intbr.prd.apps.rnp.br

- REDE NACIONAL DE ENSINO E PESQUISA - RNP -

Issued by RNP ICPEdu OV SSL CA 2019

About this certificate

This digital certificate with serial number 52:74:96:3a:0d:25:79:93:6f:12:16:52 was issued on by Rede Nacional de Ensino e Pesquisa - RNP.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

REDE NACIONAL DE ENSINO E PESQUISA - RNP

Organization: REDE NACIONAL DE ENSINO E PESQUISA - RNP
State / Province: RJ
Locality: Rio de Janeiro
Country: BR

Rede Nacional de Ensino e Pesquisa - RNP

Organization: Rede Nacional de Ensino e Pesquisa - RNP
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 52:74:96:3a:0d:25:79:93:6f:12:16:52
Serial Number (int): 25518715626256476312395978322
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 5a:b3:5b:b6:43:b0:89:b5:24:cf:5f:26:1f:94:9f:90:24:21:6b:43
AuthorityKeyId: ab:30:c7:07:28:4b:cb:7a:8e:5b:fe:61:69:f7:d4:7a:b2:85:9b:48

Fingerprint (sha1): c6:f0:0a:78:ba:28:0c:3a:2d:fb:87:20:49:15:b2:c8:78:ff:87:82
Fingerprint (sha256): 15:aa:17:98:38:2d:27:c3:9d:67:d6:13:2e:80:14:b9:8c:38:52:22:e8:5e:dc:1a:d3:fd:e6:22:b4:82:12:12

Issuing Certificate URL: http://secure.globalsign.com/cacert/rnpicpeduovsslca2019.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/rnpicpeduovsslca2019
CRL Distribution Point: http://crl.globalsign.com/rnpicpeduovsslca2019.crl

Check the revocation status for certificate intbr.prd.apps.rnp.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intbr.prd.apps.rnp.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intbr.prd.apps.rnp.br
*.intbr.prd.apps.rnp.br

Other certificates including the domain name rnp.br

(limited to 100 certificates)
cert00047-azurecdn.akamaized.net
lcp-drm.prd.app.rnp.br
cert00047-azurecdn.akamaized.net
viaipe.rnp.br
*.pop-mt.rnp.br
homolog.perfil.rnp.br
marker-eduroam.rnp.br
*.dev.mconf.rnp.br
cert00047-azurecdn.akamaized.net
hipchat-pratico.rnp.br
hmg.splunk.rnp.br
atendimento.rnp.br
www.pop-pi.rnp.br
filesender.rnp.br
va05-cps.rnp.br
*.ebc.rnp.br
splunk.rnp.br
nuvem.esr.rnp.br
mp.mconf.rnp.br
p1.icpedu.rnp.br
*.pop-ba.rnp.br
*.cafe.rnp.br
viaipecoletor-rn.rnp.br
*.pop-pr.rnp.br
*.repositorio.rnp.br
cert00047-azurecdn.akamaized.net
*.fies.hmg.apps.rnp.br
portal-fibre.cafeexpresso.rnp.br
git.pop-pi.rnp.br
dados.rnp.br
*.curadoria-homolog.rnp.br
centreon-cdc-pe.rnp.br
*.pop-pe.rnp.br
appstarter-exemplo.tst.apps.rnp.br
*.intbr.loadtest.apps.rnp.br
*.cafeexpresso.rnp.br
flow.hmg-nasnuvens.rnp.br
*.pop-al.rnp.br
cert00047-azurecdn.akamaized.net
*.pop-ce.rnp.br
*.pop-mg.rnp.br
mconf.rnp.br
*.cipo.rnp.br
cert00047-azurecdn.akamaized.net
centreon-ac.rnp.br
portal.iguassu.rnp.br
*.nasnuvens.gsc-tst.rnp.br
cert00047-azurecdn.akamaized.net
api.ciencianaescola.dev.apps.kloud.rnp.br
redecinema.rnp.br
*.ceo.rnp.br
hmg-git.rnp.br
*.h.mconf.rnp.br
*.impactaclima-hmg.rnp.br
monitoramento-hml.rnp.br
mail.pop-pi.rnp.br
edge-ac-01.eduplay.rnp.br
*.pop-ac.rnp.br
intbr.tst.apps.rnp.br
atestoweb-api.hmg.apps.kloud.rnp.br
gti-df-senhasegura-01.rnp.br
api.cep.tst.apps.kloud.rnp.br
*.intbr.tst.apps.rnp.br
hmg-idp-edu-v3.rnp.br
idp.rnp.br
centreon-mg.rnp.br
plag.prd.apps.rnp.br
diplomadigital.rnp.br
integra.rnp.br
cert00047-azurecdn.akamaized.net
plataformafor.tst.apps.rnp.br
encsirts.rnp.br
cloud.pop-pi.rnp.br
cert00047-azurecdn.akamaized.net
viaipecoletor-am.rnp.br
centreon-rr.rnp.br
listas.rnp.br
*.pop-mg.rnp.br
ustore1.rnp.br
mail.pop-pi.rnp.br
*.nasnuvens.gsc-hmg.rnp.br
evault02.rnp.br
cert00047-azurecdn.akamaized.net
rocketchat.rnp.br
vcenter-infras-locais.rnp.br
cert00047-azurecdn.akamaized.net
cadvisor.prometheus.pop-mg.rnp.br
cert00047-azurecdn.akamaized.net
graylog.pop-ma.rnp.br
cert00047-azurecdn.akamaized.net
intbr.prd.apps.rnp.br
homolog-icd.rnp.br
ustore1.rnp.br
*.filesender.rnp.br
www.pop-pi.rnp.br
cafeexpresso.rnp.br
ldap.pop-rj.rnp.br
cert00047-azurecdn.akamaized.net
cert00047-azurecdn.akamaized.net
commonui-bs3.ala.sibbr-prod.rnp.br

Certificate

The complete raw certificate details for intbr.prd.apps.rnp.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25518715626256476312395978322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rede Nacional de Ensino e Pesquisa - RNP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RNP ICPEdu OV SSL CA 2019'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 18:56:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 18:56:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RJ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rio de Janeiro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REDE NACIONAL DE ENSINO E PESQUISA - RNP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intbr.prd.apps.rnp.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768158712946751171184813170591642691088116945120914002155775381760767134968358292845011700504110515514829205771750199052998601240415957061093085696685903770480393006387846178013167728704663997261748668295283096630275555291397558518956047495799908518452314809682727643691213053690870962822343558353908073740426480129579027843947259661102838931555809557824405154261580070821488101261039107720705985152731290811140609154327472937285415764688805854177156800476576144458072956824548883570636695682804936178285375227504632277110040965024819704475346769447805651773804360879451670218767686895459780744667077354853415008085969575148058142725996856990883312002231742093103762774737501105422006945001202627214052673100760721423349176775761880704290240563302609171152131467479387819605172583210780627910929826379532657796129238075609530239425196092341695918631927264895680074543930842849301395792438742899177820424542713318979090855895216740181196233867391596777439828465630442950841518059078157342869331961063358643362248987102167083589431996833664950706975761848704284082412080106517127846181099129983213095337965193632738561137472065632643980856401100201318120207951353635596502100558296007208403551277632635802834852942449997528164548746609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/rnpicpeduovsslca2019.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/rnpicpeduovsslca2019'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/rnpicpeduovsslca2019.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intbr.prd.apps.rnp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intbr.prd.apps.rnp.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab30c707284bcb7a8e5bfe6169f7d47ab2859b48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ab35bb643b089b524cf5f261f949f9024216b43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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