*.goomer.app

- GOOMER TECNOLOGIAS S.A. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 40:f7:f1:58:68:92:74:52:0a:92:0d:e3 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GOOMER TECNOLOGIAS S.A.

Organization: GOOMER TECNOLOGIAS S.A.
State / Province: SAO PAULO
Locality: SOROCABA
Country: BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 40:f7:f1:58:68:92:74:52:0a:92:0d:e3
Serial Number (int): 20106785027181960897733201379
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bd:cb:28:87:61:c3:45:ff:fb:fc:2d:d1:78:e1:2d:4e:d4:f1:77:57
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 43:22:d3:b0:76:76:84:49:a0:6f:da:b7:32:fd:28:52:41:63:33:6b
Fingerprint (sha256): 3e:22:88:89:74:a5:08:1d:5e:4d:47:79:fd:1b:04:db:ff:6b:97:bf:60:53:ce:13:c3:46:75:47:a1:36:c9:76

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.goomer.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.goomer.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.goomer.app
goomer.app

Other certificates including the domain name goomer.app

(limited to 100 certificates)
goomer.app
fwms.dpg.lk
goomer.app
momento.goomer.app
gerador-de-artes-data2.dashboard.goomer.app
goomer.app
bodrumdigiturk.com
mxt3dspins-cert.3dcloud.io
mxt3dspins-cert.3dcloud.io
earningsahead.com
www.tiltdating.com
goomer.app
mineapp.com.br
admin-dev.kasell.app
goomer.app
productsync.goomer.app
johnsontech.co.uk
productsync.goomer.app
goomer.app
statsapi.goomer.app
statsdashboard.goomer.app
goomer.app
msfi.in
goomer.app
*.goomer.app
statsdashboard.goomer.app
productsync.goomer.app
goomer.app
www.apnaemporium.com
goomer.app
goomer.app
goomer.app
www.prima.golf
goomer.app
painel.goomer.app
doracy.com.br
internal-admin.colonynetworks.com
goomer.app
goomer.app
statsapi.goomer.app
www.garrettspence.dev
painel.goomer.app
statsdashboard.goomer.app
fwms.dpg.lk
goomer.app
dev.perapera.ai
goomer.app
filzquadrat.ch
spa.pximal.com
httpstatus.page
goomer.app
internal-admin.colonynetworks.com
foosey.app
*.goomer.app
goomer.app
www.tiltdating.com
johnsontech.co.uk
foosey.app
custommat.ca
goomer.app
goomer.app
login.appymarketing.com

Certificate

The complete raw certificate details for *.goomer.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj4Ncxx7gVHNHc6cI53L
xlZcUDwdBafAD4yRzzVrvG8xw9nwiv2h7SmaXqBB3+7jdDchX5OIPvcMF5dFYYJY
kYw2R8c8LhKUSFuOERVQIjDHrkGqAN7Fbtc+p9/qw7aeGYL3KsZYEgXJ1AyOm0+h
r0qqYHJoCDDZ8YXcnI5Nlu0MH03XikG9EjL33dIoz0m3ZOq5Z4FRjMM814kZaJsT
mnDKi+HVvJGuLH5/GGXhU9JV73DL21q9H7OIEbNImJ7/3Y36/NvbXYoyTHcTRpzo
FWUmqCDbmYQO0G3EiZpj1Huxq/lcoCkmaRJQ4YIFys6M9goi34Jhs6V9L9Y6OEoi
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20106785027181960897733201379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 19:08:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 19:08:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAO PAULO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOROCABA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GOOMER TECNOLOGIAS S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.goomer.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19976251431430834152674015617824654314329356100131960588394770171196660022890708757333660032397646057791069791399768076666699051452611296561144937351630574549017149795667902288167986105473574443656818119929589475079230560307276703834243251914663430615360290957365450714721817097572710218565822045632487260716721861362899417242811991429900699944630592261234394049116556869074047562706844057221570895671393935888490160171048896711740683567149750127640337193129517340459644588783236829718925478824601794210016422726096013085493289431960595599930680767012279449593921792282489039696344617763857103454433912289176226243223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goomer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goomer.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdcb288761c345fffbfc2dd178e12d4ed4f17757
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000187ed5116c80000040300483046022100ad36ae6dde7a2a0caa3ccb84c2ca20dc72de59bc0451e1caddc78ead47024f2a022100d1dd1e95dd7b9aa1feb08f08e6dc969824b1b7efd0af0a2c856762c8ab7d7323007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187ed51166e00000403004730450220682592abe8f70dd6b238b943591a938b17152ab4be5924dc639201d355404016022100c6b5c414066845df575c302dc57c821abfcae276a2b576fb7f4bf497d2cbbf0900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000187ed5116840000040300473045022100f8823e7e03fb7e5411fe6eca7ed5ae71313d151bba0a971f317b4dd42d743b4702207cf076983098e4eab2d44fff5ebc5ca511c1aff0fae2ab32feaa26cae3571cfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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