www.arquia.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 48:46:8f:c1:60:a3:72:8f:a6:d0:de:13 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.arquia.com.br,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:46:8f:c1:60:a3:72:8f:a6:d0:de:13
Serial Number (int): 22368224380102060985772203539
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 29:7f:9e:7c:b0:ef:98:05:94:1e:6a:3d:7d:d4:0a:fb:75:a1:87:19
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 94:d8:b7:fb:88:ea:c7:a3:76:d8:1f:4a:c4:16:ee:96:7b:6b:e4:a7
Fingerprint (sha256): 48:29:da:1e:54:63:10:2c:a7:5b:3f:55:46:86:0c:67:04:89:5e:6a:33:36:62:35:6c:08:77:93:dd:ad:ef:6a

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.arquia.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.arquia.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.arquia.com.br
arquia.com.br

Other certificates including the domain name arquia.com.br

(limited to 100 certificates)
agildash.arquia.com.br
arquia.com.br
gforgov.app
cateron.lk
www.arquia.com.br
www.arquia.com.br
lynx.pub
agildash.arquia.com.br
www.arquia.com.br
www.arquia.com.br
www.arquia.com.br
www.arquia.com.br
app.xn--gvenilir-65a.com
www.arquia.com.br
www.149.ai
www.arquia.com.br
godmat.co
www.insane-productions.com
www.suddenvalues.com
yumlendar.com
thingsy.app
agildash.arquia.com.br
zzz.freelunch.app
rezydencjapiekna.pl
www.reactworkshops.com
hosting.ransaarchivocentroamerica.com
dev.ylboisestate.app
zzz.freelunch.app
www.suddenvalues.com
cuuhocsinhlekhiet.com.vn
arquia.com.br
thingsy.app
bioleap.ivon.pw
www.paolomainardi.com
agildash.arquia.com.br
arquia.com.br
app.harvestr.io
keltechpc.com
www.arquia.com.br
www.paolomainardi.com
agildash.arquia.com.br
labs.ml
www.arquia.com.br
arquia.com.br
app.xn--gvenilir-65a.com
niduu.app
hosting.ransaarchivocentroamerica.com
sirius.listnow.app
gentry-plainsboro.com
arquia.com.br
www.arquia.com.br
agildash.arquia.com.br
www.tylorgarrett.com
agildash.arquia.com.br
www.inhorto.com
www.tylorgarrett.com
travel.privilet.com
arquia.com.br

Certificate

The complete raw certificate details for www.arquia.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AlHYTnowtmRHo2vLDfZ
XKBoODAWgWaBqSJoHvn3HoCg92eeRzIcMX3V7rxdr+t8XCacZefg4/PArn8ba1V4
wKlghOt5GScNCw8ZAXeY4WRWCEaHKAue9TYo+/WnNytLmdj0q3OyS9YTbnIdTDHY
x518vwtmkqE3c3dCaWc53a9SnPjaSnUpl5kxJjV15ALVDKhWMt4GCHr4ooKCa6dD
/VyY9UHrWw4/0b7wZPJ30VpHQZSHrvwDgrkEYdHmYnxZzCtFRa+5A+MWoXSvZYDV
MY/Awj7wWDoeCx9pJfcAa8oPyY3AKkr+kE7qITF5KCH8TWtGaMUhnqJ30nzw41lG
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22368224380102060985772203539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-11 15:42:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 15:42:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.arquia.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26262142993217360251234866092436842863343410577682797334494706195503881390709985685942280952927211620387249541938246579720818092268801233504203005882622678225717973085228164814265193323473647798330180839619630295479065546225211718537288935610426263269359545968166964852181046268149461211974087244507889559333749949611491997791670823524873821572955370819728554980837654059505611034309780771622031915524990460328129163292538373830568494414341286833488643567078668439468975163607909807849457554087379346505981739575825156040356584896822037471301004056861785758573309580408084403516248822497112942752095115680278193456841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arquia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arquia.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							297f9e7cb0ef9805941e6a3d7dd40afb75a18719
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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