apibank-qa.portoseguro.com.br

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 2e:ad:a9:03:70:2b:23:37:1e:57:0b:19 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apibank-qa.portoseguro.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:ad:a9:03:70:2b:23:37:1e:57:0b:19
Serial Number (int): 14446252761933633875619547929
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 46:23:f1:6f:9e:27:12:cb:ae:ac:53:0e:54:39:db:21:92:7f:e7:be
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 5a:af:8f:5d:8d:8a:94:3d:e2:6c:5f:d5:2e:42:34:32:b1:dd:1e:91
Fingerprint (sha256): 29:bf:16:9a:d6:1b:d4:3b:ba:6b:c4:f3:fa:58:a3:e5:63:e0:e6:65:dc:2a:99:be:f6:0d:28:96:cf:87:4d:0e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate apibank-qa.portoseguro.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apibank-qa.portoseguro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apibank-qa.portoseguro.com.br
www.apibank-qa.portoseguro.com.br

Other certificates including the domain name portoseguro.com.br

(limited to 100 certificates)
portonet.portoseguro.com.br
mkt.visitavirtual360.pt
portoapicloud-dev.portoseguro.com.br
portoapicloud-mtls.portoseguro.com.br
portalvpn.portoseguro.com.br
bank.portoseguro.com.br
imperva.com
*.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
apihml.portoseguro.com.br
hml.portoseguro.com.br
venda-stage.portoseguro.com.br
portoapicloud-mtls-hml.portoseguro.com.br
colportopar.portoseguro.com.br
sso-clientes-hml.portoseguro.com.br
mkt.portoseguro.com.br
*.psstore.portoseguro.com.br
recupera.portoseguro.com.br
portoseguro.com.br
prestador.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
alogsoma.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
visitantes4.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
nac11dc00-tlf.portoseguro.com.br
cloud.mkthub.portoseguro.com.br
portoseguro.com.br
click.novidades.portoseguro.com.br
sso.portoseguro.com.br
visitantes3.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
blog.portoseguro.com.br
portoseguro.com.br
portoseguro.com.br
apicorporativops.portoseguro.com.br
antispam.portoseguro.com.br
dev.api.saude.portoseguro.com.br
loja.portoseguro.com.br
ecomadmin.portoseguro.com.br
wwws.portoseguro.com.br
open-api.portoseguro.com.br
cloud.novidades.portoseguro.com.br
3dsecure.portoseguro.com.br
mtls-open-api-sandbox.portoseguro.com.br
tableau.portoseguro.com.br
loja-api.portoseguro.com.br
api.portoseguro.com.br
news.multichannelmkt.com
api.portoseguro.com.br
apicorporativops.portoseguro.com.br
mkt.lukrepresentacoes.net.br
NAC11DC00-TLF.portoseguro.com.br
hml.api.saude.portoseguro.com.br
wiprod.portoseguro.com.br
apidev-portoseg.portoseguro.com.br
hml.portoseguro.com.br
bwise.portoseguro.com.br
homeoffice.portoseguro.com.br
vidacloud.portoseguro.com.br
salvados.portoseguro.com.br
dev.saude.portoseguro.com.br
auto.portoseguro.com.br
portalvisitantes.portoseguro.com.br
apihml.portoseguro.com.br
api-portoseg.portoseguro.com.br
nac12db02-tlf.portoseguro.com.br
sso-clientes.portoseguro.com.br
mkt.portoseguro.com.br
*.openinsurance-dev.portoseguro.com.br
apibank-qa.portoseguro.com.br
portoseguro.com.br
email.portoseguro.com.br
imperva.com
antispam.portoseguro.com.br
mkt.interhome.com.br
portal.meiosdepagamento.portoseguro.com.br
portoseguro.com.br
mkt.centrodepneus.pt
aluguel.portoseguro.com.br
bwise.portoseguro.com.br
mkt.descobrimentos.com.pt
garantia.portoseguro.com.br
ssohml.portoseguro.com.br
auto.portoseguro.com.br
visitantes1.portoseguro.com.br
haproxy.portoseguro.com.br
mkt.inbet.pt
click.consorcio.portoseguro.com.br
apis.portoseguro.com.br
prd.parceirosgcp.portoseguro.com.br
portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
loja-auth.portoseguro.com.br
webmail.portoseguro.com.br
hub-dev.portoseguro.com.br
portal.meiosdepagamento.portoseguro.com.br
api.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
home.portoseguro.com.br

Certificate

The complete raw certificate details for apibank-qa.portoseguro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyTuBzZ1WVn/qir0VXyo
9xgF0mK1iMyCvzW5htMtdDIT8TulV1nO8vw7fV8pwQap4iD9vNI9nTTJnAgfG1kl
LRLqpW57ilHvL5u6tGMlOKlA8rO19b2mGaHLxIHmlUQqZqTyaZa5y9IOLOnrg7+I
y4fj+6bw2dS6M+eC8isGeOCJhdz0SXAQzX9wAWM1lp5aV8WOdlO4rBim1rzgz3uv
YQ5v06FmkHgz6lhaYcEVsNYnmfDppmXL0/xaugD9AAKT2Y8+SEw3+nCF2Oo+UJUY
8NAWH6DApXe2LIwTQt773zeoBetmGZOUCrcn9t6TDZ9AtbQA4kXqQxVzORLV7cU5
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14446252761933633875619547929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 17:00:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 17:00:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apibank-qa.portoseguro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23119820570688720359222811359157905584765218971507144487398344727885134708595215286807551727000030289387920934783435218609114737708941031334802833548770185506306016545727187320899386275454993099899695480209635960931751846086438780191383559775318523224511638012089350326469901611460334533219688756212987111974122296498145861541985854781486066472391161350906416756153682652557789806776849614106818321743305699741047242956493201297427418855154160689085046479824610450157962999616457609720105432245833414749130716714651880367830204261431508727773884918256750179764561948257139578757136980500650440084195955307592263481667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apibank-qa.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apibank-qa.portoseguro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4623f16f9e2712cbaeac530e5439db21927fe7be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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