xpi.regtech.inovamind.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 07:eb:5c:43:28:c9:2f:fd:0b:f3:e7:6e:39:18:5d:29 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xpi.regtech.inovamind.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:eb:5c:43:28:c9:2f:fd:0b:f3:e7:6e:39:18:5d:29
Serial Number (int): 10526657034843141114129513123189120297
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 55:da:00:2e:99:3b:ae:00:31:83:8b:8b:0b:8a:c6:23:80:aa:b2:b5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2e:ba:c5:66:25:4b:84:fe:26:82:06:e5:44:de:c4:a2:ec:e9:ab:81
Fingerprint (sha256): 08:f9:73:ff:77:88:a8:0b:63:1a:d5:bd:e1:da:75:7c:49:ea:55:7e:86:f2:b3:50:65:24:5b:73:c0:2d:c2:89

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate xpi.regtech.inovamind.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xpi.regtech.inovamind.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xpi.regtech.inovamind.com.br

Other certificates including the domain name inovamind.com.br

(limited to 100 certificates)
inovamind.com.br
gm.api.client.inovamind.com.br
inovamind.com.br
ws.inovamind.com.br
xpi.regtech.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
painel.inovamind.com.br
filemanager-hml.inovamind.com.br
aa.client.staging.inovamind.com.br
eudora.front.inovamind.com.br
quiz.inovamind.com.br
bgcveiculo.staging.inovamind.com.br
rocket.client.inovamind.com.br
*.inovamind.com.br
aa.client.inovamind.com.br
bgc.credilink.com.br
ocrprd.inovamind.com.br
aa.client.staging.inovamind.com.br
sni190869.cloudflaressl.com
mikkel.full.inovamind.com.br
sni190869.cloudflaressl.com
full-dev.inovamind.com.br
painel.staging.inovamind.com.br
aa.client.inovamind.com.br
poseidon.client.staging.inovamind.com.br
anubis.client.staging.inovamind.com.br
anfora.client.staging.inovamind.com.br
show.regtech.inovamind.com.br
backstage-pagon-aqbank.inovamind.com.br
crt4.regtech.inovamind.com.br
sni190869.cloudflaressl.com
legal.inovamind.com.br
orchadm.private.inovamind.com.br
inovamind.com.br
xpi.regtech.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
bgcveiculo.inovamind.com.br
moira.admin.inovamind.com.br
sni190869.cloudflaressl.com
inova.regtech.inovamind.com.br
anfora.client.staging.inovamind.com.br
poseidon.client.inovamind.com.br
sni190869.cloudflaressl.com
www.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
eudora.front.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
dashboard.inovamind.com.br
a2.client.inovamind.com.br
bgccredil.client.inovamind.com.br
liveness.app.inovamind.com.br
*.regtech.inovamind.com.br
motorbgc.vb.hml.inovamind.com.br
hml.regtech.inovamind.com.br
bancoob.regtech.inovamind.com.br
projeto.inovamind.com.br
moira.admin.inovamind.com.br
poseidon.client.inovamind.com.br
*.legalfinder.inovamind.com.br
sni190869.cloudflaressl.com
inovamind.com.br
inovamind.com.br
spartacus.staging.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
spartacus.inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
consultoria.regtech.inovamind.com.br
eudora.dashboard.inovamind.com.br
devportal.inovamind.com.br
sni190869.cloudflaressl.com
painel.compliance.inovamind.com.br
sni190869.cloudflaressl.com
full.inovamind.com.br
*.dashboard.inovamind.com.br
*.pservice.inovamind.com.br
crt4.regtech.inovamind.com.br
eudora.client.inovamind.com.br
inovamind.com.br
ocrcnh-stg.inovamind.com.br
consultoria.regtech.inovamind.com.br
full-hml.inovamind.com.br
anubis.client.inovamind.com.br
anfora.client.inovamind.com.br
cloud.inovamind.com.br
*.dashboard.inovamind.com.br
bnp.regtech.inovamind.com.br
sni190869.cloudflaressl.com
poseidon.client.staging.inovamind.com.br
inovamind.com.br
inovamind.com.br
rocket.client.staging.inovamind.com.br
easy.regtech.inovamind.com.br
sni190869.cloudflaressl.com

Certificate

The complete raw certificate details for xpi.regtech.inovamind.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLPOPYD3oh1V3bQK23EG
fjrCrg5//g2BPcrK05qL88F22OFsUhJRyPpBaESEIjS5higqbsPZCqntNl5UftoD
RxzuSHmIRpj/K0ug4dmRcnkBLlmzfmIZ8DlB7MJmgWGgPDgYcojLBOLi+RtQOXKw
o4PImHQh46R9p7o6ZzA2Uqncj4xg29CHvnseZOdyooRcaCkmcOwNnE6HtUlRDciF
EeOHwW1S4kgHihqy2laZX4NONvr6xy+h/pf3NNGYL6l6sdHMwiiOBKqidq3Zs4Vs
uqF3q8E3u5m4G5LcxA7sEQirINoLofPtw8qm0NUhkw6/0XZ/CIlRxcWs0gD1fuJL
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10526657034843141114129513123189120297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xpi.regtech.inovamind.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23316513572529067228931430382855204766903863119360089046637477100164030317990042315849325214835294109853092841156952431860628722169876958788691441910369134620877102627800837460502749937779029557028893683177392442507921895756590733284388262533394348302395842919614096335308856055223202974710484842989513629340370715144036013967011223130205418384640958462970911217191052903141486475329151257085975397278995369541156168110373238667482967105237616832490017092966309208031879258325308107362612318738898511004460266913529515260278420579955586127764793719267538471593580303867182163707225858635978405214715894379085333416889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55da002e993bae0031838b8b0b8ac62380aab2b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpi.regtech.inovamind.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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