog.rnp.br
centreon-cdc-pe.rnp.br
*.pop-pe.rnp.br
appstarter-exemplo.tst.apps.rnp.br
*.intbr.loadtest.apps.rnp.br
*.cafeexpresso.rnp.br
flow.hmg-nasnuvens.rnp.br
*.pop-al.rnp.br
cert00047-azurecdn.akamaized.net
*.pop-ce.rnp.br
*.pop-mg.rnp.br
mconf.rnp.br
*.cipo.rnp.br
cert00047-azurecdn.akamaized.net
centreon-ac.rnp.br
portal.iguassu.rnp.br
*.nasnuvens.gsc-tst.rnp.br
cert00047-azurecdn.akamaized.net
api.ciencianaescola.dev.apps.kloud.rnp.br
redecinema.rnp.br
*.ceo.rnp.br
hmg-git.rnp.br
*.teste16.prd.apps.rnp.br
*.h.mconf.rnp.br
*.impactaclima-hmg.rnp.br
monitoramento-hml.rnp.br
mail.pop-pi.rnp.br
edge-ac-01.eduplay.rnp.br
*.pop-ac.rnp.br
intbr.tst.apps.rnp.br
atestoweb-api.hmg.apps.kloud.rnp.br
gti-df-senhasegura-01.rnp.br
api.cep.tst.apps.kloud.rnp.br
*.intbr.tst.apps.rnp.br
hmg-idp-edu-v3.rnp.br
idp.rnp.br
centreon-mg.rnp.br
plag.prd.apps.rnp.br
diplomadigital.rnp.br
integra.rnp.br
cert00047-azurecdn.akamaized.net
plataformafor.tst.apps.rnp.br
encsirts.rnp.br
cloud.pop-pi.rnp.br
cert00047-azurecdn.akamaized.net
viaipecoletor-am.rnp.br
centreon-rr.rnp.br
listas.rnp.br
*.pop-mg.rnp.br
ustore1.rnp.br
mail.pop-pi.rnp.br
*.nasnuvens.gsc-hmg.rnp.br
evault02.rnp.br
cert00047-azurecdn.akamaized.net
rocketchat.rnp.br
vcenter-infras-locais.rnp.br
cert00047-azurecdn.akamaized.net
cadvisor.prometheus.pop-mg.rnp.br
cert00047-azurecdn.akamaized.net
graylog.pop-ma.rnp.br
cert00047-azurecdn.akamaized.net
intbr.prd.apps.rnp.br
homolog-icd.rnp.br
ustore1.rnp.br
*.filesender.rnp.br
www.pop-pi.rnp.br
vcenter-np.rnp.br
cafeexpresso.rnp.br
cert00047-azurecdn.akamaized.net
lcp-drm.prd.app.rnp.br
cert00047-azurecdn.akamaized.net
viaipe.rnp.br
*.pop-mt.rnp.br
homolog.perfil.rnp.br
marker-eduroam.rnp.br
*.dev.mconf.rnp.br
cert00047-azurecdn.akamaized.net
hipchat-pratico.rnp.br
hmg.splunk.rnp.br
atendimento.rnp.br
www.pop-pi.rnp.br
filesender.rnp.br
va05-cps.rnp.br
*.ebc.rnp.br
splunk.rnp.br
nuvem.esr.rnp.br
mp.mconf.rnp.br
*.teste17.tst.apps.rnp.br
p1.icpedu.rnp.br
*.pop-ba.rnp.br
*.cafe.rnp.br
viaipecoletor-rn.rnp.br
*.pop-pr.rnp.br
*.repositorio.rnp.br
cert00047-azurecdn.akamaized.net
*.fies.hmg.apps.rnp.br
portal-fibre.cafeexpresso.rnp.br
git.pop-pi.rnp.br
dados.rnp.br
*.curadoria-homolog.rnp.br
centreon-cdc-pe.rnp.br
*.pop-pe.rnp.br
appstarter-exemplo.tst.apps.rnp.br
*.intbr.loadtest.apps.rnp.br
*.cafeexpresso.rnp.br
flow.hmg-nasnuvens.rnp.br
*.pop-al.rnp.br
cert00047-azurecdn.akamaized.net
*.pop-ce.rnp.br
*.pop-mg.rnp.br
mconf.rnp.br
*.cipo.rnp.br
cert00047-azurecdn.akamaized.net
centreon-ac.rnp.br
portal.iguassu.rnp.br
*.nasnuvens.gsc-tst.rnp.br
cert00047-azurecdn.akamaized.net
api.ciencianaescola.dev.apps.kloud.rnp.br
redecinema.rnp.br
*.ceo.rnp.br
hmg-git.rnp.br
*.teste16.prd.apps.rnp.br
*.h.mconf.rnp.br
*.impactaclima-hmg.rnp.br
monitoramento-hml.rnp.br
mail.pop-pi.rnp.br
edge-ac-01.eduplay.rnp.br
*.pop-ac.rnp.br
intbr.tst.apps.rnp.br
atestoweb-api.hmg.apps.kloud.rnp.br
gti-df-senhasegura-01.rnp.br
api.cep.tst.apps.kloud.rnp.br
*.intbr.tst.apps.rnp.br
hmg-idp-edu-v3.rnp.br
idp.rnp.br
centreon-mg.rnp.br
plag.prd.apps.rnp.br
diplomadigital.rnp.br
integra.rnp.br
cert00047-azurecdn.akamaized.net
plataformafor.tst.apps.rnp.br
encsirts.rnp.br
cloud.pop-pi.rnp.br
cert00047-azurecdn.akamaized.net
viaipecoletor-am.rnp.br
centreon-rr.rnp.br
listas.rnp.br
*.pop-mg.rnp.br
ustore1.rnp.br
mail.pop-pi.rnp.br
*.nasnuvens.gsc-hmg.rnp.br
evault02.rnp.br
cert00047-azurecdn.akamaized.net
rocketchat.rnp.br
vcenter-infras-locais.rnp.br
cert00047-azurecdn.akamaized.net
cadvisor.prometheus.pop-mg.rnp.br
cert00047-azurecdn.akamaized.net
graylog.pop-ma.rnp.br
cert00047-azurecdn.akamaized.net
intbr.prd.apps.rnp.br
homolog-icd.rnp.br
ustore1.rnp.br
*.filesender.rnp.br
www.pop-pi.rnp.br
vcenter-np.rnp.br
cafeexpresso.rnp.br
Certificate
The complete raw certificate details for *.ebc.rnp.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIMZpvkDpyDeEzJdVvuMA0GCSqGSIb3DQEBCwUAMGQxCzAJ BgNVBAYTAkJSMTEwLwYDVQQKEyhSZWRlIE5hY2lvbmFsIGRlIEVuc2lubyBlIFBl c3F1aXNhIC0gUk5QMSIwIAYDVQQDExlSTlAgSUNQRWR1IE9WIFNTTCBDQSAyMDE5 MB4XDTI0MDQwMTE5MDExNVoXDTI1MDUwMzE5MDExNFowgYkxCzAJBgNVBAYTAkJS MRcwFQYDVQQIEw5SaW8gZGUgSmFuZWlybzEXMBUGA1UEBxMOUmlvIGRlIEphbmVp cm8xMTAvBgNVBAoTKFJFREUgTkFDSU9OQUwgREUgRU5TSU5PIEUgUEVTUVVJU0Eg LSBSTlAxFTATBgNVBAMMDCouZWJjLnJucC5icjCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMjBJLPmlXtSRLmYnrRlHC0EWA+lmZlguL2r8Blbxm2uEX5a xZkgUgO4Mz18BUTHvZueU8rUwDNqpptP2Etfrm6Lcnxn3rHkP7x1qCW+QFpT858/ XkXljI0EPNCgJkQApwYtCFM9FuYECvKO/4WA3zbE2Wn/2WNb7lYWpL3p1KaLQ/ij i0MF6mTU3dzYl8NaieEMrmc0YoC+/7Kyab8FuW/JdKaetHrJ3nGKi/kdaEqxWvru NwEWP5FuVSa54OQR6cRR3TJw0gcDpX1JmQEHa+m7FhcOHrEnGiZLE4ZExoLUJ0px rR6smc4IQ/YHSDNfjjlKbMbMf8FD/97z5uyCe3MCAwEAAaOCAfIwggHuMA4GA1Ud DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGXBggrBgEFBQcBAQSBijCBhzBIBggr BgEFBQcwAoY8aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvcm5w aWNwZWR1b3Zzc2xjYTIwMTkuY3J0MDsGCCsGAQUFBzABhi9odHRwOi8vb2NzcC5n bG9iYWxzaWduLmNvbS9ybnBpY3BlZHVvdnNzbGNhMjAxOTBWBgNVHSAETzBNMEEG CSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWdu LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwQwYDVR0fBDwwOjA4oDagNIYyaHR0 cDovL2NybC5nbG9iYWxzaWduLmNvbS9ybnBpY3BlZHVvdnNzbGNhMjAxOS5jcmww IwYDVR0RBBwwGoIMKi5lYmMucm5wLmJyggplYmMucm5wLmJyMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBSrMMcHKEvLeo5b/mFp99R6 soWbSDAdBgNVHQ4EFgQUaNWYB4JiCm9L6S9EYDWPOAuf4iEwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABa0DppemlfBdqQXkmxZ+v8nC93x Ha+IcnOTnaKjbD+uumr9+msPfOTA0hTiglocdWwNuaRkglb7iSAWc2S/OT+VcHeQ 4y1W6pWUhKz/ivvo22q9sxE8GfidSTMnhRagrqOOV6XkvkbeYpA0LJrB1OcVqrS3 IVinoI9HXG4mfTUL++5qhatPz6Hq6duLrxHJMORZrYL63i+PBuXFY6kWSfXdiYIz pXnC5RiD9stzLuFGjQ1dm6QGU2UpbfN7KCHRYLS2yiGwALsRTUvQLHpRi0CbFADR VBOPsZ+9mykZ5i/eHQvNvYpmIWI0Ub15wBs2FGcnKfq5Lkzdsg79fFlOeak= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMEks+aVe1JEuZietGUc LQRYD6WZmWC4vavwGVvGba4RflrFmSBSA7gzPXwFRMe9m55TytTAM2qmm0/YS1+u botyfGfeseQ/vHWoJb5AWlPznz9eReWMjQQ80KAmRACnBi0IUz0W5gQK8o7/hYDf NsTZaf/ZY1vuVhakvenUpotD+KOLQwXqZNTd3NiXw1qJ4QyuZzRigL7/srJpvwW5 b8l0pp60esnecYqL+R1oSrFa+u43ARY/kW5VJrng5BHpxFHdMnDSBwOlfUmZAQdr 6bsWFw4esScaJksThkTGgtQnSnGtHqyZzghD9gdIM1+OOUpsxsx/wUP/3vPm7IJ7 cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 31755931472907966006108183534 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rede Nacional de Ensino e Pesquisa - RNP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RNP ICPEdu OV SSL CA 2019' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 19:01:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-03 19:01:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rio de Janeiro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rio de Janeiro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REDE NACIONAL DE ENSINO E PESQUISA - RNP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ebc.rnp.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25342903538730102217416302546292053380592853587144043276943309587811817756174880395890161704125984056814383521982807301529239738171630107939671670039945921652212498321343296179293022255340282879044451827750752310365947953826584178871473440255985296599115399847646553042158237775917497645678449111328495667363104236875833687258203095791763627220920099069849189718421331011289952556890450204879946760351926038424206595965624102979624241891277317944960944444679512848825322809448356776623612313405977541623636659484090538956112277475515778060339415055133731156516706108812082001243393036236726728970725732143324744285043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/rnpicpeduovsslca2019.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/rnpicpeduovsslca2019' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/rnpicpeduovsslca2019.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebc.rnp.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc.rnp.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab30c707284bcb7a8e5bfe6169f7d47ab2859b48 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 68d5980782620a6f4be92f4460358f380b9fe221 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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