www42.bb.com.br

- ICP-Brasil -

Issued by AC Certisign Multipla G5

About this certificate

This digital certificate with serial number 3d:90:b0:c8:5a:96:be:1d:f3:e0:80:89:1d:44:e2:87 was issued on by ICP-Brasil.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Autenticado por Certisign Certificadora Digital
Organization unit: Assinatura Tipo A1
Organization unit: ID - 8373018
Country: BR

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Certisign Certificadora Digital S.A.
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:90:b0:c8:5a:96:be:1d:f3:e0:80:89:1d:44:e2:87
Serial Number (int): 81834184068267516531526516577518543495
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9d:50:cf:bd:ff:24:ca:af:b1:33:eb:17:e2:42:7a:8e:69:2a:8e:53

Fingerprint (sha1): e5:0f:82:5d:4f:f2:54:e0:81:3e:eb:5f:3c:7c:4e:31:a9:ca:a9:70
Fingerprint (sha256): 05:97:89:60:38:07:d0:92:cc:df:1e:6a:b9:ae:4a:ba:fe:64:16:2d:36:97:0d:0c:25:d9:7a:9d:b0:d0:a6:42

Issuing Certificate URL: http://icp-brasil.certisign.com.br/repositorio/certificados/AC_Certisign_Multipla_G5.p7c

Revocation information

OCSP Server: http://ocsp.certisign.com.br
CRL Distribution Point: http://icp-brasil.certisign.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl
CRL Distribution Point: http://icp-brasil.outralcr.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl
CRL Distribution Point: http://repositorio.icpbrasil.gov.br/lcr/Certisign/ACCertisignMultiplaG5/LatestCRL.crl

Check the revocation status for certificate www42.bb.com.br

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www42.bb.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name bb.com.br

(limited to 100 certificates)
oauth-int.hm.bb.com.br
correiomobilee.bb.com.br
www65.bb.com.br
www11.bb.com.br
agrobot.otr.apps.bb.com.br
portaldecredito.bb.com.br
imobiliario.bb.com.br
aapjd.bb.com.br
redirect.of.bb.com.br
correio401.bb.com.br
www92.bb.com.br
traveler.bb.com.br
adfs.bb.com.br
www11.bb.com.br
cacs83.bb.com.br
www.bb.com.br
api.extensao.bb.com.br
www94.bb.com.br
coban-api.bb.com.br
correio603.bb.com.br
cartao-kabum.bb.com.br
nac9.bb.com.br
www45.bb.com.br
seg.bb.com.br
webxadmin.worldnet.intrabb.bb.com.br
www70.bb.com.br
sharepoint.bb.com.br
aapj.bb.com.br
wallet.bb.com.br
mobile.geomaparural.bb.com.br
loginweb.bb.com.br
cacs83.bb.com.br
ir-pdf-generator.aeb.internet.bb.com.br
www27.bb.com.br
sicom.bb.com.br
hbk.bb.com.br
wallet.bb.com.br
agn.bb.com.br
mobilepilotopj.bb.com.br
www27.bb.com.br
www42.bb.com.br
vbv.bb.com.br
ambbiencia.bb.com.br
cldomino0901.bb.com.br
investimentos.hm.bb.com.br
api-spoofing-controller-senhazero-external.nia.desenv.bb.com.br
aapj.bb.com.br
securemail.bb.com.br
bot.hm.bb.com.br
bbtm.bb.com.br
bpdipes.intranet.bb.com.br
developers.bb.com.br
www99.bb.com.br
vantagens-ws.bb.com.br
wallet.piloto.bb.com.br
bblam.bb.com.br
www15.bb.com.br
www15.bb.com.br
correiomobile.bb.com.br
nacc2.bb.com.br
analise-comentarios.cse.bb.com.br
correiomobilee.bb.com.br
geomaparural.bb.com.br
portalcredito.bb.com.br
webxadmin.worldnet.intrabb.bb.com.br
oferta-sectigo.bb.com.br
www81.bb.com.br
agn-ar.nxr.bb.com.br
www32.bb.com.br
fornecedor.bb.com.br
www36.bb.com.br
bbtm.bb.com.br
*.bb.com.br
mobiaai.hm.bb.com.br
coligadas-seg.bb.com.br
www58.bb.com.br
www71.bb.com.br
djows.bb.com.br
mad.bb.com.br
www93.bb.com.br
renegociacao.bb.com.br
internacional.bb.com.br
www98.bb.com.br
agrobot.otr.apps.bb.com.br
plataforma-gam.bb.com.br
www84.bb.com.br
aapjd.bb.com.br
correio503.bb.com.br
portalcredito.bb.com.br
validacao.bb.com.br
www60.bb.com.br
wallet.desenv.bb.com.br
portaldecredito.bb.com.br
bblam.bb.com.br
mobipj.bb.com.br
mobi.bb.com.br
traveler.hm.bb.com.br
fazai.hm.bb.com.br
adfs.bb.com.br
mdes-ws.bb.com.br

Certificate

The complete raw certificate details for www42.bb.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSFkscs/N0EuLgPN6cgE
E9oDg/F1RZIM82pF3uCB0TrfFAjVOcrnzMiUh7IrkyTVJgKkvNUvCgO3FXNaEPzG
xmpWGgLLIBVvjs1TCLQTV5FXHDD4OF1bHCzvJvZJuxUfxAGo292uKCG9TGYkKcZX
47HcBEgmiKYxzCAnw8JSoo28/NuB+PLDu+n2ex4I+mcjey2iqNTR9bI1E7f8EMZh
89lKmA9xDhoMuyMcUhCeKbvdLEwLGTuVtOWAJGmNkgmfs/MHOkf7haq+VZttIqse
896h7ak20qTcOYZxcz97RJJSTct1+chGjf1x6yIhgilzwAQJMi5AAKdOYt7aAGxV
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81834184068267516531526516577518543495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certisign Certificadora Digital S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC Certisign Multipla G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Autenticado por Certisign Certificadora Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Assinatura Tipo A1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ID - 8373018'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www42.bb.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20845787188056686178917284253779457813773747495869611648438107756994885128894134090917568496468009896821054571059626230909681574043505002432803154150593418812818798038171923383151474970682475034209745222582423496755842839339564651320237349610277739686616354972895110430130953217976299928400455009077018836879776675568135725366162532202367817522616333237231662869071747139316634464113877957429960479874666667681793856095228397767145171679622146665097975497574435513842438897499363386539648769321417302706300861005769040015669960173195913286843652448601902951418538480814626116033339659006744073531794641864683491710379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
										42414e434f20444f2042524153494c205341
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
										3030303030303030303030313931
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
										5041554c4f2053455247494f20534148414449
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
										3035303531393632303239333030333938303930303030303030303030303030303030303031323834383735385353505350
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9d50cfbdff24caafb133eb17e2427a8e692a8e53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://icp-brasil.certisign.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://icp-brasil.outralcr.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repositorio.icpbrasil.gov.br/lcr/Certisign/ACCertisignMultiplaG5/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://icp-brasil.certisign.com.br/repositorio/dpc/AC_Certisign_Multipla/DPC_AC_CertiSignMultipla.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://icp-brasil.certisign.com.br/repositorio/certificados/AC_Certisign_Multipla_G5.p7c'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.certisign.com.br'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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