intbr.prd.apps.rnp.br
- REDE NACIONAL DE ENSINO E PESQUISA - RNP -
Issued by RNP ICPEdu OV SSL CA 2019
About this certificate
This digital certificate with serial number 52:74:96:3a:0d:25:79:93:6f:12:16:52 was issued on by Rede Nacional de Ensino e Pesquisa - RNP.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
REDE NACIONAL DE ENSINO E PESQUISA - RNP
Organization:
REDE NACIONAL DE ENSINO E PESQUISA - RNP
State / Province:
RJ
Locality: Rio de Janeiro
Country: BR
Locality: Rio de Janeiro
Country: BR
Rede Nacional de Ensino e Pesquisa - RNP
Organization:
Rede Nacional de Ensino e Pesquisa - RNP
Country:
BR
This certificate has expire since
Certificate Details
Serial Number (hex): 52:74:96:3a:0d:25:79:93:6f:12:16:52Serial Number (int): 25518715626256476312395978322
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 5a:b3:5b:b6:43:b0:89:b5:24:cf:5f:26:1f:94:9f:90:24:21:6b:43
AuthorityKeyId: ab:30:c7:07:28:4b:cb:7a:8e:5b:fe:61:69:f7:d4:7a:b2:85:9b:48
Fingerprint (sha1): c6:f0:0a:78:ba:28:0c:3a:2d:fb:87:20:49:15:b2:c8:78:ff:87:82
Fingerprint (sha256): 15:aa:17:98:38:2d:27:c3:9d:67:d6:13:2e:80:14:b9:8c:38:52:22:e8:5e:dc:1a:d3:fd:e6:22:b4:82:12:12
Issuing Certificate URL: http://secure.globalsign.com/cacert/rnpicpeduovsslca2019.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/rnpicpeduovsslca2019CRL Distribution Point: http://crl.globalsign.com/rnpicpeduovsslca2019.crl
Check the revocation status for certificate intbr.prd.apps.rnp.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for intbr.prd.apps.rnp.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
intbr.prd.apps.rnp.br
*.intbr.prd.apps.rnp.br
*.intbr.prd.apps.rnp.br
Other certificates including the domain name rnp.br
(limited to 100 certificates)
cert00047-azurecdn.akamaized.net
lcp-drm.prd.app.rnp.br
cert00047-azurecdn.akamaized.net
viaipe.rnp.br
*.pop-mt.rnp.br
homolog.perfil.rnp.br
marker-eduroam.rnp.br
*.dev.mconf.rnp.br
cert00047-azurecdn.akamaized.net
hipchat-pratico.rnp.br
hmg.splunk.rnp.br
atendimento.rnp.br
www.pop-pi.rnp.br
filesender.rnp.br
va05-cps.rnp.br
*.ebc.rnp.br
splunk.rnp.br
nuvem.esr.rnp.br
mp.mconf.rnp.br
p1.icpedu.rnp.br
*.pop-ba.rnp.br
*.cafe.rnp.br
viaipecoletor-rn.rnp.br
*.pop-pr.rnp.br
*.repositorio.rnp.br
cert00047-azurecdn.akamaized.net
*.fies.hmg.apps.rnp.br
portal-fibre.cafeexpresso.rnp.br
git.pop-pi.rnp.br
dados.rnp.br
*.curadoria-homolog.rnp.br
centreon-cdc-pe.rnp.br
*.pop-pe.rnp.br
appstarter-exemplo.tst.apps.rnp.br
*.intbr.loadtest.apps.rnp.br
*.cafeexpresso.rnp.br
flow.hmg-nasnuvens.rnp.br
*.pop-al.rnp.br
cert00047-azurecdn.akamaized.net
*.pop-ce.rnp.br
*.pop-mg.rnp.br
mconf.rnp.br
*.cipo.rnp.br
cert00047-azurecdn.akamaized.net
centreon-ac.rnp.br
portal.iguassu.rnp.br
*.nasnuvens.gsc-tst.rnp.br
cert00047-azurecdn.akamaized.net
api.ciencianaescola.dev.apps.kloud.rnp.br
redecinema.rnp.br
*.ceo.rnp.br
hmg-git.rnp.br
*.h.mconf.rnp.br
*.impactaclima-hmg.rnp.br
monitoramento-hml.rnp.br
mail.pop-pi.rnp.br
edge-ac-01.eduplay.rnp.br
*.pop-ac.rnp.br
intbr.tst.apps.rnp.br
atestoweb-api.hmg.apps.kloud.rnp.br
gti-df-senhasegura-01.rnp.br
api.cep.tst.apps.kloud.rnp.br
*.intbr.tst.apps.rnp.br
hmg-idp-edu-v3.rnp.br
idp.rnp.br
centreon-mg.rnp.br
plag.prd.apps.rnp.br
diplomadigital.rnp.br
integra.rnp.br
cert00047-azurecdn.akamaized.net
plataformafor.tst.apps.rnp.br
encsirts.rnp.br
cloud.pop-pi.rnp.br
cert00047-azurecdn.akamaized.net
viaipecoletor-am.rnp.br
centreon-rr.rnp.br
listas.rnp.br
*.pop-mg.rnp.br
ustore1.rnp.br
mail.pop-pi.rnp.br
*.nasnuvens.gsc-hmg.rnp.br
evault02.rnp.br
cert00047-azurecdn.akamaized.net
rocketchat.rnp.br
vcenter-infras-locais.rnp.br
cert00047-azurecdn.akamaized.net
cadvisor.prometheus.pop-mg.rnp.br
cert00047-azurecdn.akamaized.net
graylog.pop-ma.rnp.br
cert00047-azurecdn.akamaized.net
intbr.prd.apps.rnp.br
homolog-icd.rnp.br
ustore1.rnp.br
*.filesender.rnp.br
www.pop-pi.rnp.br
cafeexpresso.rnp.br
ldap.pop-rj.rnp.br
cert00047-azurecdn.akamaized.net
cert00047-azurecdn.akamaized.net
commonui-bs3.ala.sibbr-prod.rnp.br
lcp-drm.prd.app.rnp.br
cert00047-azurecdn.akamaized.net
viaipe.rnp.br
*.pop-mt.rnp.br
homolog.perfil.rnp.br
marker-eduroam.rnp.br
*.dev.mconf.rnp.br
cert00047-azurecdn.akamaized.net
hipchat-pratico.rnp.br
hmg.splunk.rnp.br
atendimento.rnp.br
www.pop-pi.rnp.br
filesender.rnp.br
va05-cps.rnp.br
*.ebc.rnp.br
splunk.rnp.br
nuvem.esr.rnp.br
mp.mconf.rnp.br
p1.icpedu.rnp.br
*.pop-ba.rnp.br
*.cafe.rnp.br
viaipecoletor-rn.rnp.br
*.pop-pr.rnp.br
*.repositorio.rnp.br
cert00047-azurecdn.akamaized.net
*.fies.hmg.apps.rnp.br
portal-fibre.cafeexpresso.rnp.br
git.pop-pi.rnp.br
dados.rnp.br
*.curadoria-homolog.rnp.br
centreon-cdc-pe.rnp.br
*.pop-pe.rnp.br
appstarter-exemplo.tst.apps.rnp.br
*.intbr.loadtest.apps.rnp.br
*.cafeexpresso.rnp.br
flow.hmg-nasnuvens.rnp.br
*.pop-al.rnp.br
cert00047-azurecdn.akamaized.net
*.pop-ce.rnp.br
*.pop-mg.rnp.br
mconf.rnp.br
*.cipo.rnp.br
cert00047-azurecdn.akamaized.net
centreon-ac.rnp.br
portal.iguassu.rnp.br
*.nasnuvens.gsc-tst.rnp.br
cert00047-azurecdn.akamaized.net
api.ciencianaescola.dev.apps.kloud.rnp.br
redecinema.rnp.br
*.ceo.rnp.br
hmg-git.rnp.br
*.h.mconf.rnp.br
*.impactaclima-hmg.rnp.br
monitoramento-hml.rnp.br
mail.pop-pi.rnp.br
edge-ac-01.eduplay.rnp.br
*.pop-ac.rnp.br
intbr.tst.apps.rnp.br
atestoweb-api.hmg.apps.kloud.rnp.br
gti-df-senhasegura-01.rnp.br
api.cep.tst.apps.kloud.rnp.br
*.intbr.tst.apps.rnp.br
hmg-idp-edu-v3.rnp.br
idp.rnp.br
centreon-mg.rnp.br
plag.prd.apps.rnp.br
diplomadigital.rnp.br
integra.rnp.br
cert00047-azurecdn.akamaized.net
plataformafor.tst.apps.rnp.br
encsirts.rnp.br
cloud.pop-pi.rnp.br
cert00047-azurecdn.akamaized.net
viaipecoletor-am.rnp.br
centreon-rr.rnp.br
listas.rnp.br
*.pop-mg.rnp.br
ustore1.rnp.br
mail.pop-pi.rnp.br
*.nasnuvens.gsc-hmg.rnp.br
evault02.rnp.br
cert00047-azurecdn.akamaized.net
rocketchat.rnp.br
vcenter-infras-locais.rnp.br
cert00047-azurecdn.akamaized.net
cadvisor.prometheus.pop-mg.rnp.br
cert00047-azurecdn.akamaized.net
graylog.pop-ma.rnp.br
cert00047-azurecdn.akamaized.net
intbr.prd.apps.rnp.br
homolog-icd.rnp.br
ustore1.rnp.br
*.filesender.rnp.br
www.pop-pi.rnp.br
cafeexpresso.rnp.br
ldap.pop-rj.rnp.br
cert00047-azurecdn.akamaized.net
cert00047-azurecdn.akamaized.net
commonui-bs3.ala.sibbr-prod.rnp.br
Certificate
The complete raw certificate details for intbr.prd.apps.rnp.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIMUnSWOg0leZNvEhZSMA0GCSqGSIb3DQEBCwUAMGQxCzAJ BgNVBAYTAkJSMTEwLwYDVQQKEyhSZWRlIE5hY2lvbmFsIGRlIEVuc2lubyBlIFBl c3F1aXNhIC0gUk5QMSIwIAYDVQQDExlSTlAgSUNQRWR1IE9WIFNTTCBDQSAyMDE5 MB4XDTIxMTIwMjE4NTYxMFoXDTIzMDEwMzE4NTYxMFowgYYxCzAJBgNVBAYTAkJS MQswCQYDVQQIEwJSSjEXMBUGA1UEBxMOUmlvIGRlIEphbmVpcm8xMTAvBgNVBAoT KFJFREUgTkFDSU9OQUwgREUgRU5TSU5PIEUgUEVTUVVJU0EgLSBSTlAxHjAcBgNV BAMTFWludGJyLnByZC5hcHBzLnJucC5icjCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBALxKZhq9CdIB06+gre8XwdaVvAFJiEEZove+p4LiccOQWKESWCX/ aRwSMITG2o8YVebgBQf2WrEHpTJLA9C9+D1PMQ9xXqpmS2RmSYfsQuG9dwGmRm9Q XTLJKaFTVP474Xgx/pi+6fkXZRYa4Z2jtp4l07a5WUhOyYiA9hyYg8sN3f8WIXDK +ag347o3QA6p2JHNJ4olKYaMAs43kIRulwCXmVh5VXp+RJplu2kbmZ2A/Zn27QTl LhNmZI+yrzLjv6rveT1ktc/fJFgfxqhOUSSG36emMurqSn6GLRP2zXuGOYDErqwn ZvQ6DgLAu5jj/NiqMHimD1cMw4wd2EaEyDEXb0z/r9egBcWwQor3BwV/u5X+LMbK VF38RdZKSGAnPT3m0CY4DvY8qO1gHxh0ul33keHSJI8CAHIYPe3bE7fHwGmeOC8N PX1rrS0YNWMm2BG5aGs57vRFFOQ05AaIvZQrMWTyHCLm5CYK+Q7VpdgCH4eowXyJ NdHPQ/DB/AnJRKS/kdYV7T2ywSe8j2Oy9n2ZjQ1wZBnuPCQu0KX0thuYJsxggF/R 4nxmtDJP+kt7EK2E46X68Cz3e4DranKxdjdhqRfEQXRgM+fLa8FoxL0RpAtJFWZk D13WsXmYOACiaT7p5HLwQYARXt+794DqnoYiwl4fpJfiurWCqLiIhB1xAgMBAAGj ggIFMIICATAOBgNVHQ8BAf8EBAMCBaAwgZcGCCsGAQUFBwEBBIGKMIGHMEgGCCsG AQUFBzAChjxodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9ybnBp Y3BlZHVvdnNzbGNhMjAxOS5jcnQwOwYIKwYBBQUHMAGGL2h0dHA6Ly9vY3NwLmds b2JhbHNpZ24uY29tL3JucGljcGVkdW92c3NsY2EyMDE5MFYGA1UdIARPME0wQQYJ KwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24u Y29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMEMGA1UdHwQ8MDow OKA2oDSGMmh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm5waWNwZWR1b3Zzc2xj YTIwMTkuY3JsMDkGA1UdEQQyMDCCFWludGJyLnByZC5hcHBzLnJucC5icoIXKi5p bnRici5wcmQuYXBwcy5ybnAuYnIwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMB8GA1UdIwQYMBaAFKswxwcoS8t6jlv+YWn31HqyhZtIMB0GA1UdDgQWBBRa s1u2Q7CJtSTPXyYflJ+QJCFrQzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQsFAAOCAQEACK1lk2PYsg+M4Qbvp90bGqp21gmyb1LIz0DajCzuF8r1Ex9C 3spWfzf0zcHZAvj/BKUmT7VMiOLeOUlPZazKL1yoWfUUbi9G9nUVinV+et1ABmJF a9hWcCdC6SQsOrVBTS40kQd77CISfUkL9CPgePFy9eDLHn7GMVc7RbPInZIxrXPl RvIAFBVKfS9Qdca+r1wilZb4TTNd4i7XInaaDjSZpaDxEE3reo8IT81wWlPME2nD Tzku3GrlBIoAdsB7r2UeS2L3H3owo9jZ9Mkfq398pm+gSJUWGBo5M3qJjAGULPxR DcsFJKBSnSi4BXgC/3BBN1NloRm6qzsqXKYo7A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvEpmGr0J0gHTr6Ct7xfB 1pW8AUmIQRmi976nguJxw5BYoRJYJf9pHBIwhMbajxhV5uAFB/ZasQelMksD0L34 PU8xD3FeqmZLZGZJh+xC4b13AaZGb1BdMskpoVNU/jvheDH+mL7p+RdlFhrhnaO2 niXTtrlZSE7JiID2HJiDyw3d/xYhcMr5qDfjujdADqnYkc0niiUphowCzjeQhG6X AJeZWHlVen5EmmW7aRuZnYD9mfbtBOUuE2Zkj7KvMuO/qu95PWS1z98kWB/GqE5R JIbfp6Yy6upKfoYtE/bNe4Y5gMSurCdm9DoOAsC7mOP82KoweKYPVwzDjB3YRoTI MRdvTP+v16AFxbBCivcHBX+7lf4sxspUXfxF1kpIYCc9PebQJjgO9jyo7WAfGHS6 XfeR4dIkjwIAchg97dsTt8fAaZ44Lw09fWutLRg1YybYEbloaznu9EUU5DTkBoi9 lCsxZPIcIubkJgr5DtWl2AIfh6jBfIk10c9D8MH8CclEpL+R1hXtPbLBJ7yPY7L2 fZmNDXBkGe48JC7QpfS2G5gmzGCAX9HifGa0Mk/6S3sQrYTjpfrwLPd7gOtqcrF2 N2GpF8RBdGAz58trwWjEvRGkC0kVZmQPXdaxeZg4AKJpPunkcvBBgBFe37v3gOqe hiLCXh+kl+K6tYKouIiEHXECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 25518715626256476312395978322 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rede Nacional de Ensino e Pesquisa - RNP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RNP ICPEdu OV SSL CA 2019' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 18:56:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 18:56:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RJ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rio de Janeiro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REDE NACIONAL DE ENSINO E PESQUISA - RNP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intbr.prd.apps.rnp.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768158712946751171184813170591642691088116945120914002155775381760767134968358292845011700504110515514829205771750199052998601240415957061093085696685903770480393006387846178013167728704663997261748668295283096630275555291397558518956047495799908518452314809682727643691213053690870962822343558353908073740426480129579027843947259661102838931555809557824405154261580070821488101261039107720705985152731290811140609154327472937285415764688805854177156800476576144458072956824548883570636695682804936178285375227504632277110040965024819704475346769447805651773804360879451670218767686895459780744667077354853415008085969575148058142725996856990883312002231742093103762774737501105422006945001202627214052673100760721423349176775761880704290240563302609171152131467479387819605172583210780627910929826379532657796129238075609530239425196092341695918631927264895680074543930842849301395792438742899177820424542713318979090855895216740181196233867391596777439828465630442950841518059078157342869331961063358643362248987102167083589431996833664950706975761848704284082412080106517127846181099129983213095337965193632738561137472065632643980856401100201318120207951353635596502100558296007208403551277632635802834852942449997528164548746609 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/rnpicpeduovsslca2019.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/rnpicpeduovsslca2019' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/rnpicpeduovsslca2019.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intbr.prd.apps.rnp.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intbr.prd.apps.rnp.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab30c707284bcb7a8e5bfe6169f7d47ab2859b48 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5ab35bb643b089b524cf5f261f949f9024216b43 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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