payment-terminal.hash-activation-command.prd.in.neoncorp.com.br

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:92:b0:4d:34:1d:03:68:a2:97:ce:1d:3b:c0:db:24 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=payment-terminal.hash-activation-command.prd.in.neoncorp.com.br

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:92:b0:4d:34:1d:03:68:a2:97:ce:1d:3b:c0:db:24
Serial Number (int): 11395475128412463566100178040483011364
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 20:cf:0e:07:e5:80:15:ba:bf:a3:95:de:ad:35:5d:67:b3:66:46:10
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 23:40:9e:06:44:14:85:6e:74:dd:21:2f:2b:37:38:20:f8:c8:7c:3a
Fingerprint (sha256): 52:d1:75:ff:54:c1:a9:de:78:24:9f:e4:f3:c0:d8:a7:6d:7e:51:d8:fc:e3:43:d0:95:94:84:87:cd:42:3c:ae

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate payment-terminal.hash-activation-command.prd.in.neoncorp.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for payment-terminal.hash-activation-command.prd.in.neoncorp.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

payment-terminal.hash-activation-command.prd.in.neoncorp.com.br

Other certificates including the domain name neoncorp.com.br

(limited to 100 certificates)
loan.api-contracts.in.neoncorp.com.br
recurrent-payment.billing-command.in.neoncorp.com.br
sgn.sso-login-front.in.neoncorp.com.br
open-banking.api-data-integration.in.neoncorp.com.br
open-banking.api-tracer.in.neoncorp.com.br
payment-terminal.hash-onboarding-command.prd.in.neoncorp.com.br
loans.mei-bff.in.neoncorp.com.br
payments.payment-slip-refund-api.in.neoncorp.com.br
payment-terminal-itg.hash-api-query.prd.in.neoncorp.com.br
engenharia.api-teste-timeout-kafka.in.neoncorp.com.br
loan-itg.debit-payment.in.neoncorp.com.br
payroll-credit-card.endorsement-api-cmd.in.neoncorp.com.br
open-banking.api-customer.in.neoncorp.com.br
neon-access.auth-bff.in.neoncorp.com.br
payment-terminal.integration-api-command.in.neoncorp.com.br
collateral-credit.api-facade.in.neoncorp.com.br
neonpottencial.query.in.neoncorp.com.br
payroll-credit-card.endorsement-itg-api.in.neoncorp.com.br
engenharia.api-test-eks.in.neoncorp.com.br
smb.api-accept-agreement.in.neoncorp.com.br
payment-itg.api-notification-bv.in.neoncorp.com.br
kubecost.in.neoncorp.com.br
mei-account.bff-common.in.neoncorp.com.br
credit-card.agreements-activate-bff.in.neoncorp.com.br
mei-access.api-challenge.in.neoncorp.com.br
challenge-limit.engine-api.in.neoncorp.com.br
customer-service.api-attendance-queue.in.neoncorp.com.br
loans.loan-notification-command.in.neoncorp.com.br
payments.transaction-engine-schedule.in.neoncorp.com.br
open-banking.api-credit-cards.in.neoncorp.com.br
sgn.sso-panel-front.in.neoncorp.com.br
mei-account.two-factor-authentication.in.neoncorp.com.br
open-banking.api-account.in.neoncorp.com.br
invt-acct.api-command.in.neoncorp.com.br
mei-account.api-ocr.in.neoncorp.com.br
credit-card.activation.in.neoncorp.com.br
mei-account.bff-onboarding-nestjs.in.neoncorp.com.br
mei-access.customer-query-failed.in.neoncorp.com.br
cards-invoices--api-query.in.neoncorp.com.br
cros-chnls--prty-auth-cellphone.in.neoncorp.com.br
mei-account.authorization-mei-proxy-tmp.in.neoncorp.com.br
payment-terminal-itg.unitylog-api-command.prd.in.neoncorp.com.br
mei-account.front-panel.in.neoncorp.com.br
payments.customer-contact-command.in.neoncorp.com.br
customer-care.svc-ord-blocker-api.in.neoncorp.com.br
loyalty.transaction-command.in.neoncorp.com.br
open-banking.api-journey.in.neoncorp.com.br
recurrent-payment.billing-query.in.neoncorp.com.br
position-keeping.query-api.in.neoncorp.com.br
sgn.sso-abstract-api.in.neoncorp.com.br
ted.batch-command-api.in.neoncorp.com.br
pix--payment-instruction-acl.in.neoncorp.com.br
mei-account.bff-debtor.in.neoncorp.com.br
sre.cde-actions-test.in.neoncorp.com.br
mei-account.api-partner-debtor.prd.in.neoncorp.com.br
invt-acct.api-query.in.neoncorp.com.br
loan.healthcheck-ui.in.neoncorp.com.br
mei-access.customer-query.in.neoncorp.com.br
mei-account.bff-status-nestjs.in.neoncorp.com.br
loans--loan-notification-command.in.neoncorp.com.br
sales.api-query.in.neoncorp.com.br
mei-account.panel-bff.in.neoncorp.com.br
cros-chnls.prty-auth-aces-manager-bff.in.neoncorp.com.br
payments.query-api.in.neoncorp.com.br
mei-account.bff-transfer.in.neoncorp.com.br
sales-leadopptymngmt-devt.referral-mgm.in.neoncorp.com.br
political-person-itg-api.in.neoncorp.com.br
payments.payment-slip-integration-is2b.in.neoncorp.com.br
payment-terminal.support-api-query.prd.in.neoncorp.com.br
smb.api-acquisition.in.neoncorp.com.br
customer-service--api-history-query.in.neoncorp.com.br
mei-account.api-partner-beneficiary.in.neoncorp.com.br
open-banking.belvo-consent-manager-adapter.in.neoncorp.com.br
salary-portability.bff.in.neoncorp.com.br
mei-account.api-blacklist.in.neoncorp.com.br
cards-invoices-itg.api-command.in.neoncorp.com.br
mei-account.bff-recharge.in.neoncorp.com.br
sre.api-gmud-programmer-dev.in.neoncorp.com.br
loans-itg.loan-api-refinance.in.neoncorp.com.br
api-test.in.neoncorp.com.br
mei-account.api-lookup.in.neoncorp.com.br
loan.api-installment-payment.in.neoncorp.com.br
open-banking.api-toggle.in.neoncorp.com.br
payment-terminal.hash-common-api-query.prd.in.neoncorp.com.br
mei-access.cache.in.neoncorp.com.br
payments.payment-slip-command.in.neoncorp.com.br
mei-account.bff-bank.in.neoncorp.com.br
payment-terminal.hash-activation-command.prd.in.neoncorp.com.br
payment-terminal-itg.api-pos-izettle.prd.in.neoncorp.com.br
loans.loan-api-refinance-eligible.in.neoncorp.com.br
sales.leadopptymngmt-hub-acqn-site-bff.in.neoncorp.com.br
payments.institution-api.in.neoncorp.com.br
mei-account.bff-card.in.neoncorp.com.br
loan.api-installment-payment.in.neoncorp.com.br
neon-utils.customer-notifications-api.in.neoncorp.com.br
payments.eletronic-payment-slip-mei-bff.in.neoncorp.com.br
api-auth-zendesk.in.neoncorp.com.br
sre.autobot-api.in.neoncorp.com.br
mei-access.api-user.in.neoncorp.com.br
neon-proxy-validation.in.neoncorp.com.br

Certificate

The complete raw certificate details for payment-terminal.hash-activation-command.prd.in.neoncorp.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGHnR2jJ7x8W53cIZGZS
9n2TIywwly/34YunWLavjXQWV+tApCyQTSwdUhy/clk8Qys0D9O8FM1THsE+fib2
F/uBc2FC7FpWAp+G6IYsc+pbYrm3xyQvxTUbCGok8WAj0Xp0goADOFvWBOdzuoe0
75W/YS6NoeMYbGqPdLOVAlxlZfrFhEP+WqpIsfBJgiCXBbP7Jf1hlyW4byYTk40V
DoAf0+IVS/4OIi1jpekm5h+hjxK6S0PDshrUjge9QG8G6EYaHluzbDvgmdIwAlwr
V7HykSpd8Nz56+J7tlQt/69rTHI/mdZkYqUaOfKscDbvb4fwwMEJfeKd7M4lQLrY
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11395475128412463566100178040483011364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'payment-terminal.hash-activation-command.prd.in.neoncorp.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21256313216637600617870171995923210947974468069227973133271790966904979660872805237177766685152899940754461037045379480480478723988380967668200636903527271038798305896262592996947832943447444437532914038711107303919126670413272856217693728019807293428555646256722313025894777927201663977842587191862821161602512227267094831689879962817022029979804043041056832565593208834340031143909781398994745993861706121623516376451453484856559159442268115211878825025460502629708289304504487418375572147400803567016752034983678968471426510277494743341857483593429446727803706702319269529822102963650503275155502091278538732394649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20cf0e07e58015babfa395dead355d67b3664610
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment-terminal.hash-activation-command.prd.in.neoncorp.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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