api.portoseguro.com.br

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 58:2c:83:6f:2d:19:a9:a9:a0:9a:c2:aa was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.portoseguro.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 58:2c:83:6f:2d:19:a9:a9:a0:9a:c2:aa
Serial Number (int): 27288494281189072988884615850
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ce:95:67:a0:42:4e:95:5a:72:b7:57:ac:66:26:5f:ec:79:91:4f:8c
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 01:b2:90:13:9d:36:39:b0:88:38:a3:79:66:72:1e:c0:0e:41:1c:b2
Fingerprint (sha256): 1c:b7:b3:1b:13:f2:99:1d:bc:65:4b:69:4e:9b:dd:11:5c:93:29:65:7b:42:dc:65:51:66:b9:5f:48:f0:bb:7b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate api.portoseguro.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.portoseguro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.portoseguro.com.br
www.api.portoseguro.com.br

Other certificates including the domain name portoseguro.com.br

(limited to 100 certificates)
portonet.portoseguro.com.br
mkt.visitavirtual360.pt
portoapicloud-dev.portoseguro.com.br
portoapicloud-mtls.portoseguro.com.br
portalvpn.portoseguro.com.br
bank.portoseguro.com.br
imperva.com
*.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
apihml.portoseguro.com.br
hml.portoseguro.com.br
venda-stage.portoseguro.com.br
portoapicloud-mtls-hml.portoseguro.com.br
colportopar.portoseguro.com.br
sso-clientes-hml.portoseguro.com.br
mkt.portoseguro.com.br
*.psstore.portoseguro.com.br
recupera.portoseguro.com.br
portoseguro.com.br
prestador.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
alogsoma.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
visitantes4.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
nac11dc00-tlf.portoseguro.com.br
cloud.mkthub.portoseguro.com.br
portoseguro.com.br
click.novidades.portoseguro.com.br
sso.portoseguro.com.br
visitantes3.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
blog.portoseguro.com.br
portoseguro.com.br
portoseguro.com.br
apicorporativops.portoseguro.com.br
antispam.portoseguro.com.br
dev.api.saude.portoseguro.com.br
loja.portoseguro.com.br
ecomadmin.portoseguro.com.br
wwws.portoseguro.com.br
open-api.portoseguro.com.br
cloud.novidades.portoseguro.com.br
3dsecure.portoseguro.com.br
mtls-open-api-sandbox.portoseguro.com.br
tableau.portoseguro.com.br
loja-api.portoseguro.com.br
api.portoseguro.com.br
news.multichannelmkt.com
api.portoseguro.com.br
apicorporativops.portoseguro.com.br
mkt.lukrepresentacoes.net.br
NAC11DC00-TLF.portoseguro.com.br
hml.api.saude.portoseguro.com.br
wiprod.portoseguro.com.br
apidev-portoseg.portoseguro.com.br
hml.portoseguro.com.br
bwise.portoseguro.com.br
homeoffice.portoseguro.com.br
vidacloud.portoseguro.com.br
salvados.portoseguro.com.br
dev.saude.portoseguro.com.br
auto.portoseguro.com.br
portalvisitantes.portoseguro.com.br
apihml.portoseguro.com.br
api-portoseg.portoseguro.com.br
nac12db02-tlf.portoseguro.com.br
sso-clientes.portoseguro.com.br
mkt.portoseguro.com.br
*.openinsurance-dev.portoseguro.com.br
apibank-qa.portoseguro.com.br
portoseguro.com.br
email.portoseguro.com.br
imperva.com
antispam.portoseguro.com.br
mkt.interhome.com.br
portal.meiosdepagamento.portoseguro.com.br
portoseguro.com.br
mkt.centrodepneus.pt
aluguel.portoseguro.com.br
bwise.portoseguro.com.br
mkt.descobrimentos.com.pt
garantia.portoseguro.com.br
ssohml.portoseguro.com.br
auto.portoseguro.com.br
visitantes1.portoseguro.com.br
haproxy.portoseguro.com.br
mkt.inbet.pt
click.consorcio.portoseguro.com.br
apis.portoseguro.com.br
prd.parceirosgcp.portoseguro.com.br
portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
loja-auth.portoseguro.com.br
webmail.portoseguro.com.br
hub-dev.portoseguro.com.br
portal.meiosdepagamento.portoseguro.com.br
api.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
home.portoseguro.com.br

Certificate

The complete raw certificate details for api.portoseguro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Suc/OWxRhuwX13LEtg
FDyF8dLwBj3nTarAF4s8GLwpKvsKcPWhH/lWGiZpU8ZnkiQ7EN4nQrEEPnbREopA
ZeBMVOvf0pUo2/Xl6o+J3a63ndcsNj5cvConla/UcxU1sNtRl90H0IKrBW+77DZf
z1X+hcdi2ls1yCooPjdGM7lH1LyJzQq8nx3E5b9kPxKDXdd8fT+e0h3Wr2JdI6n1
NnohyZHWxyCcQEMQ34ATdAiJ6aSKIZNW0CmzYQIe0vy2U9CGpU01Nb9d5ISlV/8S
CoSBdPVplBhM6v1mlH1Po/2eab9A1DyFp+rDXlIf47zn+jqNjl9zRqdOXAJGLNh/
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27288494281189072988884615850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 14:39:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 14:39:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.portoseguro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25676023784849713804072587044173376561081311095682163618665546591179155105164572662802446679404154596907892859934064006555859955468852957581954147658410126697475826035050192867955285752574674462720752110828535559069884036953405696471914595939083589480228302037365344064503113495939155907184019435567680616019599687607451861475328050997426430953861773643009874921967770564175602268071680893913961425072122557145825929228555943592125481079243546159522117596853602850867793874883941935212138684889972893474523323477633352700803735336860177195692914811736931567758599106836913590201122388545266983417447750835104818692029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.portoseguro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce9567a0424e955a72b757ac66265fec79914f8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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