surfing.cma.com.br

- surfing.cma.com.br -

Issued by

About this certificate

This digital certificate with serial number 0d:aa:b1 was issued on by Equifax.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

surfing.cma.com.br

Organization: surfing.cma.com.br
Organization unit: GT65840088
Organization unit: See www.geotrust.com/resources/cps (c)09
Organization unit: Domain Control Validated - QuickSSL Premium(R)
Country: BR

Equifax

Organization: Equifax
Organization unit: Equifax Secure Certificate Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:aa:b1
Serial Number (int): 895665
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 1c:cb:d4:5f:af:34:9f:ed:3d:91:09:c2:18:dc:7c:b5:67:05:5c:23
AuthorityKeyId: 48:e6:68:f9:2b:d2:b2:95:d7:47:d8:23:20:10:4f:33:98:90:9f:d4

Fingerprint (sha1): 3d:bd:76:f7:d3:df:76:1c:d2:7b:1d:64:b9:a2:b3:f8:1f:0f:b9:89
Fingerprint (sha256): 0f:91:f7:83:27:0d:32:fd:64:cb:78:5e:ea:19:77:9c:8a:08:24:70:45:48:f5:c6:6b:2b:d5:28:ef:43:fe:b4


Revocation information

CRL Distribution Point: http://crl.geotrust.com/crls/secureca.crl

Check the revocation status for certificate surfing.cma.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for surfing.cma.com.br

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.surfing.cma.com.br
surfing.cma.com.br

Other certificates including the domain name cma.com.br

(limited to 100 certificates)
leadventure.netrio.com
support.techfirstgulf.com
support.teamfanclub.com
megakaryon.cnet-media.co.jp
financeiro.cma.com.br
ndihma.tvalb.com
supporttest.frutostech.com
testportal.dlocal.com
help.rmgcardservices.org
support.techfirstgulf.com
solutions.lenovocloudsoftware.com
soporte.exalta.com.mx
desk.smwit.com
support.rivercityitpros.com
ndihma.tvalb.com
testportal.dlocal.com
support.schema.dev
support.retransform.com
detronic.doit.dev.br
desk.stratex.jp
manomano.coperbee.fr
support.launchify.net
support.striverix.com
support.zendure.com
zoho.musashino.jp
support.schema.dev
websupport.clingov.com
support.jandbcommunications.com
support.radiumone.io
support.schema.dev
*.cma.com.br
s2walpires.cma.com.br
sbg.wedohelpdesk.com
ndihma.tvalb.com
surfing.cma.com.br
support.pvte.ltd
sbg.wedohelpdesk.com
support.mrsafesoft.com
ndihma.tvalb.com
conteudo.cma.com.br
itsupport.nationalable.org
support.schema.dev
support.hulusport.com
support.schema.dev
sni.cloudflaressl.com
testportal.dlocal.com
support.civicbiodesign.org
support.element3.com.au
testportal.dlocal.com
itsupport.nationalable.org
bradescos2.cma.com.br
dev.safras.com.br
desk.unisight.one
testportal.dlocal.com
support.newavex.com
support.schema.dev
itsupport.platinumvictory.com
support.schema.dev
support.retransform.com
detronic.doit.dev.br
pmsupport.eyemdemr.com
support.wibu.jp
testportal.dlocal.com
support.lfsolutions.net
support.skools.app
support.zendure.com
support.retransform.com
enka.uetaya.help
support.schema.dev
testportal.dlocal.com
desk.stratex.jp
support-infosys.gknot.co.jp
support.civicbiodesign.org
support.schema.dev
desk.unisight.one
streamerwalp02.cma.com.br
supporttest.frutostech.com
help.echidna.mx
support.mrsafesoft.com
support.ubtechpros.com
helpdesk.visionaryfiber.com
solutions.lenovocloudsoftware.com
support.jandbcommunications.com
support.cherrycrypto.com
support.schema.dev
tickets.digiteksupport.com
help.rmgcardservices.org
support.schema.dev
testportal.dlocal.com
support.grupoisi.mx
support.schema.dev
support.webberstop.com
support.schema.dev
ndihma.tvalb.com
support.schema.dev
testportal.dlocal.com
support.schema.dev
zohosupport.h-farm.com
help.throttl.co.uk
itsupport.nationalable.org

Certificate

The complete raw certificate details for surfing.cma.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC49w7Y5YGecFGZwtvEn2jpeQuh
le985LfIapNACofbbxNXUqO/m53vRT2oq59/oBk3nQkqKJzIQFSS/k8jZHnVViBp
V3RYgXCca3p32ObMedME8uyYi1eGA/PNwT1BlG/VZHJYTneMZqIX4zZ4xqQf06o3
QQVCmn9N1lfEjv6aMwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 895665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Equifax'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Equifax Secure Certificate Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-10-30 02:58:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-01 11:48:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'surfing.cma.com.br'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT65840088'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)09'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL Premium(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'surfing.cma.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 129886889480307964730973902977722447698341804927407654187670320005061706937697086353221676677468513578336831570479035233399409240328586793248886082913382569852002539820832898511598751223951389848752914825798228005052321043317223141457462384399071826488755343333587221875114785855628223105559842757261389634099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ccbd45faf349fed3d9109c218dc7cb567055c23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.geotrust.com/crls/secureca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfing.cma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfing.cma.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48e668f92bd2b295d747d82320104f3398909fd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		00183a8f3dc969f8de27d39b7f58ca21e1114de27b3d5d4081ce2b7df8b4d0e9dd0272e00566189d35e906f26c40b752cd50b4d4096e5b74791d0d327279c4ab9bf725b557ae5c2adfad5a9a5098a35230db49e22f2a88e63e38cd4c86c11cb168208e0fc1618dc50962c57459312a5c058a2641bc0bd291dc3c2f7a582fd6d1f6