autenticaintx5.vivo.com.br

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 4c:31:f6:fa:4f:fd:51:3b:db:ab:a7:de was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=autenticaintx5.vivo.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:31:f6:fa:4f:fd:51:3b:db:ab:a7:de
Serial Number (int): 23581264431187998828388919262
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 6c:1b:d9:13:94:b6:fb:9a:63:21:46:0d:96:12:a2:b8:c0:63:1f:f8
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 54:19:32:71:2f:34:57:40:35:ce:a5:fa:14:34:e2:64:1a:b5:bc:97
Fingerprint (sha256): 0c:1b:b8:22:00:50:a0:ce:80:91:54:cb:07:6c:32:88:a2:8e:de:86:b0:e0:63:a8:5e:82:d6:92:4a:db:34:b0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate autenticaintx5.vivo.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for autenticaintx5.vivo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autenticaintx5.vivo.com.br
www.autenticaintx5.vivo.com.br

Other certificates including the domain name vivo.com.br

(limited to 100 certificates)
appstore.vivo.com.br
www.portalsva3.vivo.com.br
web-cert1.vivo.com.br
tracking.vivo.com.br
auth.vivo.com.br
web-cert2.vivo.com.br
scc.vivo.com.br
dashboardbnachml.vivo.com.br
autenticaint.vivo.com.br
denodo.vivo.com.br
protecao.vivo.com.br
image.serviciokia.com.ec
www.loja.vivo.com.br
consorcio.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
*.cpq.b2b.vivo.com.br
image.serviciokia.com.ec
vivo360.vivo.com.br
click.vivo.com.br
extranet-bancos.vivo.com.br
web-cert3.vivo.com.br
auth-esteira1.vivo.com.br
tracking.vivo.com.br
easl2.pre.gestaocontactcenter.vivo.com.br
hml1036-meuvivo.vivo.com.br
configuraraparelhos.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
recarga-api.vivo.com.br
homeassist.vivo.com.br
sni.cloudflaressl.com
auth.vivo.com.br
api.digital.vivo.com.br
login.vivo.com.br
lojaempresas.vivo.com.br
movimenta.vivo.com.br
homeassist.vivo.com.br
celular.vivo.com.br
sni.cloudflaressl.com
accounts-api.vivotools.com.br
lgpdfront.vivo.com.br
spdt.vivo.com.br
accounts-api.vivotools.com.br
vivostore.vivo.com.br
autenticaintx5.vivo.com.br
sni.cloudflaressl.com
callidus.vivo.com.br
joguejunto.vivo.com.br
lojavirtual.vivo.com.br
autenticaint.vivo.com.br
www.vivo.com.br
appstore.vivo.com.br
mvms.vivo.com.br
integracao.vivo.com.br
segurancaonline.vivo.com.br
sni.cloudflaressl.com
meuvivofixo.vivo.com.br
servicos.vivo.com.br
*.mve.vivo.com.br
author.lojaempresas.vivo.com.br
esteira2-mve.vivo.com.br
gedoc.vivo.com.br
image.serviciokia.com.ec
loja.vivo.com.br
vivoemdia.vivo.com.br
mvapp.vivo.com.br
director.virtualdesktop.vivo.com.br
pre-meuvivo.vivo.com.br
mvapp.vivo.com.br
sni.cloudflaressl.com
mve.vivo.com.br
image.serviciokia.com.ec
api.digital.vivo.com.br
accounts-api.vivotools.com.br
vivostore.vivo.com.br
www.vivo.com.br
iqdirect.com.br
author.lojaempresas.vivo.com.br
mve.vivo.com.br
sni.cloudflaressl.com
autentica-esteira2.vivo.com.br
minas.vivo.com.br
contadigital.vivo.com.br
internetgratis.vivo.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
portal.virtualdesktop.vivo.com.br
joguejunto.vivo.com.br
mailbr2.telefonica.com
servicos.vivo.com.br
seguros.vivo.com.br
cognos.vivo.com.br
sni.cloudflaressl.com
meuvivo.vivo.com.br
aceitedigital-qa3.vivo.com.br
autenticaintx5.vivo.com.br
sgrs.vivo.com.br
sni.cloudflaressl.com

Certificate

The complete raw certificate details for autenticaintx5.vivo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lpscWfPL8W1o7sQCGkf
28Ouqx6G11pyQXzXWrQ90KLK7IbyN+67eLOcLfA/9EOr/kArQbAYLFhLX4aiIPcM
4v4u+Z2o7jNqQEEuSo17jXsnJsH3jJ0w6x5BN5WeYLoWBjka03H2WcDIZZAUxg/l
jxArceLVtQZMh5YdWe2FmFQgbPJJkELxg+x3s0nwWwNjWl1KkbtyGbFC5HQopIwi
iARmjWZXxvas57LyS03yvYYEQcUA2ucnXiFP1S/hDhKsFXj7MFGZoyQElIirjCFl
4QSZlRbOCx1BYqFADiqmsYlUlme0UOR/YTq3jp8SsqTK1NQtcirGgPJsE74bLb8t
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23581264431187998828388919262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 20:48:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 20:48:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autenticaintx5.vivo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28069493244177861690631111912577335467558301716896411293784198115686720855365471997929007732982134531599592765563964863093174112259832857255905505182554109503169622739493742179810117641181904856821168937483459161125598441670129956207722890901103587192613992907849769230028472531542709154434558259946545581979563144898018161507016428365627257303527568274086293738914090733116920029001241453038435491535078412500936552729283775777570573851534939376026832140005957505675964155974630079434478478856357882275621070197581655790896585239154249077717053159598418879308689422501547946505609981745847527747815615644599591054781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autenticaintx5.vivo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autenticaintx5.vivo.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c1bd91394b6fb9a6321460d9612a2b8c0631ff8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a9573951d0000040300463044022042e15a4be8f6d63e882213eb17cf55b36cd899989b3abfd27dbfe9696a3e748b022023e3b83e219237b493b0d401a65cbb85c366b2800c4f99e7a175089c4a9edbed00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a957392010000040300463044021f295146fc31e7c069e92c1af8b7724aaa4b16ac41564ae13b65883b0c8df157022100f36adaebbb3430f6e69b6495e8b9c6469b1f38f87b2322b352fedfb68f572aa2007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a957394750000040300463044022021199838ee4381ec217af19b6192d191547be89bb72325fec4313db88e7ca041022070448c496c1aa54d3ef48c3f2fabd19fe4ad18e4087551cfefb55767ec0ef95b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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