*.claro.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:47:13:b1:10:cf:1c:47:fd:26:98:f0:5a:26:8a:12 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.claro.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:47:13:b1:10:cf:1c:47:fd:26:98:f0:5a:26:8a:12
Serial Number (int): 18978244412314170744828307559340739090
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f9:1c:59:6d:25:a9:f0:72:df:13:1b:6d:d2:a4:c3:e2:2a:20:9c:00
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 57:d9:b1:e4:16:ea:07:cc:df:33:0d:d9:c6:64:1b:16:52:4b:ce:97
Fingerprint (sha256): 06:07:11:20:02:cb:b5:d9:64:ba:0f:69:78:7c:a5:4a:52:1a:8c:d5:33:8f:9c:02:e5:86:73:e5:10:de:3d:8e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.claro.com.br

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.claro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.claro.com.br
*.clarovendas.claro.com.br
*.quarks.clarovendas.claro.com.br
clarovendas.claro.com.br
quarks.clarovendas.claro.com.br
quarks-console.clarovendas.claro.com.br

Other certificates including the domain name claro.com.br

(limited to 100 certificates)
pdv.claro.com.br
backend.omega.onappcdn.com
logisticasp.claro.com.br
owa.claro.com.br
debitocartao.claro.com.br
backend.omega.onappcdn.com
webvpn.claro.com.br
backend.omega.onappcdn.com
secure07.lithium.com
lojaonline.claro.com.br
oappaut.claro.com.br
logisticasp.claro.com.br
*.claro.com.br
backend.omega.onappcdn.com
secure07.lithium.com
secure07.lithium.com
claro.com.br
golpf.claro.com.br
treinamento.faponline.claro.com.br
backend.omega.onappcdn.com
claro-gestoronline.claro.com.br
caphml.claro.com.br
extranetsafe.claro.com.br
portalcorporativo.claro.com.br
backend.omega.onappcdn.com
*.apigw.claro.com.br
minhaclarotv.claro.com.br
debitocartao.claro.com.br
ipchml.claro.com.br
claro.com.br
claro.com.br
claro-gestoronline.claro.com.br
claro.com.br
caphml.claro.com.br
backend.omega.onappcdn.com
cap.claro.com.br
backend.omega.onappcdn.com
spd2.claro.com.br
ecob.claro.com.br
portaldenotas.claro.com.br
misp.claro.com.br
spd3.claro.com.br
ngc.claro.com.br
pdv.claro.com.br
minhaclarotv.claro.com.br
backend.omega.onappcdn.com
extranet.claro.com.br
chat.claro.com.br
m.lojaonline.claro.com.br
m.lojaonline3.claro.com.br
chat.claro.com.br
*.apigw.claro.com.br
*.net.com.br
contaonline.claro.com.br
webvpn.claro.com.br
spd1.claro.com.br
minhaclaro.claro.com.br
secure07.lithium.com
backend.omega.onappcdn.com
minhaclarotv.claro.com.br
icops.claro.com.br
claro.com.br
backend.omega.onappcdn.com
secure.claro.com.br
backend.omega.onappcdn.com
claro-gestoronline.claro.com.br
hubble.claro.com.br
apps.claro.com.br
minhaclarotv.claro.com.br
mcrecarga.claro.com.br
cwa.claro.com.br
cap.claro.com.br
idmbr.claro.com.br
poc-vlocity.claro.com.br
backend.omega.onappcdn.com
m.lojaonline.claro.com.br
iw.claro.com.br
portallogisticaqas.claro.com.br
claro.com.br
backend.omega.onappcdn.com
lojaonline.claro.com.br
backend.omega.onappcdn.com
configuraraparelhos.claro.com.br
spd1.claro.com.br
backend.omega.onappcdn.com
api.commandcenter.claro.com.br
claro.com.br
golpf.claro.com.br
owa.claro.com.br
contaonlinepf.claro.com.br
owa.claro.com.br
backend.omega.onappcdn.com
spd3.claro.com.br
backend.omega.onappcdn.com
iw.claro.com.br
sgd.claro.com.br
iw.claro.com.br
parceiro.gtw.claro.com.br
pdv.claro.com.br
minhaclaroempresas.claro.com.br

Certificate

The complete raw certificate details for *.claro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmohGHDK10o+K2dVuvqGF
bOuwHj37Kqcl5Mfq6MibbCURmVuTjMDow8qesUpuYDokMHpy4V9QkBfsD0gHSKtd
kub6BUh4kOXhZDiqJjs0BuI/z9/CI7+X/fyc39MQU4VapOLkiulvicVwhSi/vSWq
lMCYq+L2MLyLhywdmBoXrvq8JpSLXuHx6YxMOwMRJQp4Ls7Egcf/H8HfQG4wTHBh
XAPaNGmWs/XPkJ5GZA/Gyd2keOTOx2wbc8u/bLWWodHTSNKwMO+7Bgzi8oWpJq4n
ZNxbMMdor/xHkOQKGZXAMfsmMXDVH92dQYuWsLLBxzyDB0ePqtITvgjT3nIUzcw7
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18978244412314170744828307559340739090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.claro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19507898113516326373834778954861136453444511182462225703570519657475534572313808040822527779733646761558464529657743760768523455279376816388198568673738474905165017678154643990038457881733311337732935243875206485654363455537963693708640318866611705513083847300368217474730529485040334054106847519559646944996214564335523450515605242957741304836230354084431032136365241077139657865372127138215421929150148149552655456832787570466357798672985868066394126327757201190000800137511209808755681505089771186829651795416431951724107425275878787407969904162849721746598942253106242704085146480281591913919947031619305988701103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f91c596d25a9f072df131b6dd2a4c3e22a209c00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarovendas.claro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quarks.clarovendas.claro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarovendas.claro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quarks.clarovendas.claro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quarks-console.clarovendas.claro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001672d820fa00000040300463044022024d03c34d50787b38a2be0f5fd8914e4d4a386951720edce717b6a7b0e199b1f02201ee75171ed40995b9813b52f539f877bc448a4d64b4cb9154bf5958b303dd5f70075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001672d82107100000403004630440220408de64cd29cbab121b03fe8c28692ed34b52ff5968c36d1ada67f5caa7f4a7a02206c68e58b01351805ed8c5ecee6899453f665993e90d05aa96dec306dc5922d6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005831a2cfd4b31845412fb6fe445b188503643ef3c0add40c5e749d86bb07f519aa5a56e6456a9fc317fcb850d27c21ea6cbfd5b5a88e16d99d76845d95b273d0be6936ea461b7f4585f9c0985e294ae6fdb71f1aacbb83ad51df4eb61486283d1cacc577194910bc5eef3e1a1f414fdf5d5c00f9887191977c4989b4badaf0bebcd977bfc47dd4e3feb19cda6f40a315c3c4fcb05ac3c707ded08cfef33f1cdc30feb045b9651567b42c5dc18db89812936ee690d947ee3e0e6c6e78a432461c21972d2d890d8d4db38d3428a2005faf036698f284b48941c82307d78d2c71a9b142769d47b90ce136b496d8538f2861d2bc13dd9ff0acb6cb87f9a502d37b85