lojadogalo.com.br

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:92:fb:2a:76:f3:2d:4f:ba:e3:3b:c5:12:19:5a:b1 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lojadogalo.com.br

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:92:fb:2a:76:f3:2d:4f:ba:e3:3b:c5:12:19:5a:b1
Serial Number (int): 15384677544186715714422176800501750449
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8e:eb:e8:40:86:09:42:4e:db:78:07:5c:5b:18:be:86:65:53:eb:2e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 88:c4:e4:d8:97:ae:b4:2d:84:13:5f:c1:01:2c:1b:9b:73:11:4b:90
Fingerprint (sha256): 43:03:20:c4:31:a5:81:d9:37:5c:2a:61:66:e1:96:11:ff:bf:b0:e3:95:1f:3b:a7:fb:bd:47:35:d0:d5:56:fa

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate lojadogalo.com.br

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lojadogalo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lojadogalo.com.br
www.lojadogalo.com.br
lojadogalo.atletico.com.br

Other certificates including the domain name lojadogalo.com.br

(limited to 100 certificates)
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.vtex.com
www.vtexcommerce.com.br
lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.vtex.com
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
lojadogalo.atletico.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.vtexcommerce.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br
www.lojadogalo.com.br

Certificate

The complete raw certificate details for lojadogalo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/mHu6sMV1J3Q12tJWb9
b3L8t7YeUXmFa0dyp0CoLxUkdE49YkahKwkUtwUGtgUbGVM2y/dMOPvPHuyk9edJ
t2Y1dF24xAXpJJ4/Vdm3XTaQwOfy5ybsgWHPa4UGENAudlZjTvLniRYtOpVnpGSD
S1a1Xv4XZc1eLMUgIEsNOV+3EEm0jZk13fN0RNR9rFJMSlTPy/AJa7jF+GINyHOg
Rm/1X1WdjdHh1HxyYYo6XBjWQY0E0+6VLyXErfebeMICYcmumnB2xkt7ibSk8KEt
NGrOr+cJKFsObN6BM3ewDvYlyjZTSwQI95UfyNJ/2gHyE7uHpoKd/QbYTI7cBOvz
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15384677544186715714422176800501750449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lojadogalo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18680078761308594398135867626627276676521620493300083545484922381162648718119288722873586677845764286617889909986608682645278946481608046550593187385108022004029458030648096849350278535276379996444622074281528509346824490958779799066459954992254483391904046045244922206650714244100420256982501968555311780532809644006056352340111793874890572748326891625369148029708691096818216270852782370707660988971251638927758542924524727294283681699577719455786357460705166884257780929497826146479929898760949106210649372094413327862536198283604716112459363549742211992137108281872114615402836600301228788312651081852089027785513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8eebe8408609424edb78075c5b18be866553eb2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojadogalo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lojadogalo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojadogalo.atletico.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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