visir.maxwell.vrac.puc-rio.br

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0a:92:09:f9:7e:a4:6c:41:87:49:09:5f:40:b7:88:72 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=visir.maxwell.vrac.puc-rio.br

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:92:09:f9:7e:a4:6c:41:87:49:09:5f:40:b7:88:72
Serial Number (int): 14050557607888028775930525114485409906
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:96:57:3c:46:dd:7e:91:ed:a0:4f:d4:c1:b8:89:18:5f:83:57:e6
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): fb:70:0e:d4:96:8f:30:72:b2:99:7d:23:e3:21:9a:8c:79:98:5b:05
Fingerprint (sha256): 1d:f0:df:a0:65:61:55:6c:22:1b:c0:77:0b:89:73:a4:dc:61:70:d9:e9:3a:5d:7c:60:62:98:74:2c:0a:0e:d9

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate visir.maxwell.vrac.puc-rio.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for visir.maxwell.vrac.puc-rio.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

visir.maxwell.vrac.puc-rio.br

Other certificates including the domain name puc-rio.br

(limited to 100 certificates)
vestibular.puc-rio.br
cceweb.adm.cce.puc-rio.br
portalsest.gtep.civ.puc-rio.br
mail.iag.puc-rio.br
educacaodigital.ccead.puc-rio.br
med.puc-rio.br
sgu.rdc.puc-rio.br
antigo.iag.puc-rio.br
tower.1nspirationdigital.com
iagimage.iag.puc-rio.br
*.rdc.puc-rio.br
www.fis.puc-rio.br
webmail.puc-rio.br
diplomas.puc-rio.br
med.puc-rio.br
*.tecgraf.puc-rio.br
www.thebrij.tk
mail.iag.puc-rio.br
sau.intranet.puc-rio.br
*.iag.puc-rio.br
intertec.ituc.puc-rio.br
webmail.esp.puc-rio.br
iag.puc-rio.br
sau.puc-rio.br
ler.iiler.puc-rio.br
*.cetuc.puc-rio.br
mail.iag.puc-rio.br
www.puc-rio.br
*.tecgraf.puc-rio.br
sgu.rdc.puc-rio.br
acesso.rdc.puc-rio.br
www.med.puc-rio.br
iagimage.iag.puc-rio.br
ccead.puc-rio.br
www.puc-rio.br
siga.iag.puc-rio.br
vestibular.puc-rio.br
poseidon.les.inf.puc-rio.br
webmail.aaa.puc-rio.br
enem.biobd.inf.puc-rio.br
*.jur.puc-rio.br
ler.iiler.puc-rio.br
eadpos.iag.puc-rio.br
sau.intranet.puc-rio.br
www.dbd.puc-rio.br
webmail.esp.puc-rio.br
iag.puc-rio.br
portalsest.gtep.civ.puc-rio.br
poseidon.les.inf.puc-rio.br
vestibular.puc-rio.br
poseidon.les.inf.puc-rio.br
wifi.rdc.puc-rio.br
mail.iag.puc-rio.br
webmail.puc-rio.br
cc-oncall-info.api4.thorbooking.com
sis.ccci.puc-rio.br
visir.maxwell.vrac.puc-rio.br
iiler.puc-rio.br
*.iag.puc-rio.br
iiler.puc-rio.br
sts.iag.puc-rio.br
portalsest.gtep.civ.puc-rio.br
admsau2.sau.intranet.puc-rio.br
iiler.puc-rio.br
*.rdc.puc-rio.br
www.puc-rio.br
sau.intranet.puc-rio.br
site-novo.iag.puc-rio.br
webmail.puc-rio.br
iag.puc-rio.br
webmail.puc-rio.br
webmail.cvi.puc-rio.br
www.puc-rio.br
nathangentry.me
*.rdc.puc-rio.br
sis.ccci.puc-rio.br
iaglink.iag.puc-rio.br
eadpos.iag.puc-rio.br
*.ctc.puc-rio.br
pucurgente.com.puc-rio.br
www.mapamazonia.nima.puc-rio.br
webmail.aluno.puc-rio.br
*.cetuc.puc-rio.br
www.puc-rio.br
smtp.puc-rio.br
enem.biobd.inf.puc-rio.br
www.med.puc-rio.br
especializacao.ccec.puc-rio.br
mserver.les.inf.puc-rio.br
www.med.puc-rio.br
portalsest.gtep.civ.puc-rio.br
*.rdc.puc-rio.br
med.puc-rio.br
ccead.puc-rio.br
ead.iag.puc-rio.br
iag.puc-rio.br
www.mapamazonia.nima.puc-rio.br
www.cpti.cetuc.puc-rio.br
webmail.aluno.puc-rio.br
webmail.puc-rio.br

Certificate

The complete raw certificate details for visir.maxwell.vrac.puc-rio.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA427MB09kr+ClZjVRcC9G
pBYwuowzGJA0njRHIcKNGgj/hLGopfzUquEMyYlZcBXsHhjpnCqRE6eGPRx98hUG
o6L/ac/yfbu3EoT2r5qqQETDWhkF5LTBh/dj9Tt6tWya7WoxTHBa2P9WpXIS2t+y
xIQoKJ3XLYumukVYYz5Tt+IbYkU8Jf5PQSMWuYsIeVlufnXWuJqboCcWOXZ4bKCH
qv9/IudpYzC31eQdt+z/bUz2nCKckUDbNWjy591TjAb1V/YWw0JablUWKNZvOCXd
2EJCQD1+nB8jEBPE38s1Pju8MK9qeenI2D4X+yTsO16cEOL5HZe7BZXZWNqTLNRV
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14050557607888028775930525114485409906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visir.maxwell.vrac.puc-rio.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28710731257672760810650526638583060191132674520575680886684773795921073091731245622045197919750611845703034982901470437136399735987271815401582320014789041602296160445867648209669094758866938182574646932297113274668237693180235724520180971934324374704149324811245816030960091846793902961115912103270110468700589192942389200061629979900544561757174989181938448685623585762152508040060028929165852141403550445424252383088795669198810025239286923622700119468929455785309126675687053974608412040734295663071311873387621346853241045678213241139597959065950249662264581423780609101456131428499651991674629512574650499224927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a696573c46dd7e91eda04fd4c1b889185f8357e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visir.maxwell.vrac.puc-rio.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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