*.patri.com.br

- Patri Politicas Publicas LTDA -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:00:3a:99:17:0a:4f:a8:1f:4c:06:7e:f5:c0:39:3f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Patri Politicas Publicas LTDA

Organization: Patri Politicas Publicas LTDA
State / Province: Distrito Federal
Locality: BRASILIA
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:00:3a:99:17:0a:4f:a8:1f:4c:06:7e:f5:c0:39:3f
Serial Number (int): 18610380449785319352328958210081831231
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:c4:d0:af:27:0d:76:de:88:50:73:f2:d3:1b:62:74:db:7f:5a:0b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d5:13:ba:ed:59:53:e1:22:f3:02:4b:42:7d:46:e7:15:a8:b8:4b:c9
Fingerprint (sha256): 28:f0:c6:8f:c1:ca:ab:6a:b3:31:9c:2d:5a:76:3e:b0:71:b4:b5:30:10:ab:24:46:21:b8:f2:d5:a8:92:f5:1d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.patri.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.patri.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.patri.com.br
patri.com.br

Other certificates including the domain name patri.com.br

(limited to 100 certificates)
*.patri.com.br
support.cafonline.com
support.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
servicedesk.patri.com.br
sd.mareven.com
patri.com.br
mail.patri.com.br
tls.automattic.com
support.cafonline.com
*.patri.com.br
mkt.preparatorioconcursos.com
*.patri.com.br
*.patri.com.br
mail.patri.com.br
servicedesk.patri.com.br
tls.automattic.com
news.phdisplays.com.br
mkt.impossible.pt
patri.com.br
mail.patri.com.br
patri.com.br
support.cafonline.com
support.cafonline.com
*.patri.com.br
tls.automattic.com
mkt.galiciaguesthouse.pt
servicedesk.gspretail.com
support.cafonline.com
support.cafonline.com
*.patri.com.br
mkt.digitaisdosucesso.com.br
support.cafonline.com
support.cafonline.com
patri.com.br
support.cafonline.com
support.cafonline.com
support.cafonline.com
patri.com.br
tls.automattic.com
support.cafonline.com
support.cafonline.com
mkt.impossible.pt
mkt.digitaisdosucesso.com.br
support.cafonline.com
mkt.ramo.com.br
itsupport.gweiss.com
mkt.preparatorioconcursos.com
tls.automattic.com
patri.com.br
servicedesk.patri.com.br
support.cafonline.com
patri.com.br
sd.mareven.com
support.cafonline.com
tls.automattic.com
support.cafonline.com
itsupport.gweiss.com
mkt.galiciaguesthouse.pt
support.cafonline.com
mkt.preparatorioconcursos.com
support.cafonline.com
servicedesk.gspretail.com
tls.automattic.com
mkt.ubode.com.br
produto.patri.com.br
patri.com.br
tls.automattic.com
support.cafonline.com
mail.patri.com.br
itsupport.gweiss.com
tls.automattic.com
patri.com.br
conteudo.patri.com.br
itsupport.gweiss.com
support.cafonline.com
mkt.preparatorioconcursos.com
tls.automattic.com
tls.automattic.com
support.cafonline.com
mkt.ramo.com.br
support.cafonline.com
support.cafonline.com
*.patri.com.br
sd.mareven.com
cahelpdesk.ca-usa.com
servicedesk.gspretail.com
*.patri.com.br
produto.patri.com.br
patri.com.br
*.patri.com.br
mkt.impossible.pt
servicedesk.patri.com.br
mkt.innovationbrindes.com.br
support.cafonline.com
mkt.innovationbrindes.com.br
*.patri.com.br
mkt.impossible.pt
patri.com.br

Certificate

The complete raw certificate details for *.patri.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYOj9WR1rH3T4YYseIHQ
2Z7UmPuMDTBvnHHAytdM7KP+9TTGG3JoM26qubkct3ShzIxW9G2r1ohXZ0TxWQG3
mguX4qOQLLWToghtVPQHcCj4SojomirWxXg7729kwyvF54hDMHndLBFFrJh9CIGA
Df7grxrFe3E1XOV9HEqC7xxR38ESxcpUKk5jJWIXNFAmxWYoR68khSmkpnNDuzUd
QDvQrzVQYWY26PkzWZ5QdakS9uQsHIJL7BC1onfRRhhN62mI/NmAH+koF8HL7dof
iNK9ySB/M0PBeRXqF6qwwFCZBEq6SThPeKt5J/fJGWiBrpvuVPm7jNDSJL4HFgT0
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18610380449785319352328958210081831231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Distrito Federal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRASILIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Patri Politicas Publicas LTDA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.patri.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17864515331979460430021537564605457741978191134972735041344328120835180016183368847008227086966564101517444517947983788288058553976534063799939419670616429741556041217403327560450583204376469891797703416701339951862220379399057856125294118150825952067131540826716916825312938527649888516522899188191722787695427986287429116669606163711070464291819667426825454604480233139202911893832528958924324966808237079443072239619363588690222171760646358802114357769495042629717511985977151917477217138102123796874406243868258878252737285110789041372100355373351249721827394483892432172791352515440461175069842020193023606191299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ec4d0af270d76de885073f2d31b6274db7f5a0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patri.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patri.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175516575a70000040300473045022100ddfe43bd0a5d1cba37d759b9ebc86af97001090d2e14237ec4bbfdfb80eee6f102203a60ef67187fb0deed29b4e59832342ae3352ece8e0b2d146610ba0df2e5ea920077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175516575fa0000040300483046022100be97661aa0f29e0841f2666b6eb2bfc78d8e82ca851d39f43152afc74ee1f187022100c3f3a883b3ff7ab118fdef6800b145341077b2922f22c913446da1d42c89684f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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