ava.portaleducacao.salvador.ba.gov.br

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:8b:9c:35:90:02:d1:37:28:73:57:24:9c:fa:43:8f was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ava.portaleducacao.salvador.ba.gov.br

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:8b:9c:35:90:02:d1:37:28:73:57:24:9c:fa:43:8f
Serial Number (int): 11358721529175698198185755864230151055
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:7d:0a:0d:c6:af:41:d2:18:90:7f:b8:48:97:4c:84:79:07:76:d3
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ce:a7:c9:ef:74:5c:ba:db:a1:3f:67:80:eb:3e:c8:21:5e:ba:9e:2e
Fingerprint (sha256): 10:74:a2:1f:c5:f5:59:9c:2a:fe:22:1c:3a:3d:ce:94:ec:1e:3b:20:0e:da:44:93:a2:67:73:c6:88:ea:bb:93

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate ava.portaleducacao.salvador.ba.gov.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ava.portaleducacao.salvador.ba.gov.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ava.portaleducacao.salvador.ba.gov.br

Other certificates including the domain name salvador.ba.gov.br

(limited to 100 certificates)
recadastramento.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
ava.portaleducacao.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfse.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
agendamento.sedur.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
sedur.salvador.ba.gov.br
*.salvador.ba.gov.br
portalvida.saude.salvador.ba.gov.br
www.dom.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
vacinaexpress.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
*.salvador.ba.gov.br
filometro.saude.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
nfse.salvador.ba.gov.br
marketingturistico.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
christi.salvador.ba.gov.br
salvador.ba.gov.br
sedur.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
pad.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
wsnoeprod.salvador.ba.gov.br
www.aplicativos.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
vacinahoramarcada.saude.salvador.ba.gov.br
recadastramento.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
plano500.navegarte.org
dados.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
senhaweb.salvador.ba.gov.br
horamarcada.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
www.sefaz.salvador.ba.gov.br
webmail.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
sedur.salvador.ba.gov.br
redmine.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
pad.salvador.ba.gov.br
api.pgms.salvador.ba.gov.br
sedur.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
christi.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
www.vida.saude.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
webmail.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
cadastroescolar.salvador.ba.gov.br
carnaval.sedur.salvador.ba.gov.br

Certificate

The complete raw certificate details for ava.portaleducacao.salvador.ba.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzaEVeHemQf+Map+h0yK
vgZ72ULUCNGXfPujOMCPY0tM4o0uN7SdhO+iZVS5gGOOZMKpx2GfiQ26xP5JTpm8
Etv9uARKrdTyfvEpbqJC+dzyopGy+xiLuu0mggktrlR3KP0a5md+fyNQrLLQ33eA
JQnqP4cH8KHsnnWDMHwKedjn/5okLUEibqwFS/b4v+FI1Y2hLoKMUU5YVY9Pd09Y
Htny9jVAeXcWqm6Q/fO8lIZ7kckQRzWmP7n6rqpjG0NvUzqOovGjkW5n/PocL677
kG2yPm5kBGMfrQTPrHMqs8pFc4wBwuCOKR1+JgVT9njptaK5tRk25Oofsrorc+EU
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11358721529175698198185755864230151055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ava.portaleducacao.salvador.ba.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22118586671889974585054795040221348102647518262239584926574585936168532660172303838485040720851400041455929132642770015638389783945094525227131521688317292911228867724034394801948928313090888533913558433480472319554156588160075539099428270038547665270550981594378389032182744635873642666139996550100517837916749854744306553354026514082407978907199503329256766273635592105763750424478476653979834915893541162474714749626669396160938673155622714225283652881272427587067931452504873924891528236111666329782762979626350329288917770661593235262735498619769304402930267696750788672713474448764451567657211034505925445620981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							137d0a0dc6af41d218907fb848974c84790776d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ava.portaleducacao.salvador.ba.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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