*.honda.com.br

- MOTO HONDA DA AMAZONIA LTDA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 59:cb:bb:f3:59:64:8b:cf:5d:cc:b1:dc was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MOTO HONDA DA AMAZONIA LTDA

Organization: MOTO HONDA DA AMAZONIA LTDA
State / Province: SAO PAULO
Locality: SUMARE
Country: BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 59:cb:bb:f3:59:64:8b:cf:5d:cc:b1:dc
Serial Number (int): 27790465387014014463841710556
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 09:5b:5d:1d:d9:12:56:b5:f2:81:96:4e:ad:f7:7d:18:63:6f:c7:87
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 34:85:c4:0c:db:d4:10:5c:d2:3d:6f:f3:00:fd:66:86:4e:79:b1:cd
Fingerprint (sha256): 0a:69:ec:59:74:3f:89:db:d2:7d:e6:a3:ab:ce:ba:11:ba:b2:6f:a9:6c:4e:b3:48:66:da:7d:db:ac:2f:45:f2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.honda.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.honda.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.honda.com.br
honda.com.br

Other certificates including the domain name honda.com.br

(limited to 100 certificates)
www.ubik.com.br
WWW4.honda.com.br
customurl.konviva.com.br
qualidade.honda.com.br
honda.com
customurl.konviva.com.br
aplicacoes.honda.com.br
honda.com
*.honda.com.br
cdn-videos.honda.com.br
mnhsa01.honda.com.br
customurl.konviva.com.br
www.ubik.com.br
*.honda.com.br
*.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
www.ubik.com.br
customurl.konviva.com.br
customurl.konviva.com.br
www.honda.com
customurl.konviva.com.br
qualidade.honda.com.br
qualidade.honda.com.br
customurl.konviva.com.br
www.ubik.com.br
1ssl.konviva.com.br
traveler.honda.com.br
customurl.konviva.com.br
www.ubik.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
www.ubik.com.br
suhsa01.honda.com.br
customurl.konviva.com.br
*.honda.com.br
customurl.konviva.com.br
www3.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
aplicacoeshab.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
*.honda.com.br
customurl.konviva.com.br
www.edcacademy.com.br
web1.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
web2.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
*.honda.com.br
portalhtb.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
sphsa01.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
mnhsa02.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
*.honda.com.br
jpcmnedgey.o365.hm.honda.co.jp
customurl.konviva.com.br
1ssl.konviva.com.br
recofwebhab.honda.com.br
customurl.konviva.com.br
imperva.com
customurl.konviva.com.br
customurl.konviva.com.br
sphsa02.honda.com.br
suhsa02.honda.com.br
customurl.konviva.com.br
www.hondahsa.com.br
mnhsa02.honda.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
jpcmnedges.o365.hm.honda.co.jp
customurl.konviva.com.br
customurl.konviva.com.br
1ssl.konviva.com.br
www.ubik.com.br
customurl.konviva.com.br
www.edcacademy.com.br
customurl.konviva.com.br
customurl.konviva.com.br
www.ubik.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br

Certificate

The complete raw certificate details for *.honda.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng6BlO8WqbYLCAZIHsQo
PzIm9VwcDhb6Q/rM72ztnqIgYLk3OPDadexn20fzncyxdlpUibcK0jIGP8Es0LNZ
0ot6U34Or6CnnnhoZJAo61WD5Zrx3VdV1sn/Sp56KufX9cI3EhEawbI9AOIGXFtE
HusgR/ijNwQ9Q8SrHGyeGSYUDk6grzLIME6tLTaj6tXivN95ilSnMC5pH3fh5YJj
wkbUEX1rvN9Kn9xMmDMgfkDwSulHmwo0gqSQoaileVTLrvmFTshqPGz+yBLi1Cun
KRjqZqN6YUuyAnL4/8Jdet1UDCAFWoWB8Zpk36CS4zqQBKq2VMqpgH8RxOaG2lD1
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27790465387014014463841710556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-16 16:40:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 16:40:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAO PAULO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SUMARE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MOTO HONDA DA AMAZONIA LTDA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.honda.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19952805448010092447484937663148745667939632841393708526849593632932680890150979707851487991397089565567189804456314381470250145462901089903676090922423724765156039521853318036523775277670323404739045702893861704801916531873005210012588633146895233420297583798662693398769002587454968818181345931868188687498503782329753892758369449070219599956268088970198413553439825726192245000629214509527596986897066059233827625718497357237537701618402673710833627050963776929801828872705152917177788239239761512477150594298003975179295402384740479343452027632149495894921316769474337505464622122389678532042057561448397602354471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honda.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							095b5d1dd91256b5f281964eadf77d18636fc787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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