bqvndd.ifood.com.br

- Criteo SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:d0:7a:73:8f:ce:1c:af:99:8a:22:cd:c4:5d:32:98 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Criteo SA

Organization: Criteo SA
State / Province: Île-de-France
Locality: Paris
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d0:7a:73:8f:ce:1c:af:99:8a:22:cd:c4:5d:32:98
Serial Number (int): 17033217305710099854568958170670903960
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5e:b8:82:69:25:de:91:2a:92:bd:aa:81:51:01:b6:82:41:12:f6:72
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f8:64:58:dd:b9:49:53:45:34:d4:28:7c:81:8d:9d:6a:a8:b6:c1:bd
Fingerprint (sha256): 0c:55:f8:2a:8d:80:51:41:13:93:56:da:89:46:e5:43:e2:12:ec:38:c2:09:3a:60:78:cd:68:db:20:fe:92:4e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bqvndd.ifood.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bqvndd.ifood.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bqvndd.ifood.com.br

Other certificates including the domain name ifood.com.br

(limited to 100 certificates)
paymentwidget.ifood.com.br
entrega.ifood.com.br
akamai-san234.exacttarget.com
*.ifood.com.br
ifood.com.br
qrcode.ifood.com.br
san.cloudinary.com
tls.automattic.com
nexus.internal-services-production.dc-ifood.com
*.news.ifood.com.br
w42.ifood.com.br
e.ifood.com.br
fastdag.se
tls.automattic.com
blog.ifood.com.br
vpn-saopaulo.dc.ifood.com.br
san.cloudinary.com
trabalhoremoto.ifood.com.br
api.homolog.carreiras.ifood.com.br
incapsula.com
pop.ifood.com.br
tls.automattic.com
api.carreiras.ifood.com.br
api.carreiras.ifood.com.br
entrega.ifood.com.br
entrega.ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
lp.news.ifood.com.br
incapsula.com
api.carreiras.ifood.com.br
api.news.ifood.com.br
secmonitor.dc.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
blog-parceiros.ifood.com.br
portal-negocios.ifood.com.br
blog-parceiros.ifood.com.br
news.ifood.com.br
www.ifood.com.br
contrate-beneficios.ifood.com.br
api-homolog.sira.ifood.com.br
homolog.ifood.com.br
news.ifood.com.br
lp.news.ifood.com.br
blog-parceiros.ifood.com.br
contrate-beneficios.ifood.com.br
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
bqvndd.ifood.com.br
tracker-empresas.ifood.com.br
password.dc.ifood.com.br
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
www.ifood.com.br
www.ifood.com.br
*.ifood.com.br
nexus.yolo-02-dr.dr-ifood.com
ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
mail.news.ifood.com.br
incapsula.com
s2-cloudinary-pin.map.fastly.net
maminha3.dc.ifood.com.br
s2-san.cloudinary.com
homolog.ifood.com.br
maminha3.dc.ifood.com.br
diogo-santos.com
trabalhoremoto.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
incapsula.com
contrate-beneficios.ifood.com.br
tools.dc.ifood.com.br
*.ifood.com.br
developer-deprecated.ifood.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
*.ifood.com.br
incapsula.com
incapsula.com
maminha3.dc.ifood.com.br
*.ifood.com.br
san.cloudinary.com
incapsula.com
click.relacionamento-empresas.ifood.com.br
w42.ifood.com.br
rocambole3.dc.ifood.com.br
chef.dc.ifood.com.br
vpn-dev.dc.ifood.com.br
*.ifood.com.br
blog-parceiros.ifood.com.br
ldap-aws-uswest2.dc.ifood.com.br
www.ifood.com.br
developer-deprecated.ifood.com.br
jenkins-financial.dc.ifood.com.br

Certificate

The complete raw certificate details for bqvndd.ifood.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthTg/1nlrLLOftWWV6Bw
3YCbkrgOg/Z+JzTKhlVCTnSSgnp3lC7It2wRW7s6zk6ZMjGufqeaIysFA/ocVKPn
92GDsrV2fDWQTeItXzF6cVsOnoWkXNF3jzjXJ2dVjYNBB+qGWp8urt7Y448IwSVz
M7BVSwMbxYteUlZGQ05df88QTAbwDwzRjmSu9PghDHMatCJHBhybueKWnonVN940
8DuNMNT0cuVveS2gbTy0tpb6XM0rA3clMnY6/9Rfl4xkiC9RwxCpWGTrQrrm2NVM
ovV95X3fdlUKRhTjwhqvqZtE2YvYHLaKPf/yd5kXKL5dui/uANkHHIYIq4rcp6ut
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17033217305710099854568958170670903960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Criteo SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bqvndd.ifood.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22985667271341117923302225927043124930393237831532042515319201160082365607365459776687269675902700713738568437745949701043916525198808348327127142499228450917450156828254447798737193900241987183219610502342230178487431404162540992324693419602539503560360075993939514641384568758583485724777999085096522583697281313532486686764955728148968468764211766321342852187682126988193834851636561444451038099539646454676753188322470380340925160906654857004244632650895879168848733901007663587151255826774378841704288048648821597983586635849860960263612741225012946243358639456064507824786458794319658783299827991138807023644147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5eb8826925de912a92bdaa815101b6824112f672
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bqvndd.ifood.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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