ifood.com.br

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:95:70:69:7a:cf:5c:7d:a3:57:de:6e:88:0b:38:c5 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ifood.com.br

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:95:70:69:7a:cf:5c:7d:a3:57:de:6e:88:0b:38:c5
Serial Number (int): 3434388210332049665495468049980668101
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 03:07:50:80:25:16:df:13:30:de:65:b8:42:d3:19:52:b5:4e:3f:97
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ca:63:10:d8:b0:ec:58:79:31:a2:59:f6:e8:f7:3d:cb:8e:90:9b:09
Fingerprint (sha256): 3c:1f:69:94:67:2e:d2:94:fe:fc:9d:62:8b:7a:d4:0f:b9:83:a1:89:31:9b:48:f3:62:da:08:b3:29:f6:48:47

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ifood.com.br

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ifood.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ifood.com.br
ifood.com.co
*.ifood.com.co
*.sindelantal.mx
sindelantal.mx
*.ifood.com.br
ifoodcorp.com.br
*.ifoodcorp.com.br
*.comeya.co
comeya.co

Other certificates including the domain name ifood.com.br

(limited to 100 certificates)
paymentwidget.ifood.com.br
entrega.ifood.com.br
akamai-san234.exacttarget.com
*.ifood.com.br
ifood.com.br
qrcode.ifood.com.br
san.cloudinary.com
tls.automattic.com
nexus.internal-services-production.dc-ifood.com
*.news.ifood.com.br
w42.ifood.com.br
e.ifood.com.br
fastdag.se
tls.automattic.com
blog.ifood.com.br
vpn-saopaulo.dc.ifood.com.br
san.cloudinary.com
trabalhoremoto.ifood.com.br
api.homolog.carreiras.ifood.com.br
incapsula.com
pop.ifood.com.br
tls.automattic.com
api.carreiras.ifood.com.br
api.carreiras.ifood.com.br
entrega.ifood.com.br
entrega.ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
lp.news.ifood.com.br
incapsula.com
api.carreiras.ifood.com.br
api.news.ifood.com.br
secmonitor.dc.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
blog-parceiros.ifood.com.br
portal-negocios.ifood.com.br
blog-parceiros.ifood.com.br
news.ifood.com.br
www.ifood.com.br
contrate-beneficios.ifood.com.br
api-homolog.sira.ifood.com.br
homolog.ifood.com.br
news.ifood.com.br
lp.news.ifood.com.br
blog-parceiros.ifood.com.br
contrate-beneficios.ifood.com.br
s2-cloudinary-pin.map.fastly.net
bqvndd.ifood.com.br
tracker-empresas.ifood.com.br
password.dc.ifood.com.br
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
www.ifood.com.br
www.ifood.com.br
*.ifood.com.br
nexus.yolo-02-dr.dr-ifood.com
ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
mail.news.ifood.com.br
incapsula.com
s2-cloudinary-pin.map.fastly.net
maminha3.dc.ifood.com.br
s2-san.cloudinary.com
homolog.ifood.com.br
maminha3.dc.ifood.com.br
diogo-santos.com
trabalhoremoto.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
incapsula.com
contrate-beneficios.ifood.com.br
tools.dc.ifood.com.br
*.ifood.com.br
developer-deprecated.ifood.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
*.ifood.com.br
incapsula.com
incapsula.com
maminha3.dc.ifood.com.br
*.ifood.com.br
san.cloudinary.com
incapsula.com
click.relacionamento-empresas.ifood.com.br
w42.ifood.com.br
rocambole3.dc.ifood.com.br
chef.dc.ifood.com.br
vpn-dev.dc.ifood.com.br
*.ifood.com.br
blog-parceiros.ifood.com.br
ldap-aws-uswest2.dc.ifood.com.br
www.ifood.com.br
developer-deprecated.ifood.com.br
jenkins-financial.dc.ifood.com.br
materiais.ifood.com.br

Certificate

The complete raw certificate details for ifood.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNcacawI5+lJBJdmIZhD
mkU4yajcbU6g2Jrr2YzYUGvU3bnYy93FN3me9pZ1Tad2e1g0AabMfgxwbHSN3yic
nZMba9xTbhKuUQlSGqe6FJzSXvWgb1DX4Y6d0Q2MDj0I81rBBeb5e4q+CFF7L5O/
wjSJbXHWnGedSFSAihRlhKOrxAZrwa+wWBeHFi7e3yLspU+fpoqZk2Lcd+xC6kAi
9SZLCCoQLUPIQ9pFqmUBXsF4YPKfczjxM+GFE9cq1/f17fEsgD7L12strWW7ov2p
iHgTsl7Va0tj6W6ilFFgJ+xjOr0i22NMODZ3/Bg+IdeLaOHfy5lErl/54hCDR10G
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3434388210332049665495468049980668101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ifood.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25353732382295872215847383899612094305001681089358734514710123303658303059178048402727309158246066906869830529143799098616531661856638644780078306657510676258810574829373526826781385514927149807276835965301449175379203989070764121463957140034610513023810345026146721328803718374568992879086910660869615968258302513062339724160463039118409102051927945066152928420907222734472309931248666805802963246831265190927455454740460098566059405945119314685211054323436368534560845976877594056462667114824286782197326652499141611550299275280534424875722183738807827766939447555466721960488688279895358133455358763057890027439789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							030750802516df1330de65b842d31952b54e3f97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifood.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sindelantal.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sindelantal.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comeya.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comeya.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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