*.clicrbs.com.br

- RBS Participações S.A -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 0a:0d:65:88:d4:60:c6:0d:51:f6:78:52:2a:ef:c8:22 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RBS Participações S.A

Organization: RBS Participações S.A
State / Province: Rio Grande do Sul
Locality: Porto Alegre
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:0d:65:88:d4:60:c6:0d:51:f6:78:52:2a:ef:c8:22
Serial Number (int): 13361839181137996481957178823488292898
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5f:d6:0d:8c:43:96:d3:54:70:01:c1:a5:c3:47:7b:35:ee:d3:15:7a
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): da:19:ec:34:6b:86:12:48:a5:11:b4:16:6c:af:8f:01:8c:a1:92:49
Fingerprint (sha256): 0f:42:ef:d3:b2:91:14:aa:ef:84:8e:39:42:33:bb:30:75:78:a8:0d:f2:20:9a:25:9a:e7:92:83:4d:2d:75:4f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g7.crl

Check the revocation status for certificate *.clicrbs.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.clicrbs.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.clicrbs.com.br
clicrbs.com.br

Other certificates including the domain name clicrbs.com.br

(limited to 100 certificates)
slk.clicrbs.com.br
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
especiais.zh.clicrbs.com.br
anunciar.clicrbs.com.br
*.clicrbs.com.br
www.clicrbs.com.br
*.clicrbs.com.br
www.anuncio.zhclassificados.com.br
tls.automattic.com
*.clicrbs.com.br
lyncweb.gruporbs.com.br
www.lastcall.es
sip.gruporbs.com.br
*.clicrbs.com.br
*.clicrbs.com.br
sip.gruporbs.com.br
www.anuncio.zhclassificados.com.br
tls.automattic.com
thepresidents.in
www.anuncio.zhclassificados.com.br
www.clicrbs.com.br
assinegzh.clicrbs.com.br
*.clicrbs.com.br
www.anuncio.zhclassificados.com.br
www.clicrbs.com.br
www.buyfrom.africa
lyncweb.gruporbs.com.br
slk.clicrbs.com.br
www.anuncio.zhclassificados.com.br
slk.clicrbs.com.br
www.anuncio.zhclassificados.com.br
especiais.zh.clicrbs.com.br
www.anuncio.zhclassificados.com.br
login.clicrbs.com.br
clicbr.com.br
*.clicrbs.com.br
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
www.clicrbs.com.br
*.clicrbs.com.br
www.clicrbs.com.br
aliciabellinvia.com
tls.automattic.com
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
especiais.zh.clicrbs.com.br
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
*.clicrbs.com.br
www.clicrbs.com.br
nossa-loader.clicrbs.com.br
www.anuncio.zhclassificados.com.br
especiais.zh.clicrbs.com.br
*.clicrbs.com.br
assinegzh.clicrbs.com.br
www.anuncio.zhclassificados.com.br
www.clicrbs.com.br
identificacao.clicrbs.com.br
tls.automattic.com
*.clicrbs.com.br
www.idiomatic.pt
*.clicrbs.com.br
slk.clicrbs.com.br
identificacao-hlg.clicrbs.com.br
www.clicrbs.com.br
www.clicrbs.com.br
www.f1-almanac.pl
www.anuncio.zhclassificados.com.br
ypkado.clicrbs.com.br
login.clicrbs.com.br
app.boost.co.ke
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
www.clicrbs.com.br
barkeepapp.co
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
especiais.zh.clicrbs.com.br
www.anuncio.zhclassificados.com.br
isyouropinionworthmoney.com
ypkado.clicrbs.com.br
*.clicrbs.com.br
assinegzh.clicrbs.com.br
slk-hlg.clicrbs.com.br
www.anuncio.zhclassificados.com.br
*.clicrbs.com.br
especiais.zh.clicrbs.com.br
www.anuncio.zhclassificados.com.br
anunciar.clicrbs.com.br
www.anuncio.zhclassificados.com.br
*.clicrbs.com.br
csluplan.com
*.clicrbs.com.br
krap.io
www.anuncio.zhclassificados.com.br
www.anuncio.zhclassificados.com.br
anunciar.clicrbs.com.br
www.anuncio.zhclassificados.com.br

Certificate

The complete raw certificate details for *.clicrbs.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EqyqFAtZSQYqgz6vZ+8
6LSEgdsgic0SHnuX3nLgCUnPaxdXdQ4xN9h+DR4g7zRW6q6R198dmd8/ZcreOcbc
xz7nLZYhIGwz6EilCbQNyIo63Ws/1V8nj7gkzHMZGV16s88uTZDwdHxp/0AIbJX2
osuPfonOzR64nTZJEUXMMALDJCyjW48dB6Eoykf6ue/Iuo09UiQOYSE+c/1XF4R/
e1h3vH1WzRAHoR+Jey3BRY6wV6nmBSxZ9WIOOjJFl/M9VMYG20p++XnHjWVvj2LH
TWvyeB2uGP7p/2umrpYeqZiepR/WnMi7yQSIp4GoKuc2aqK+fubikeksQ08I9xnM
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13361839181137996481957178823488292898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rio Grande do Sul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Porto Alegre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RBS Participações S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.clicrbs.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27809261990388879421458171701815315509819349373167739317530912673593341684258803799087046122298381208370924244877250688512543144927688780650766495958903791010066063371798472100751517698228660505709711664483935495530813599537670414217916985367089867111030111144612297999298281694787012015709494812557431278915909241036249316869545731697722766945648392944291123782258639805072320283603237071011561491931648347506310321203697149477820447236837536383850839623409800500500143362772226248902286951439361573394432476205456693987413237522109398871818863456791729785900136083331906074957050865393364583206441521088842876701889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fd60d8c4396d3547001c1a5c3477b35eed3157a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clicrbs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicrbs.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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