apicorporativops.portoseguro.com.br

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 16:3d:1f:27:a3:f4:25:b5:37:82:e2:b5 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apicorporativops.portoseguro.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 16:3d:1f:27:a3:f4:25:b5:37:82:e2:b5
Serial Number (int): 6882561815664180908026684085
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 03:0f:9f:bb:49:ad:bc:96:61:6f:f9:ac:3e:d4:cb:43:ca:ea:8f:22
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 26:f5:32:f2:bc:c2:e4:b9:c1:c4:79:af:fd:00:26:15:a2:97:f7:f7
Fingerprint (sha256): 15:e1:1c:6a:ef:b5:90:3e:30:c4:73:6c:32:c5:32:df:10:29:de:b8:30:b9:57:71:a5:29:a0:99:30:f9:5b:ea

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate apicorporativops.portoseguro.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apicorporativops.portoseguro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apicorporativops.portoseguro.com.br
www.apicorporativops.portoseguro.com.br

Other certificates including the domain name portoseguro.com.br

(limited to 100 certificates)
portonet.portoseguro.com.br
mkt.visitavirtual360.pt
portoapicloud-dev.portoseguro.com.br
portoapicloud-mtls.portoseguro.com.br
portalvpn.portoseguro.com.br
bank.portoseguro.com.br
imperva.com
*.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
apihml.portoseguro.com.br
hml.portoseguro.com.br
venda-stage.portoseguro.com.br
portoapicloud-mtls-hml.portoseguro.com.br
colportopar.portoseguro.com.br
sso-clientes-hml.portoseguro.com.br
mkt.portoseguro.com.br
*.psstore.portoseguro.com.br
recupera.portoseguro.com.br
portoseguro.com.br
prestador.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
alogsoma.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
visitantes4.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
nac11dc00-tlf.portoseguro.com.br
cloud.mkthub.portoseguro.com.br
portoseguro.com.br
click.novidades.portoseguro.com.br
sso.portoseguro.com.br
visitantes3.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
blog.portoseguro.com.br
portoseguro.com.br
portoseguro.com.br
apicorporativops.portoseguro.com.br
antispam.portoseguro.com.br
dev.api.saude.portoseguro.com.br
loja.portoseguro.com.br
ecomadmin.portoseguro.com.br
wwws.portoseguro.com.br
open-api.portoseguro.com.br
cloud.novidades.portoseguro.com.br
3dsecure.portoseguro.com.br
mtls-open-api-sandbox.portoseguro.com.br
tableau.portoseguro.com.br
loja-api.portoseguro.com.br
api.portoseguro.com.br
news.multichannelmkt.com
api.portoseguro.com.br
apicorporativops.portoseguro.com.br
mkt.lukrepresentacoes.net.br
NAC11DC00-TLF.portoseguro.com.br
hml.api.saude.portoseguro.com.br
wiprod.portoseguro.com.br
apidev-portoseg.portoseguro.com.br
hml.portoseguro.com.br
bwise.portoseguro.com.br
homeoffice.portoseguro.com.br
vidacloud.portoseguro.com.br
salvados.portoseguro.com.br
dev.saude.portoseguro.com.br
auto.portoseguro.com.br
portalvisitantes.portoseguro.com.br
apihml.portoseguro.com.br
api-portoseg.portoseguro.com.br
nac12db02-tlf.portoseguro.com.br
sso-clientes.portoseguro.com.br
mkt.portoseguro.com.br
*.openinsurance-dev.portoseguro.com.br
apibank-qa.portoseguro.com.br
portoseguro.com.br
email.portoseguro.com.br
imperva.com
antispam.portoseguro.com.br
mkt.interhome.com.br
portal.meiosdepagamento.portoseguro.com.br
portoseguro.com.br
mkt.centrodepneus.pt
aluguel.portoseguro.com.br
bwise.portoseguro.com.br
mkt.descobrimentos.com.pt
garantia.portoseguro.com.br
ssohml.portoseguro.com.br
auto.portoseguro.com.br
visitantes1.portoseguro.com.br
haproxy.portoseguro.com.br
mkt.inbet.pt
click.consorcio.portoseguro.com.br
apis.portoseguro.com.br
prd.parceirosgcp.portoseguro.com.br
portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
loja-auth.portoseguro.com.br
webmail.portoseguro.com.br
hub-dev.portoseguro.com.br
portal.meiosdepagamento.portoseguro.com.br
api.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
home.portoseguro.com.br

Certificate

The complete raw certificate details for apicorporativops.portoseguro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtGuQPG3WXaRu5o4V49
I4Z8iqENAy/ql1+OdBC95Zjg7cGB/EMXqQkNlUX9foCPEqKSm8ezptYCNEsZlitG
/55ItatmW3nvzWqaG4dgBQusvrnWXi/C659M6QA/QrARjB4KAh1/kcGYFK7jJGah
IVsTWmsBVgEaRRSUgv58MwbKKhY3hH2R2W+Y6uY+YAqbGZeG6pqN/P5m9NZ3GlIB
wkhG1WpPEsrRICs+Ylqyns7s53thDZfD8Lyb2zzT+0MDQKHtDYseWsWjEXHwp9Yy
NteapZ529z4RYnuUToT5nUu0A+UpLI9Yn0tdEsasLtbnNmuIvPfLcsGTxfJaKXvd
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6882561815664180908026684085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 13:32:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 13:32:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apicorporativops.portoseguro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21040018096315757952533153282025996227972926868573912246022719402706029539044827316994373220435130177108055367067955649765412409309385493919831107431325571438557012790894748908848211789169268692935793098238660165765389927833799834943504404042293465621688342443805419329848104521996144137442297977874679745866831991505860176483855562870184013243168546637033952350441563416974454952968634447311539836513238618112512938851645485674137098344065212010528349346185042108950692163107338108973309287902369250504827703952431290226314454832410610319261052132255874959232622476093088045841359972153938649101146297979008704044371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apicorporativops.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apicorporativops.portoseguro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							030f9fbb49adbc96616ff9ac3ed4cb43caea8f22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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