*.spo1.flexcloud.com.br

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0d:68:68:5c:e2:8a:30:a7:da:fe:6e:3d:65:58:ed:d8 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.spo1.flexcloud.com.br

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:68:68:5c:e2:8a:30:a7:da:fe:6e:3d:65:58:ed:d8
Serial Number (int): 17822079548191933259868226286761078232
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:58:f4:e3:fb:d8:03:f3:56:46:7b:91:63:dc:88:92:13:79:ab:31
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): ef:bc:77:f5:f9:4d:2b:30:79:8f:cc:56:f6:ea:de:c4:ea:a8:b4:e2
Fingerprint (sha256): 47:bf:81:78:2d:ed:58:73:b2:0f:47:8f:ef:27:8c:21:3b:af:dc:a5:cc:9f:be:57:69:e7:6f:43:5f:7e:02:af

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.spo1.flexcloud.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.spo1.flexcloud.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.spo1.flexcloud.com.br

Other certificates including the domain name flexcloud.com.br

(limited to 100 certificates)
*.spo1.flexcloud.com.br
*.spo1.flexcloud.com.br
*.flexcloud.com.br
*.spo1.flexcloud.com.br

Certificate

The complete raw certificate details for *.spo1.flexcloud.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrDCCBpSgAwIBAgIQDWhoXOKKMKfa/m49ZVjt2DANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe
Fw0xODAyMDkwMDAwMDBaFw0yMTAyMDgxMjAwMDBaMCIxIDAeBgNVBAMMFyouc3Bv
MS5mbGV4Y2xvdWQuY29tLmJyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAocH55IXCpvobyTnuUfSnBqHEqP1tlgkxFd/vkO630kzMSW2dxgoc5biBk+Du
gTUAfunicQ7C+ineKYMT58p3/Y5t7/vk9OCe1jRxpnj8uwuke8YV1Et+wUj6F2Lo
rOUl/ZSmtDu5ZZiag/39oNODIDxl2g+iQPKdaR5E7fB8Bi/svG0sCU12ENp8CCzE
DPeVzGMmP7g7Vh3js9eyyU5LIyRlvhstOq7YDzxB724k1dQ2cC0Qeeez7e3Sshxp
umioun33o5PMUGRGjd3a1rL0y/rxvUO6TwPiqc6+ZHG7erU9CldhQQJzK1Ah0V8O
s9VI9wGp5WmQUwzjM7LSOHsESTvSGwF7wyCEWwzH5h5SgLkTZ8fm8g4XAh/CFFY5
ICw14tRN7K6Vg+GBHvjatiuCcwIZEJVhnbh/8DVvAEQAVB56HTWdjNqNvHUfAZez
LbMJAnCaDUfB7cMHhSqWIaZVKzokZASCbVrPyXPfWBPMcIgOlL2fc/ZnjIMQAhOQ
AwrrkWg0s1thIgCMhu/tIzF9fXhWh8nzMV2vzBZmIhZ1xJXJN2H9LSFWc4dLCi2q
/K/JdfVMMy0mu5iPE0qFkxovE4E2KfME+HTQ7jT2y4HxdvvcrkA0NrxI1cyOgV9d
bwwLFpXB14ecjp+wQiUpZN8YGsCtxI9q6kmx0TdE/8j0CwsCAwEAAaOCA6AwggOc
MB8GA1UdIwQYMBaAFFPKF1n8a8ADIS8aruSqqByCVtp1MB0GA1UdDgQWBBRWWPTj
+9gD81ZGe5Fj3IiSE3mrMTAiBgNVHREEGzAZghcqLnNwbzEuZmxleGNsb3VkLmNv
bS5icjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAucmFwaWRzc2wuY29tL1Jh
cGlkU1NMUlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgG
CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC
ATB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFw
aWRzc2wuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5j
b20vUmFwaWRTU0xSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggH1BgorBgEEAdZ5
AgQCBIIB5QSCAeEB3wB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ
AAABYXxGpT8AAAQDAEYwRAIgAYDXdtd56YicgTWwkUqmY11STd8us008Cf6Umuhp
dl4CIGlxAMhBSoqO04ruyOCecnW+VbZgBhlGBqnuMKctetsPAHYAh3W/51l8+IxD
mV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFhfEaldAAABAMARzBFAiEA9InXjb/D
HbGIjie0zBfOp1Kmh5f1ApvobCdafrBnB7oCIDuSMvFcXeGgahjaV1AuDIuuAd6s
mjLZksIkgZo/VPyMAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUA
AAFhfEal7AAABAMARzBFAiEAmzqykuCTVhlGtjBLp2MeoMMM9H2hAK2p4QGtn7Rj
ZBMCIE2Nlj4v8P5MsgLw1pQV7sw4sdF7ePeZSv2HZHCa1smDAHYAb1N2rDHwMRnY
mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFhfEan9AAABAMARzBFAiEAopLzuyUn
WBlcsesaGVjyBErRFEs2HNHaRzpInUQe/qYCIE51p84I9TH5hA2DzEfLkaRBOO93
3e/Y/KttyXQlJ6qFMA0GCSqGSIb3DQEBCwUAA4IBAQAxXFD3PSMAxcL0fDkRTx36
FnKb6zLF8y5x6cc1F3fGYsbHoF6mXbg0LaQXHgoxe+FkfyP9I1zLI1gAmOCL+QT9
FK2JwyfFhO8XoNOnZkqaEwRYnz79b4H9ivvHnPLLt65YlOq7BUmEC0iFWJXF8gCG
7OR5GW3PuXP90BO61sXApQElqshrtq1/c1+PT4Nu3DdvWibzWqQlvDLk7e3ZK4Qv
WG74BuspYOhPCnGq5l4MOTM66cdxLY6UmaIdxxGuPyBOEvYdrTljiHj3+vX/zckp
QHyNwL4wDcT6C5XLBy2XyIVTPpC8pWoGywxwvql5PNI5jd0SwRpQqG3XbGggsElr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17822079548191933259868226286761078232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.spo1.flexcloud.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659913920037381087675262167994558603365705122804430804753819730377219262289947850041408217122826021358319761422944004905386420883863661970204854090255536692619176112843782225444997020927991234672327837933596927543768395068431356409281299664025115772109234960278874223482507439344736576662625559463112228145603358791389399146174200116593155182878314203246047014529201171551463012313367229325240840516481139173609087919707103192791418438683222759247050174192644163067045246821806080981719218262876143599048340053852791853612544037608882907493606895096539316540517378046644909054659319037473317667365357530418092886271848892936071145712994060074472556243201567552971967329331605918757162264776273671086777801385694454762472074048959720440469209169941781435765005964559211173841522653574381318666386634723036285470790568535117990076129775104998564162690506112411702164067685054000287025976002577915450681575546761198235252509315416712416715599686514193167988851395329489597718688532144739837935152558163835764563226416905019583056475237791660372429127850901415967673236258953412010331256899097915457798948474511807769999009934664853736598271552132216388949021227304435039922027967000157866283088678321292857252999079785081454157393824523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5658f4e3fbd803f356467b9163dc88921379ab31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spo1.flexcloud.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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