webvpn.netservicos.com.br

Issued by TrustSign BR Certification Authority (DV) 2

About this certificate

This digital certificate with serial number 14:0c:b7:f6:2a:43:e2:43:32:ae:d2:5d:a7:32:8f:b5 was issued on by TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webvpn.netservicos.com.br,OU=Domain Control Validated+OU=EssentialSSL

TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda.

Organization: TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda.
State / Province: São Paulo
Locality: São José dos Campos
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 14:0c:b7:f6:2a:43:e2:43:32:ae:d2:5d:a7:32:8f:b5
Serial Number (int): 26650598662166619091152879687381979061
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 6c:60:3b:f8:b0:e4:89:a7:e5:c7:9a:08:f7:c1:81:a3:a2:d1:cf:62
AuthorityKeyId: 81:91:b6:27:2c:f2:a7:6f:8c:ff:cf:1a:1a:76:25:4b:7e:74:15:0e

Fingerprint (sha1): a7:55:d7:69:59:15:a0:29:24:e7:de:d6:3d:2e:2e:1c:e9:7d:3e:43
Fingerprint (sha256): 3c:36:8d:22:d7:b2:44:18:2e:8b:88:93:37:a2:80:1f:1c:4a:a7:5f:9b:6e:bd:66:8f:77:d1:8d:db:8e:b2:bb

Issuing Certificate URL: http://crt.usertrust.com/TrustSignBRCertificationAuthorityDV2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustSignBRCertificationAuthorityDV2.crl

Check the revocation status for certificate webvpn.netservicos.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webvpn.netservicos.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webvpn.netservicos.com.br
www.webvpn.netservicos.com.br

Other certificates including the domain name netservicos.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for webvpn.netservicos.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMJffQ2IpynWyAbZ9WJ9
zIPZeCMQhJN9SwtiLHJack+VyLfseuLYQ1GpzpmWmEDvZI8944z+kAMnj+0PTqdg
VQLUjjg26iS5cWjA4B3FI+I0aKCSiZL+h6a/HFLV7M8zdD8J4DJoKQF/ETmd2OXT
ouASYmOTyy1heaHPLCzsj3hqj3uj6NfhMKj8RtImdG7MwnuNGgbcqpPMayEymqIh
J7yYHXRXYX818S8FyGurEano5zRlyendqfQPswm2iNwyUmnklQIo9VBEHOENMr6X
wYAVeVL5ibfP3fxEWBVvYwGl0VnHtIw7eTHcdSwTfdA5NZCWUzlRrRuHZlcROEYY
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26650598662166619091152879687381979061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'São Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'São José dos Campos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustSign BR Certification Authority (DV) 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webvpn.netservicos.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20798930914010531404407187697536581143373451426835687221678765925850727495343342193768857825771128952185576510866217293337284033344887768202028660972614566843336071409262728212901833628645754255729351899779011697250674424612886301558228226832187129828191494570287122315987907366535952892989756872824437470618566266178676312822988214035243680730298537116566227125718310454789524183175255650377645685211971758919980548145847651624878068544863417976428407131503793054631593782668915642077916644217168914906616501682613018103164443165218254406126425882074654695348891303736788667964364572445571697344361828323376715143371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8191b6272cf2a76f8cffcf1a1a76254b7e74150e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c603bf8b0e489a7e5c79a08f7c181a3a2d1cf62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.38
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustSignBRCertificationAuthorityDV2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustSignBRCertificationAuthorityDV2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvpn.netservicos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webvpn.netservicos.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004213328fe4db38a9c1cad04ac26c27d2556ba1bfe4924584ee919f959bc23b879697ce97001686de846474fceeae26ef2fdc9d306029f4846e000f4378ed5bc579daec2d0573f7be8c9190492e8238231067c20bcfff4d1a1645a8c069567b9c4e0916c060148baeb1bcb944a42f52c7f790c9af90908da7732687c80714cb3e68b571eae59b2c903b4937b4fda4bacbe9761dccaa25011f327b293c99c3a3ea591915ca4d410b284d9745030500db1b0fce5474fd7698b81cfe1b9931721e1eacce909026d51460cd0b1be25ac6244a53227aafdd3019e85ecf0956e435b9ef6741b701df99a671c7d64a955291663921da128e0e893c5197ba8b3aa0c3ae8e