apidev-portoseg.portoseguro.com.br

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 2f:69:e1:39:71:61:35:2e:03:e0:75:da was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apidev-portoseg.portoseguro.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:69:e1:39:71:61:35:2e:03:e0:75:da
Serial Number (int): 14673796264755681835802981850
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0c:2b:b5:c5:e6:c4:bc:21:b8:ff:3e:69:a8:5a:4b:1d:f5:33:06:44
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 5f:bb:90:1a:61:9a:c9:da:28:6c:cb:1f:de:69:10:d0:c3:5a:b5:ee
Fingerprint (sha256): 1f:af:d3:b1:a9:6b:ce:1b:9a:78:d2:78:2f:86:e1:65:67:23:ef:05:1e:42:65:f9:2c:01:1a:e1:52:03:25:72

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate apidev-portoseg.portoseguro.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apidev-portoseg.portoseguro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apidev-portoseg.portoseguro.com.br
www.apidev-portoseg.portoseguro.com.br

Other certificates including the domain name portoseguro.com.br

(limited to 100 certificates)
portonet.portoseguro.com.br
mkt.visitavirtual360.pt
portoapicloud-dev.portoseguro.com.br
portoapicloud-mtls.portoseguro.com.br
portalvpn.portoseguro.com.br
bank.portoseguro.com.br
imperva.com
*.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
apihml.portoseguro.com.br
hml.portoseguro.com.br
venda-stage.portoseguro.com.br
portoapicloud-mtls-hml.portoseguro.com.br
colportopar.portoseguro.com.br
sso-clientes-hml.portoseguro.com.br
mkt.portoseguro.com.br
*.psstore.portoseguro.com.br
recupera.portoseguro.com.br
portoseguro.com.br
prestador.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
alogsoma.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
visitantes4.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
nac11dc00-tlf.portoseguro.com.br
cloud.mkthub.portoseguro.com.br
portoseguro.com.br
click.novidades.portoseguro.com.br
sso.portoseguro.com.br
visitantes3.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
blog.portoseguro.com.br
portoseguro.com.br
portoseguro.com.br
apicorporativops.portoseguro.com.br
antispam.portoseguro.com.br
dev.api.saude.portoseguro.com.br
loja.portoseguro.com.br
ecomadmin.portoseguro.com.br
wwws.portoseguro.com.br
open-api.portoseguro.com.br
cloud.novidades.portoseguro.com.br
3dsecure.portoseguro.com.br
mtls-open-api-sandbox.portoseguro.com.br
tableau.portoseguro.com.br
loja-api.portoseguro.com.br
api.portoseguro.com.br
news.multichannelmkt.com
api.portoseguro.com.br
apicorporativops.portoseguro.com.br
mkt.lukrepresentacoes.net.br
NAC11DC00-TLF.portoseguro.com.br
hml.api.saude.portoseguro.com.br
wiprod.portoseguro.com.br
apidev-portoseg.portoseguro.com.br
hml.portoseguro.com.br
bwise.portoseguro.com.br
homeoffice.portoseguro.com.br
vidacloud.portoseguro.com.br
salvados.portoseguro.com.br
dev.saude.portoseguro.com.br
auto.portoseguro.com.br
portalvisitantes.portoseguro.com.br
apihml.portoseguro.com.br
api-portoseg.portoseguro.com.br
nac12db02-tlf.portoseguro.com.br
sso-clientes.portoseguro.com.br
mkt.portoseguro.com.br
*.openinsurance-dev.portoseguro.com.br
apibank-qa.portoseguro.com.br
portoseguro.com.br
email.portoseguro.com.br
imperva.com
antispam.portoseguro.com.br
mkt.interhome.com.br
portal.meiosdepagamento.portoseguro.com.br
portoseguro.com.br
mkt.centrodepneus.pt
aluguel.portoseguro.com.br
bwise.portoseguro.com.br
mkt.descobrimentos.com.pt
garantia.portoseguro.com.br
ssohml.portoseguro.com.br
auto.portoseguro.com.br
visitantes1.portoseguro.com.br
haproxy.portoseguro.com.br
mkt.inbet.pt
click.consorcio.portoseguro.com.br
apis.portoseguro.com.br
prd.parceirosgcp.portoseguro.com.br
portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
loja-auth.portoseguro.com.br
webmail.portoseguro.com.br
hub-dev.portoseguro.com.br
portal.meiosdepagamento.portoseguro.com.br
api.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
home.portoseguro.com.br

Certificate

The complete raw certificate details for apidev-portoseg.portoseguro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08tlKMTqn8Zxut8RvaCG
CT1Fv+I01ezKiZA8zmd1qGNa/gXfXeAZrVNo32OmX7l8kJXoobzygtO+TKR5uLPV
ctVRucD9JJTi4+al31TcUGTncvZapYlFOtx81j1nlCfQDro80O9Y++/SA55KbVyP
idowPOiMbna1PDb6tCrb4rBweul2Yp+mzMyTH1ZUBPpfGLdmmd0WyLVbN0LQF/Yt
3azQvrD+4lp2pZttkIY2ymf+cW3K8iRls0CRDBWiThx4y3WZ42YqIFsgoSeAEIjd
zCMRahrXcg3JlHe3Pidu7zr18c/H3Fcp5OjCUWTfxDCwJuNVXqf4EcMZKyFln0FT
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14673796264755681835802981850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 16:50:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 16:50:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apidev-portoseg.portoseguro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26736580236103170619059419179632145581113607808282812656503600775371068827760555562931687426226766408914577022798488570129569881141741136298857145217322439929751342629549465819060193565358427206023400427449454624492880142864757490086375651971513285942903182481543537957336467733235950063461915940757894697789741611579708230653701417310209164963857432389454429701616168639827944752179172859489169210981244568853951536413942978960717962548358701721052044440288841121087376992621111439066736734977054734700101173331107022320680313321154688917611905009983727208668572302034279700366663837419759997229294503298710114489263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidev-portoseg.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apidev-portoseg.portoseguro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c2bb5c5e6c4bc21b8ff3e69a85a4b1df5330644
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00906f216be772fecdc8e9ec42c899b1d6b40f5d08fb784449443a637783f14cd34f124c38c5926fd574547484362be50c029d07a81fda0947ced6dca0d97a6b96abed5e6d900a344bc39495749e6143144609934a77edd3299d5a10a87165612e673d7250824da84c704c6aa0d1d04c98ac8db54a6f6fcc1ababe5646d22eb457313e1d26629861fcfaa1fc9b3c06ec1ce5583687045882b019d72a8cbbca4d9cc24ecb69d7d9c39f5ddac53b002a185168c866904857c17ff5e99eb100e21c36fe4736e82ae8f1fb5028b5d0d734dcf4b3be43265e1ba5202c4afb77fc52b1ae890e0e59f7ef61ff2364531c8b8d89b4d6300d0567467ab1981ee00aa3cf76ef