itgroup.com.br

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:89:16:95:2a:d7:45:dd:34:64:ab:b9:77:d3:0c:ce was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itgroup.com.br

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:89:16:95:2a:d7:45:dd:34:64:ab:b9:77:d3:0c:ce
Serial Number (int): 11345626667164712717981490411967024334
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 41:1c:8c:4c:70:0c:85:11:ff:ad:06:78:41:9a:19:ad:f2:fd:a4:1b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 66:1c:98:3f:d8:bc:03:7c:7e:f3:52:2e:a1:67:49:30:77:ac:34:5b
Fingerprint (sha256): 35:bb:68:3d:cf:aa:48:8f:e4:66:e8:e4:4f:fb:6d:63:fc:92:27:3d:f0:5e:e4:8c:93:3b:2f:c1:fa:46:eb:2d

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate itgroup.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itgroup.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itgroup.com.br

Other certificates including the domain name itgroup.com.br

(limited to 100 certificates)
itgroup.com.br
intranet.itgroup.com.br
outback.itgroup.com.br
intranet.itgroup.com.br
crm.itgroup.com.br
intranet.itgroup.com.br
tfs.itgroup.com.br
meusite.itgroup.com.br
tfs.itgroup.com.br
ims.itgroup.com.br
sip.itgroup.com.br
meusite.itgroup.com.br
itgroup.com.br
itgroup.com.br

Certificate

The complete raw certificate details for itgroup.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj0rMz2wUytNIx2RBHGQ
Tp1UWHZyfF4laWVOhhNfDMX8nxUOuo0XsuLRowyINeytH3uSgt5C4Z5NzaaIT6q5
ZJX0O243Nj2HMdfvOFi3yVKSii+JYTLXMsM7uZsTuEyhYISwbj470WscTTzeGTAV
zipgfvqI3ave4OIabmTVNFgcqeOnm1VNPIjNZtJRCqIlV2rMzHe59vsTkkqp8GH2
ahAU4uQwbm+9Anux7pdMdfHF11sVci0dVUwBtr/ISxxCZNI3Pip+EudhYqTSwtrm
7nieqGBTWSWRdoIqk0XTCeZwvLTXV4ouc8Rt+tgrd0/xHw+obkf9jv7L+rIVU3QF
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11345626667164712717981490411967024334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itgroup.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21490675279369864927416161949847035774787253975885742779036386433493846968748363771798560650167004722108603228679208697779522874266440482832357902689170408217675817282156287083342939698180032711199920142034306698393233499910057331674123971333200977366746521356769102720037316974700184931346095456883817592464878133421142082489256908859819755325230555678951824168390552580482027331268303107566571723145999185991659558580491194767244550934881653341676586594398253882877439077289430605733560895686718677371496536223797099266033983374270395168713449060556714250881833906763133237384413029613267806424544880768242370741593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							411c8c4c700c8511ffad0678419a19adf2fda41b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itgroup.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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