*.sogi.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4b:70:9c:d0:06:81:42:8d:66:90:b3:0c was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sogi.com.br,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:70:9c:d0:06:81:42:8d:66:90:b3:0c
Serial Number (int): 23347515954960542629467566860
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c0:7c:85:76:d5:b7:9e:55:02:cf:9e:96:2c:3f:be:63:6b:28:1d:d1
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): c9:f1:e6:27:31:54:92:c2:79:80:ee:15:46:d2:12:62:8e:1c:a2:84
Fingerprint (sha256): 23:43:7d:44:b2:19:37:c7:ed:86:02:be:1e:33:e7:70:b2:27:a9:fb:a9:d7:d5:24:fd:5c:d9:69:e2:ee:56:a9

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.sogi.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sogi.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sogi.com.br
sogi.com.br

Other certificates including the domain name sogi.com.br

(limited to 100 certificates)
status.sandsiv.com
ssl372720.cloudflaressl.com
status.asista.nl
sogi6.sogi.com.br
status.sandsiv.com
ssl372718.cloudflaressl.com
ssl372719.cloudflaressl.com
foxtrot.status.descartes.com
ssl372720.cloudflaressl.com
ssl372719.cloudflaressl.com
ssl372720.cloudflaressl.com
ssl372719.cloudflaressl.com
ssl372719.cloudflaressl.com
ssl372718.cloudflaressl.com
ssl372718.cloudflaressl.com
ssl372718.cloudflaressl.com
pre-app.sogi.com.br
sogi8.sogi.com.br
status.ivey.ca
status.harleysplumbing.com.au
sogi.com.br
ssl372718.cloudflaressl.com
ssl372719.cloudflaressl.com
dev-app.supplier.sogi.com.br
ssl372719.cloudflaressl.com
status.sandsiv.com
ssl372720.cloudflaressl.com
ssl372718.cloudflaressl.com
status.sandsiv.com
ssl372718.cloudflaressl.com
ssl372720.cloudflaressl.com
ssl372718.cloudflaressl.com
ssl372720.cloudflaressl.com
ssl372720.cloudflaressl.com
status.sandsiv.com
futurelegis.sogi.com.br
ssl372720.cloudflaressl.com
ssl372718.cloudflaressl.com
status.sandsiv.com
ssl372718.cloudflaressl.com
ssl372719.cloudflaressl.com
ssl372718.cloudflaressl.com
ssl372720.cloudflaressl.com
status.sandsiv.com
ssl372719.cloudflaressl.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
ssl372720.cloudflaressl.com
statuspage.e2open.com
ssl372720.cloudflaressl.com
ssl372718.cloudflaressl.com
ssl372720.cloudflaressl.com
status.sandsiv.com
ssl372719.cloudflaressl.com
status.wmcws.com
ssl372719.cloudflaressl.com
ssl372720.cloudflaressl.com
sogi.com.br
sogi6.sogi.com.br
ssl372720.cloudflaressl.com
futurelegis.sogi.com.br
ssl372720.cloudflaressl.com
systemstatus.clinisys.com
*.sogi.com.br
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
supplier.sogi.com.br
status.sandsiv.com
ssl372720.cloudflaressl.com
ssl372718.cloudflaressl.com
ssl372720.cloudflaressl.com
ssl372719.cloudflaressl.com
ssl372720.cloudflaressl.com
status.sandsiv.com
ssl372719.cloudflaressl.com
statuspage.e2open.com
ssl372720.cloudflaressl.com
ssl372720.cloudflaressl.com
status.sandsiv.com
ssl372718.cloudflaressl.com
status.transvirtual.com
systemstatus.clinisys.com
ssl372720.cloudflaressl.com
supplier.sogi.com.br
status.asista.nl
sogi6.sogi.com.br
ssl372718.cloudflaressl.com
status.sandsiv.com
sogi.com.br
futurelegis.com.br
*.sogi.com.br
status-namer-gtassurancetool.gtil.gt.com
sogi8.sogi.com.br
ssl372720.cloudflaressl.com
ssl372720.cloudflaressl.com
ssl372719.cloudflaressl.com
status.wmcws.com
sogi8.sogi.com.br

Certificate

The complete raw certificate details for *.sogi.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT+eynMpbQYndDNBLWxK
14sgIL5W0JyqE/hi0Taqw4EWWr7RmVxvTRjmd+ww71j05r5rZs3vHwFnAQMlBdfH
KxkN1ym+r0DfPGx25QotGQjLSX4o4180jVzP2Exo0IxQbUBtVe8j3s217ebeoTf9
91hM2RgXP5UNhGr8Ka628GYNYo0j2+J6TvcNMw6JUZBDxOl4VsOpzQ9XkeFgM7yv
W9WmgsvKgTNR4LsGj70n8n6ZiX9KHJPDgulqBf5grXORPdpe5ZsXiTxkYS4rmocr
WDAfqjxKmVJPYYXBv+WzeeLkRRD5AyS4w0CIDcqfKzod9jvR8rgfDeDDWmLo/dXA
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23347515954960542629467566860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-17 18:22:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 18:09:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sogi.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22880505526530247549687565029763307251702254969869672421920389440844700305338331578685116414267404745361601304365503895674546698831029682841767068507313546657452858241868736006830532833827498909513373092026297054388130187985481519711341839617133947779494983599854238334038066868596254007017818671080968170652509631631564431586578455819009516669436230782687783878766618576897140760842795240190309479584169532088924243063144535215090397071735797080426272754929881324109951700019380976376605721973182310713707033007470191226361010115408429894845122480996793368312065754670941569360105196374141988759375694671451159642167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sogi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sogi.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c07c8576d5b79e5502cf9e962c3fbe636b281dd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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