www.consorciojockey.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 05:57:a9:a8:6f:8f:b7:54:7c:f6:20:88 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=www.consorciojockey.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 05:57:a9:a8:6f:8f:b7:54:7c:f6:20:88
Serial Number (int): 1653402782440652868450394248
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: ba:8d:f4:5f:7c:71:92:cc:cd:ac:9c:9b:97:b1:2c:7b:f2:cc:2f:e7
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 22:53:73:2f:15:ee:6a:f5:5e:54:8e:c2:d8:29:99:45:5a:1f:07:3e
Fingerprint (sha256): 4e:b7:c9:36:ad:e7:f7:66:56:6e:53:a1:4c:73:c2:5d:90:ca:4c:33:33:db:cf:1b:24:df:ba:ad:e7:4f:9a:98

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.consorciojockey.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.consorciojockey.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.consorciojockey.com.br
consorciojockey.com.br

Other certificates including the domain name consorciojockey.com.br

(limited to 100 certificates)
www.consorciojockey.com.br
www.consorciojockey.com.br
www.consorciojockey.com.br
www.consorciojockey.com.br
www.consorciojockey.com.br

Certificate

The complete raw certificate details for www.consorciojockey.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgIMBVepqG+Pt1R89iCIMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTIxMTIwMjA2NTYwNloXDTIzMDEw
MzA2NTYwNlowJTEjMCEGA1UEAxMad3d3LmNvbnNvcmNpb2pvY2tleS5jb20uYnIw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDHvNSePQBnFFF2idHI+zwA
9aLhCICmTNm4C/6xtS1TaTxkGfs+ThtGpPo5HDyA503u7WlY3TcnAC9exk8/D4w9
m82flvy4SpxPuH9CfmEuBPPu+pjZjw2lzsA9T4OLWuhiTIFs7vpsHsI90gDCkwRd
dDz0h7TkWSSu99SHIZGvrOS6fsKTAE3Jf/ueGpL50OFsOp0Np37mPnxjwINwqlRV
TFD37oVP75SfVNKqzrw+vca/7+nXepd1CbpEEI3aU+HZnFHwafoPoi2DyiVnEJe7
WH2NgGH0VfdKnv1SEtCgFtmKInGyGg/IgELZq/AfOi+3WICfP0z77O+yg/QebkBX
Yo+9fDOmWuv87d0no6HvhPk+fSXn+k0VNS2FXaKdFZBB5jk+fefmdW1raklrIczV
SStbQWvPk96tUdk1HPmFCcM7MIOGgF2SO6c9Fr5XQlzhOTzhpEXjCrH6avXvXoe8
VaqPhEYgRc37YJNpjqkr7w901mqDVrbuvHxbajKDq8BhjPH0IAgWvrYKvAeFV/68
1cbDd+ZoEP0cFAFz9tophMw0gBZBc5RGz3Ez2ctes4YBw/Z/yn72fJ7niSiQp6Fg
7n8H6QWU2V9fp4c/VRrLdkK2tjLpW6ZAMq2fYcXvArwcJCJGyF24JJOMpS/T5z/g
sp4IuZ1axPBTQHkcP3/NEQIDAQABo4IB9zCCAfMwDgYDVR0PAQH/BAQDAgWgMIGJ
BggrBgEFBQcBAQR9MHswQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUyLmFscGhh
c3NsLmNvbS9jYWNlcnQvZ3NhbHBoYXNoYTJnMnIxLmNydDA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzYWxwaGFzaGEyZzIwVwYDVR0g
BFAwTjBCBgorBgEEAaAyAQoKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmds
b2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATAJBgNVHRMEAjAAMD4G
A1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jcmwyLmFscGhhc3NsLmNvbS9ncy9nc2Fs
cGhhc2hhMmcyLmNybDA9BgNVHREENjA0ghp3d3cuY29uc29yY2lvam9ja2V5LmNv
bS5icoIWY29uc29yY2lvam9ja2V5LmNvbS5icjAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU9c3VPAhQ+WpPOreX2laD5mnSaPcwHQYD
VR0OBBYEFLqN9F98cZLMzaycm5exLHvyzC/nMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQDNi5U8F6C1lc2W24SOYBydAhKrLqAAUzYo0F5A
W4SMRtZCMJEOMQQkMuOVfYH1uDPzpYNI6YzqNyTwohN2GPMHgJqg/Lzhw9XoaLso
cIQn9bNq+JOgZ243XkzblQ3Y6aiELVTkankhQtYB1m69JDq4hoDM7SgcNfgCASdp
y+Otm9cbv6tBlG/iwz5FLi0LY0Fr8KwZHceXhrGWjlGyPKmhx0IhuLDtdBA+zdmp
+P4skfYIwORN9YWnLjtdvn3j4oAXkkEnWdO9X72GCG6C35ZxrZJps03F5zjvXCX/
BoqFXumsj9sWM/lEgFnaBTS39j0viUqyF1HRGGSxvIL8RqdO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1653402782440652868450394248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 06:56:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 06:56:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.consorciojockey.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814858393717383293261432229912382839777680015421904085662702551295154275283360331875717621439666759706718161527003761964151538814857966548124640303442316860400660510214702376215596766359156514448098231067343159709971061672944789749400394282909374245427531154254791609971653352395820356364557175077511367052254523228677343797779994633033736451527946760585029974191292266211732855657537639664684291513507465703595336190531500775494446525646003161838631329476206078531591577319201006990322586464441765892809987282534660156173179546666004338120770352481331432709786304734365278898085516638343783246638888156087566456800420891752921856938485698417510943768708761928531698082784393734843097395175301371210528014362298321257582746291298292235138128997802184489705290400472298045240951261910638059108316643462955108719412656761830310883265586695851397191674765689902051242181970705197129602757518141875941521421848930092323214593733681693553127030223640470528792097938783661748436242506135076085094669545579934144383708131933050305690276290445109719078569603866458678679279879999011245890002204424549011742639662633090254840306778831618703234961855484880561895469649010294210507657127256395965430576456053055330283227304529123032534737734929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consorciojockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consorciojockey.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba8df45f7c7192cccdac9c9b97b12c7bf2cc2fe7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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