nexojornal.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:c1:91:97:70:0c:86:1c:69:f1:2e:43:1c:e7:f3:54 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nexojornal.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c1:91:97:70:0c:86:1c:69:f1:2e:43:1c:e7:f3:54
Serial Number (int): 15626574194853827011452207983946625876
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 87:51:c8:a1:6c:c5:52:5c:55:bb:66:7d:f2:f2:44:6a:af:d1:55:44
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 69:76:ff:b6:93:21:79:f4:f2:6b:54:db:7f:3f:51:08:82:96:71:93
Fingerprint (sha256): 2c:63:af:f4:db:e1:99:bf:4b:8c:c8:0c:55:48:d5:4e:cb:2b:cd:a2:a2:71:30:56:18:68:52:1f:91:02:75:bd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate nexojornal.com.br

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nexojornal.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nexojornal.com.br
nexo.cue.cloud
*.nexo.cue.cloud
*.nexojornal.com.br

Other certificates including the domain name nexojornal.com.br

(limited to 100 certificates)
access.nexojornal.com.br
endpoint.nexojornal.com.br
*.nexojornal.com.br
*.nexojornal.com.br
sentinela.nexojornal.com.br
nexojornal.com.br
*.nexojornal.com.br
rest.nexojornal.com.br
nexojornal.com.br
*.nexojornal.com.br
sentinela.nexojornal.com.br
nexojornal.com.br
dashboard.nexojornal.com.br
services.nexojornal.com.br
cursinhos.nexojornal.com.br
newsletters.nexojornal.com.br
cursinhos.nexojornal.com.br
newsletters.nexojornal.com.br
nexojornal.com.br
*.nexojornal.com.br
access.nexojornal.com.br
*.nexojornal.com.br
cursinhos.nexojornal.com.br
*.nexojornal.com.br
sendy.nexojornal.com.br
dashboard.nexojornal.com.br
estaticos.nexojornal.com.br
nexojornal.com.br
assets.shared.cloud.nexojornal.com.br
sentinela.nexojornal.com.br
sentinela.nexojornal.com.br
dashboard.nexojornal.com.br
*.nexojornal.com.br
*.nexojornal.com.br
*.nexojornal.com.br

Certificate

The complete raw certificate details for nexojornal.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG3d2OlQzU99K9k010gS
IZM/L2lWO2cx3KFCiDLXBvA6Jl6+55XdUNtvCEXxZVQ1pmT/peJ/ze1TXEr1HorU
iILP0p7orlWfTRl2VMwmZxomOiyxRyVy7Sm3k6uf/H7hdgx3oUhLjrhxoHafLYLm
fc+pcM+Wi+JRnRuG/yOJ7Jr2Agvg68csIqj9jb683GFC/YqRsWguFWv/MPNs0bVx
Y2Gg7bfe8SOq54cV0Gc3JexEac+TuSnvLvLTafVCau5IqwhSoqk/EgOgaYJwifMI
O2BmMs9eCOIlgNa5I0KWRj08GFDLD19MPlAATUxWYAvu9c5EiVhJqdBDHEcOHzka
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15626574194853827011452207983946625876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nexojornal.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24291931788745752026381567717630159624453522565549735925976035899526113245211064797799897960134807486929126731245818913382774033118746957686567697867179648932370630421788277475239536317114381550170571847523658366416293521414697722255325411836421273026018693109099246143166786204189742529070625111141594495204546448963323825265680135225023263118183912695920177041133398059420093046269617412782586167512660025488957599625715244433794851420951422411267246809383305590419078337632323185707309686786136050095333161888917782858316602713970289233345041846441155773534370943730165443169265524804324605094178446659658895137413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8751c8a16cc5525c55bb667df2f2446aafd15544
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexojornal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexo.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nexo.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nexojornal.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018069799761000004030047304502207569b4baa398475d9ace819da8275b703f4bbca4d0bf0d821e2c1a711a822b3d022100f92662e1a4b52b2fceaa302468a610e3a4314a46d069be3ffe07ec5033b449a500750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000180697997350000040300463044022016efb04541ae8705cf75c58b1a29f8b40f0d65f40757570d267009a88dca67c302203c99cf59e86d38a1579d4f1af3ed8ce359e1663ac05c24aa3bfa048c15ae29d3007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018069799758000004030047304502210090310a739bef2f315c26b5e9bbab69f47cbc186cddc68a7e19f58da62a0c1f9302200459778cf07d7ac81734782b3c944e3ea54cdfd97bf12306288a9291e0c322e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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