bemacash.com.br

- TOTVS S.A. -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 38:0c:f9:e2:53:5f:46:09:ec:1e:75:f0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TOTVS S.A.

Company registration number: 53.113.791/0001-22
Organization: TOTVS S.A.
Address: AVENIDA BRAZ LEME 1000
State / Province: SP
Locality: Sao Paulo
Country: BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 38:0c:f9:e2:53:5f:46:09:ec:1e:75:f0
Serial Number (int): 17346847704056692035066689008
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f6:42:42:e8:23:a3:62:03:f6:f4:f5:55:82:ef:6d:54:79:57:90:3e
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): e3:62:68:f1:d7:f8:90:37:ba:41:5e:4e:a7:d6:d9:fa:e1:3c:c0:b1
Fingerprint (sha256): 39:23:06:7c:1f:79:c7:88:4b:94:6d:ec:3a:01:a4:83:4b:c1:2f:95:7d:d0:7d:2e:5a:ca:3e:5d:1c:11:fc:bc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3

Check the revocation status for certificate bemacash.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bemacash.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bemacash.com.br
www.bemacash.com.br

Other certificates including the domain name bemacash.com.br

(limited to 100 certificates)
info.bemacash.com.br
financeiro.bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
*.meueleve.com.br
www.bemacash.com.br
financeiro.bemacash.com.br
financeiro.bemacash.com.br
bemacash.com.br
bemacash.com.br
*.bemacash.com.br
compras.bemacash.com.br
*.bemacash.com.br
cadastro.meueleve.com.br
meu.bemacash.com.br
*.meueleve.com.br
info.bemacash.com.br
blog.bemacash.com.br
*.meueleve.com.br
meu.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
blog.bemacash.com.br
*.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
www.bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
www.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
bemacash.com.br

Certificate

The complete raw certificate details for bemacash.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E6j3uHzafxOP86BXXD5
FRdcNgNWXyaXYgBzsbdGJUrp528pIt5we9ayvgQl8sVbnIWSBUdqRwEGGCz1m8Xw
ttu6BAi5YahsvnVjBm6ztfHwXDs/Xu+JS1Sun/fHZ4T2a4iVYDJtpTtWt18OZMe8
6l2UP3d7lMfJBsCfAnbZyH6nPP5y9AU1xVR8WU2/zfUldm7l94vQ5lEud9uhUBLY
oiCNwXPaBWREnp64klPPUjj/jTfc+YB66QH9qubD2wTssbhO/YCEuTGq7zt41NUo
IfzsOXOX23nDLsIK3Y8r/uyVrUlus1NcfPE3kNy9M5RdZsL3Azk7aljFAQ26PHp/
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17346847704056692035066689008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 20:11:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-12 20:11:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '53.113.791/0001-22'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AVENIDA BRAZ LEME 1000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOTVS S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bemacash.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28316159200714822134006431850713280292619650574578450941581465678862020692941756341496583618001590753566711576328128362029997023842424735973516009316796874347448915869947735223078308645324849766653714997608521710547124709048021751784535181455650119471201592290414670238523607295349566807852145241565240071253539703028252698107778403691277690781734298951777362064577010449954088571343371996910162974214001182176278071089041496149596409235952650544119191849146527178283742473747543316763617076669760206746763554876087644847203023590196803176163322207195860306764972133558712685838717166219042047998052106832445179592551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemacash.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bemacash.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f64242e823a36203f6f4f55582ef6d547957903e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016d2719f1f1000004030046304402203bbe483f6fdb6619e94a648cc14191455a6359917f8c1024895ff7ea2b19ea830220563b2e7e77b2439b55b0d9865db2b5a586d9eb1244ee4ca5db75982431c5934e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d2719eefa000004030046304402201d7db174c5be37218a321dd9bdef3ed0885227dc1ff250d70d0b2f496aada12402200e899f122dcfe7c8a0f94c165b2ac0abc8d5e7d817b4ff960620ad10fe2c7c3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d11ff490e1f09a3cb8e20dded818bc229e0f16d385ccc2137356aef9e8c2777a9c5581d4b79c1024534c64d80d1a517a54c76eb77b60a80e6aa20847108b6344ee30591ebc2c6513aaba54480b10253c576aa01e77eb7802806f7e811e798e5e988764252cbab3a46723f2339ed7ed49fdc01b106bd2791369f3a40d34c559c450e10a272708e966cb8302bb37beefd19bb3b8c207eb5597cc8b70225ba2b118672826c8a7e89c84ed3b140772a08bd00ef3c748e8d8ab683749e009da6f0afe647ff848781417f965b310dfbd75070c49d4bd5912e66c146037e7bb8dabc99af6dd0e40dfaf4a44068b0006fcfd30ae49d878bf5b9393b9e0ff0359877a22f