www.puc-rio.br

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:4e:fa:70:f0:01:b7:37:60:0e:21:53:20:5f:f1:a9 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.puc-rio.br

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:4e:fa:70:f0:01:b7:37:60:0e:21:53:20:5f:f1:a9
Serial Number (int): 13702358663048466296776473246672351657
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 68:82:aa:bd:96:7c:fd:f1:7d:15:11:13:42:b3:b0:23:b3:74:93:7f
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): db:a6:e7:b0:81:50:66:19:f6:71:24:a0:e8:66:b3:3d:f2:1a:db:de
Fingerprint (sha256): 12:7e:96:eb:d9:93:40:94:b1:58:59:9d:81:9c:90:11:93:9d:ee:08:08:9f:e6:de:7f:f0:e5:26:36:bb:4c:91

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.puc-rio.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.puc-rio.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.puc-rio.br
puc-rio.br

Other certificates including the domain name puc-rio.br

(limited to 100 certificates)
vestibular.puc-rio.br
cceweb.adm.cce.puc-rio.br
portalsest.gtep.civ.puc-rio.br
mail.iag.puc-rio.br
educacaodigital.ccead.puc-rio.br
med.puc-rio.br
sgu.rdc.puc-rio.br
antigo.iag.puc-rio.br
tower.1nspirationdigital.com
iagimage.iag.puc-rio.br
*.rdc.puc-rio.br
www.fis.puc-rio.br
webmail.puc-rio.br
diplomas.puc-rio.br
med.puc-rio.br
*.tecgraf.puc-rio.br
www.thebrij.tk
mail.iag.puc-rio.br
sau.intranet.puc-rio.br
*.iag.puc-rio.br
intertec.ituc.puc-rio.br
webmail.esp.puc-rio.br
iag.puc-rio.br
sau.puc-rio.br
ler.iiler.puc-rio.br
*.cetuc.puc-rio.br
mail.iag.puc-rio.br
www.puc-rio.br
*.tecgraf.puc-rio.br
sgu.rdc.puc-rio.br
acesso.rdc.puc-rio.br
www.med.puc-rio.br
iagimage.iag.puc-rio.br
ccead.puc-rio.br
www.puc-rio.br
siga.iag.puc-rio.br
vestibular.puc-rio.br
poseidon.les.inf.puc-rio.br
webmail.aaa.puc-rio.br
enem.biobd.inf.puc-rio.br
*.jur.puc-rio.br
ler.iiler.puc-rio.br
eadpos.iag.puc-rio.br
sau.intranet.puc-rio.br
www.dbd.puc-rio.br
webmail.esp.puc-rio.br
iag.puc-rio.br
portalsest.gtep.civ.puc-rio.br
poseidon.les.inf.puc-rio.br
vestibular.puc-rio.br
poseidon.les.inf.puc-rio.br
wifi.rdc.puc-rio.br
mail.iag.puc-rio.br
webmail.puc-rio.br
cc-oncall-info.api4.thorbooking.com
sis.ccci.puc-rio.br
visir.maxwell.vrac.puc-rio.br
iiler.puc-rio.br
*.iag.puc-rio.br
iiler.puc-rio.br
sts.iag.puc-rio.br
portalsest.gtep.civ.puc-rio.br
admsau2.sau.intranet.puc-rio.br
iiler.puc-rio.br
*.rdc.puc-rio.br
www.puc-rio.br
sau.intranet.puc-rio.br
site-novo.iag.puc-rio.br
webmail.puc-rio.br
iag.puc-rio.br
webmail.puc-rio.br
webmail.cvi.puc-rio.br
www.puc-rio.br
nathangentry.me
*.rdc.puc-rio.br
sis.ccci.puc-rio.br
iaglink.iag.puc-rio.br
eadpos.iag.puc-rio.br
*.ctc.puc-rio.br
pucurgente.com.puc-rio.br
www.mapamazonia.nima.puc-rio.br
webmail.aluno.puc-rio.br
*.cetuc.puc-rio.br
www.puc-rio.br
smtp.puc-rio.br
enem.biobd.inf.puc-rio.br
www.med.puc-rio.br
especializacao.ccec.puc-rio.br
mserver.les.inf.puc-rio.br
www.med.puc-rio.br
portalsest.gtep.civ.puc-rio.br
*.rdc.puc-rio.br
med.puc-rio.br
ccead.puc-rio.br
ead.iag.puc-rio.br
iag.puc-rio.br
www.mapamazonia.nima.puc-rio.br
www.cpti.cetuc.puc-rio.br
webmail.aluno.puc-rio.br
citles.les.inf.puc-rio.br

Certificate

The complete raw certificate details for www.puc-rio.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaOVBKnxDfscCAb79mee
Jd1HwS8UkzWfqm/odnPTvH4MI/5F7tsk0fXfTstSkFGszmWGj2CWe7PdkphnZJHz
dF/4oncX08LVcTWlXVZZO3DmEH1vXwDUJoGb+/cHgsTMSeUB5MGe05EBDkHAeQgS
qyrIqu1quN0chgVP6YqNmnzbGNz0YsiSDaxQV6ND3WggH2ij5GyTsBE3vT3OVUJx
ZuJulxnaHTbNtJvAs4gOFxqfBPWNEd6fkJzrK/ebkK9gLTXSMH03z39QBxqEy0LC
x4LLUAj1prucL98spGLPRW5gmWWmN22ydHHsYUAzs4qYvFR3Qyi+2twO7tcv70hM
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13702358663048466296776473246672351657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.puc-rio.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17880266341353275147080565300753981693491539658389282548413849310535835453846996480347338176898585827596071027234460227353831933498022694761517557129598891831558161955725018339779666037488908843199934301163659264083011275067351546912399394798306093927715083826245524837290557144201260926574046687846469556303901147264730526981770761328518183999949769949621244448121378902744742137988265665145744904774804328967931107148502531326214979008783017463327895470581048687610618229438628284196635317783176489197380237614370544061027733871698602148374121334935851006055065066784463590991423472436176981649037760507767004089593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6882aabd967cfdf17d15111342b3b023b374937f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puc-rio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puc-rio.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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