pop.ifood.com.br

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:04:06:c8:20:6b:8d:23:fc:e4:40:44:b8:5c:e6:3b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pop.ifood.com.br

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:04:06:c8:20:6b:8d:23:fc:e4:40:44:b8:5c:e6:3b
Serial Number (int): 19959326674331544061475985658658743867
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:6c:d4:d6:dc:b6:5d:5e:a8:a7:74:0e:05:32:4a:a4:fe:60:de:f2
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 60:11:4e:b1:06:b5:0e:0a:92:71:60:64:ce:72:f1:14:34:ef:63:5b
Fingerprint (sha256): 04:a3:bf:e3:68:93:a7:25:75:f8:24:cf:0b:e7:3b:c5:3b:4c:0c:90:6a:13:e4:7a:04:b8:35:63:6a:07:02:c2

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate pop.ifood.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pop.ifood.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pop.ifood.com.br
*.pop.ifood.com.br

Other certificates including the domain name ifood.com.br

(limited to 100 certificates)
paymentwidget.ifood.com.br
entrega.ifood.com.br
akamai-san234.exacttarget.com
*.ifood.com.br
ifood.com.br
qrcode.ifood.com.br
san.cloudinary.com
tls.automattic.com
nexus.internal-services-production.dc-ifood.com
*.news.ifood.com.br
w42.ifood.com.br
e.ifood.com.br
fastdag.se
tls.automattic.com
blog.ifood.com.br
vpn-saopaulo.dc.ifood.com.br
san.cloudinary.com
trabalhoremoto.ifood.com.br
api.homolog.carreiras.ifood.com.br
incapsula.com
pop.ifood.com.br
tls.automattic.com
api.carreiras.ifood.com.br
api.carreiras.ifood.com.br
entrega.ifood.com.br
entrega.ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
lp.news.ifood.com.br
incapsula.com
api.carreiras.ifood.com.br
api.news.ifood.com.br
secmonitor.dc.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
blog-parceiros.ifood.com.br
portal-negocios.ifood.com.br
blog-parceiros.ifood.com.br
news.ifood.com.br
www.ifood.com.br
contrate-beneficios.ifood.com.br
api-homolog.sira.ifood.com.br
homolog.ifood.com.br
news.ifood.com.br
lp.news.ifood.com.br
blog-parceiros.ifood.com.br
contrate-beneficios.ifood.com.br
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
bqvndd.ifood.com.br
tracker-empresas.ifood.com.br
password.dc.ifood.com.br
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
www.ifood.com.br
www.ifood.com.br
*.ifood.com.br
nexus.yolo-02-dr.dr-ifood.com
ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
mail.news.ifood.com.br
incapsula.com
s2-cloudinary-pin.map.fastly.net
maminha3.dc.ifood.com.br
s2-san.cloudinary.com
homolog.ifood.com.br
maminha3.dc.ifood.com.br
diogo-santos.com
trabalhoremoto.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
incapsula.com
contrate-beneficios.ifood.com.br
tools.dc.ifood.com.br
*.ifood.com.br
developer-deprecated.ifood.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
*.ifood.com.br
incapsula.com
incapsula.com
maminha3.dc.ifood.com.br
*.ifood.com.br
san.cloudinary.com
incapsula.com
click.relacionamento-empresas.ifood.com.br
w42.ifood.com.br
rocambole3.dc.ifood.com.br
chef.dc.ifood.com.br
vpn-dev.dc.ifood.com.br
*.ifood.com.br
blog-parceiros.ifood.com.br
ldap-aws-uswest2.dc.ifood.com.br
www.ifood.com.br
developer-deprecated.ifood.com.br
jenkins-financial.dc.ifood.com.br

Certificate

The complete raw certificate details for pop.ifood.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RSNFV4Piq+1TalSCFr9
hyYXJC8LFjCfo+B916H+aUlNwK3tFpeQ0zaeRH1DaPkgZmxhaGci8grmyMXq/VLA
hp4GkS2cz23FiDdkJ7p24nYsrvk5KE2TG5CkTasN2arP/D02ks7yjMGeHZuKpB5D
86q9EqMMEGMtNFaGdYOFEzU1XZPGJPAIFzNzPiI25EHjB6G0K316S1SdSx6wBQ3y
9tTgZ6CDZNqlfeRtN++Qb5RD90Asug4wKyE420PXtCMxuha5FlPt8stjgUWSC6NZ
gWkw9izbQrd/0UbL2EDC4O+9ItmA2PAX6+F//Pfvv2pWrzWVjzD1C++ZB+Wq3hGt
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19959326674331544061475985658658743867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pop.ifood.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29423659185801013167836536999619594473435695689915926777767769456603735564842391721934785716172800471971367257669435956809132095650192643620856800096546315031131827190651559455469856336966144356873191324390950038688026598860274677282954135812417664503465981919190274697142230682628649812898437023754302023862768004795038265162131050102058858990588233929309596741888333018854799705179496233340574720137667932396196493344335166456245523524195734338808493044886588723185660069283207722029704551259238882325236493688150327959364002973806911303223476733082246745505260875299560258009225866908297761385437823111028504899053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c26cd4d6dcb65d5ea8a7740e05324aa4fe60def2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pop.ifood.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:24|false] GeneralizedTime parsing time "0qg\xca\x90\xf2\xe2\xb0\xf5\x1c\x82\xc1\xed\x9f\x00v\x00H\xb0\xe3k\xda\xa6G4\x0f\xe5j\x02\xfa\x9d0\xeb\x1cR\x01\xcbV\xdd,\x81\xd9\xbb\xbf\xab9\xd8\x84s\x00\x00\x01\x8a\xa6\xa1\x0f\x1b\x00\x00\x04\x03\x00G0E" as "20060102150405.999999999Z0700": cannot parse "0qg\xca\x90\xf2\xe2\xb0\xf5\x1c\x82\xc1\xed\x9f\x00v\x00H\xb0\xe3k\xda\xa6G4\x0f\xe5j\x02\xfa\x9d0\xeb\x1cR\x01\xcbV\xdd,\x81\xd9\xbb\xbf\xab9\xd8\x84s\x00\x00\x01\x8a\xa6\xa1\x0f\x1b\x00\x00\x04\x03\x00G0E" as "2006"
0001-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 111456457925085713593275839483125721930903151366870500546065918323585094049747
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18768557803937522931587982750112752962414625672240447341205764341085513892235
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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