pf.api.prebanco.com.br

- BANCO BRADESCO S A -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7a:c6:51:91:d7:97:72:32:af:9e:b1:4d was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BANCO BRADESCO S A

Organization: BANCO BRADESCO S A
State / Province: SAO PAULO
Locality: OSASCO
Country: BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7a:c6:51:91:d7:97:72:32:af:9e:b1:4d
Serial Number (int): 37996923712485809091820564813
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 97:ff:0a:f6:33:f8:4c:35:b0:51:b1:19:6e:73:13:00:ac:c6:94:c1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e5:63:1f:94:79:c4:3c:be:4a:ad:3b:c6:97:d4:58:7a:5d:de:df:fc
Fingerprint (sha256): 12:d4:b1:76:32:ff:db:6b:c0:f3:1c:28:c9:03:4b:55:a0:33:ed:cb:95:82:b9:b0:f4:53:3c:37:c1:a0:0a:f0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate pf.api.prebanco.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pf.api.prebanco.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pf.api.prebanco.com.br

Other certificates including the domain name prebanco.com.br

(limited to 100 certificates)
acessovpn.prebanco.com.br
webaccess.prebanco.com.br
frontend2-ho.agro.prebanco.com.br
jiracp.prebanco.com.br
www.hb6.prebanco.com.br
services.financeadm.prebanco.com.br
www.mobilidade.prebanco.com.br
cobranca.bradesconetempresa.prebanco.com.br
gdmo.prebanco.com.br
idhibrida.prebanco.com.br
autorizacao.oapi.prebanco.com.br
awcm.prebanco.com.br
wssmic.prebanco.com.br
nexuscp.prebanco.com.br
apinext.prebanco.com.br
www.bims.prebanco.com.br
www.treinamento.prebanco.com.br
www.wap2.prebanco.com.br
appcartoes.prebanco.com.br
www.m2.prebanco.com.br
api.gran.transfgran.leasing.prebanco.com.br
jira.prebanco.com.br
bc2.bradescocustodiab.prebanco.com.br
www.ib3.prebanco.com.br
pf.api.prebanco.com.br
webaccess.prebanco.com.br
bitbucketcp.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
frontend-ho.agro.prebanco.com.br
pdpj.prebanco.com.br
awcm.prebanco.com.br
acsm1.prebanco.com.br
jamnmtp.prebanco.com.br
apps.adqemp.prebanco.com.br
appcartoes.prebanco.com.br
appcartoesi.prebanco.com.br
wsmt.prebanco.com.br
www.sisesgo.prebanco.com.br
frontend-ho.agro.prebanco.com.br
jira.prebanco.com.br
wwws.portaladmib.prebanco.com.br
04.bia-chat-server.prebanco.com.br
content.prebanco.com.br
inbot.prebanco.com.br
www.m.prebanco.com.br
webaccess.prebanco.com.br
www.bims.prebanco.com.br
apinext.prebanco.com.br
api.canais.prebanco.com.br
octane.prebanco.com.br
www.sisesgo.prebanco.com.br
m23.bradesconetempresa.prebanco.com.br
mulesoft.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
www.treinamento.prebanco.com.br
tunnel.prebanco.com.br
wwws1.bradescointernacional.prebanco.com.br
content.prebanco.com.br
www.m.prebanco.com.br
tv2.prebanco.com.br
www.ib1.prebanco.com.br
wsmt.prebanco.com.br
proxy.api.prebanco.com.br
idhibrida.prebanco.com.br
nexuscp.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
acc.prebanco.com.br
api.gran.transfgran.bradesco.prebanco.com.br
idm.prebanco.com.br
acessom2.prebanco.com.br
filetransfer.prebanco.com.br
autorizacao.api.prebanco.com.br
wwws.portaladmib.prebanco.com.br
www.rcad.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
gdmo.prebanco.com.br
wwws2.bradescointernacional.prebanco.com.br
agex.prebanco.com.br
www.m2.prebanco.com.br
autscm.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
www.sisesgo.prebanco.com.br
www.sacw.sacl.prebanco.com.br
cp.prebanco.com.br
jamnmtp.prebanco.com.br
tv2.prebanco.com.br
console.prebanco.com.br
captcha.prebanco.com.br
www.m.prebanco.com.br
appcartoesi.prebanco.com.br
appcartoes.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
openapi-axway.api.prebanco.com.br
ws.push.emsg.prebanco.com.br
bfresponsivo.prebanco.com.br
www.m1.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
bc3.bradescocustodiab.prebanco.com.br
sectransportho-platfunc.prebanco.com.br

Certificate

The complete raw certificate details for pf.api.prebanco.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAundVRNFSRLRcyHNYVa0V
PVe7ckst71FGqATeMxYajkpYeZwPN+mfCeWcYMPKAyHAbE0hyhu7sbnBkkx8r+rQ
Uk7qJaelBbVuVxhCzW7GlK6QToIa3lmxuJdBE2brj6bs3+RM64anGzRDFDqshbVu
+kB6x9Af+pQb9cS3ty30jEmis+3cFchdD69op/0OQv4v0dGUrHhCaXtE6Y9AQF7z
HyuOeI+QjqeZOC9tN5i56rbTkMVB1LN4f7FcLP048oCv04H/4DFyU50Pu1DeQ5U+
iZYA8gSeb7VPxrlvorQm5LX9wzXlFieUa2HXtJJi5aC0xWswsPE55hL+a5v79IbO
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37996923712485809091820564813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 19:21:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 19:21:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAO PAULO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OSASCO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BANCO BRADESCO S A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pf.api.prebanco.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23539170059283550274826349915778596831147153686508704035228425822348153594803743488589097094270354390889367336249725628061912833869423185719565499630983767897242499416686365228144128704050006883267346362536776674561660449303422153057891253330713962541293552719317271151132606840583773533341809848856308579444436276444036416460185473722788825157995573162013754585735955956140129168880521647756375574096094687278910203363217180093376405889640787911348978849054251525790367027463021296308010963543950979119310042196674570188734136882790066061969812937695110757794200693874826096184157296943143351067398892939563699195637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf.api.prebanco.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97ff0af633f84c35b051b1196e731300acc694c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001887341e49e0000040300473045022100db425edb9b218d35edc71b0c16b515d697c5c7a31f1202b7e1f98228cae85a9602201c69c7a5cc128be44a3ef55cb5ee642de770bb7c6b1b7ec0683d4dc6c459c4ed00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001887341e423000004030047304502210083dd27f5e899c6476f7567ede09a9f7c4c86935da2b4567604fe2185e2c7235a02203727e98da651d2de8ca9df60821db565be4e622c6bf9926adba456adf4e2b9a7007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001887341e44e0000040300473045022100c373ab93c574dc7f9b1d6fa3d27bb14b189c5770bc63df284988083f79e6590a02204e5c5691f4d1efb134dea03f9ba42b68ba4a013436153c1fda7e259dc432684c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ffd71f0418bff6891dbf1ffec57896182181fd1ad628f338e86e073f3d7c01a4c76eb6ab026242d213a4b8dbffdefe06a8c4cf28c42abd778a9d2502b02fb01ab441849dc35b43070666b92c2b7aac60cd0316b501a7144d9ae646ed6d6a8b9234bc2f80c5049a647f707a6558707d63f6f5ed9a7dd738d5be337ad183095b9e4b13294a55216d6047be141035de807e8bbe2d57457c73fba034c4c4b4fcbce9496af89a35d2e00eac9351cb960675cec75602afb7c6fcabf49999935a741a4450498a2a877fa6d60cd998f65753aadc30db7af2dca3ad2139762362fbae3af416f0164892914e164967ba049882694bb23fdc173691564548922e97daee838