www.goomec.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5d:f3:8b:92:49:eb:8a:72:1c:27:6a:8e was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.goomec.com.br,OU=Domain Control Validated,C=BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:f3:8b:92:49:eb:8a:72:1c:27:6a:8e
Serial Number (int): 29076533995043703130136472206
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 84:b0:a4:f6:77:7c:1b:25:ee:5d:2f:56:16:9d:d8:be:93:ed:f1:cc
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 95:55:58:1b:6e:86:f7:6d:be:81:09:9c:ec:a9:0a:76:60:f8:69:8e
Fingerprint (sha256): 1f:89:3a:db:4a:ef:f3:d6:90:b5:c5:72:f5:ee:b2:f6:fb:27:ed:0d:1c:21:60:71:1d:fc:77:70:b8:01:a2:ee

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.goomec.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.goomec.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.goomec.com.br
goomec.com.br

Other certificates including the domain name goomec.com.br

(limited to 100 certificates)
goomec.com.br
csv.propisipropers.com
lighthousecc.app
airmedix.app
www.goomec.com.br
www.goomec.com.br
mail.goomec.com.br
www.goomec.com.br
goomec.com.br
mail.goomec.com.br
harkiratwedsdinesh.com
ideta.io
goomec.com.br
admin.mark8.co.th
goomec.com.br
www.goomec.com.br
mail.goomec.com.br
mail.goomec.com.br
www.goomec.com.br
www.modconvanity.com

Certificate

The complete raw certificate details for www.goomec.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29076533995043703130136472206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 00:55:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:55:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.goomec.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 628134652253799860723243540296433007534484152505150068890336507548459664067244054596075025970292669713716721849231230161637819518907024381787124520677949360746227795186702248761925408177796703183907778063804354859963608243584430000296202296443918007443624214487823006157492177167647995009613593516334233549751100042717469688869212047168649825834312012593629736824306170271959129324454667084810034889061919892213662083291623483714297824586724230165863227770030873996127376632951723116068238419742644793625728808217447061056679572880505955929436569126362637773101819696823557981442742629545468362715749170650184167326144287773764674000507606344669424991613436329255754990129549919469088159557923855456739496335508052571919590575144985341993091368577010108055541704136086273940499004857697657687395000097028634704820811071675366429393048403477835776905293557535103261816601052776628651472810359837644513172759165861837122764273411407359581441219222438193047518769829804026566629834276089298991123804576690688054453380568999122508747191679008017707443045034364506175964382276434220995262181115201593061674956086299462711435994452968448157021762502209570686751796517734441488707488065416296483016655522167099510889968617169112791400908611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goomec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goomec.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84b0a4f6777c1b25ee5d2f56169dd8be93edf1cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168301bbb280000040300483046022100a493a7c2301bd9c4878577831288828f31f81c01fbc3d2a92a61155194273b8a022100886b3b95e3f31c0d5e2ef8c05cff9dfc65bb8a23bb4ae1e8d4402b0cba5c071c0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000168301bbaef0000040300483046022100809c0d3d3701a87a0f5de7626d959fb92ee76b4fb6602004c80928750cf2d802022100ac1da6e49e044053978ac950a5984fd1b03a34e9b0cb0ea7b147d51f713795af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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