www.distriseg.com.br

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 12:e1:81 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=GIzuEs1e2C4Ytbo4Q-CxNn-Vm3pFxbt1,CN=www.distriseg.com.br,OU=GT35903118+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:e1:81
Serial Number (int): 1237377
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: ba:b4:7a:6e:77:26:d6:5d:4d:1c:4b:75:63:2b:68:9c:92:f4:d7:31
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 52:7a:ca:7e:ee:78:d9:1a:7f:3a:ae:97:94:b4:b3:fa:12:b4:7c:87
Fingerprint (sha256): 54:a2:81:3c:97:e0:37:b4:8f:23:82:4d:6c:f9:c6:6c:aa:2c:9b:61:02:2c:3c:54:e7:2d:c8:6a:3e:8e:15:30

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.distriseg.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.distriseg.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.distriseg.com.br
distriseg.com.br

Other certificates including the domain name distriseg.com.br

(limited to 100 certificates)
distriseg.com.br
distriseg.com.br
www.distriseg.com.br
distriseg.com.br
www.distriseg.com.br
www.distriseg.com.br
distriseg.com.br
www.distriseg.com.br
www.distriseg.com.br
distriseg.com.br
www.distriseg.com.br
distriseg.com.br
distriseg.com.br
www.distriseg.com.br
www.distriseg.com.br
distriseg.com.br
www.distriseg.com.br
distriseg.com.br
www.distriseg.com.br
www.distriseg.com.br
distriseg.com.br
distriseg.com.br
www.distriseg.com.br
distriseg.com.br

Certificate

The complete raw certificate details for www.distriseg.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1237377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-18 04:27:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-21 07:39:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GIzuEs1e2C4Ytbo4Q-CxNn-Vm3pFxbt1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT35903118'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.distriseg.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780239921801469352752976154442059903334050309571359909736705519078936562058274393887178121252940362023825563852310671788056140112997997645417898482879909069292972396469972516814023802692601673371943752319740275765600920111273109450231908436754422025137287305650885394605381619028321791556816172558155633880296511802723005053394609051470153472527983683277519022048629250156755253947652062758467968823339819532512314792361088276431685223435349565741670469559974159019858403039770421832385445749045518890581183396268490738086142715708130682774517845200162351124018967837210808964852290167590307297461505673919579291959521927470625207148776071516991331579573565211078001808058753827254068020956184938482380426114485518251747595569699576156773877536546612152583441569627873708495900675594029606649992686934610802404292316058302626403452241449355272183686962824205423060374190347278216969840100263964520519918123349775520158803240331880970616946524222738701294284053664249284757540295132154693250416297419195387710905203649170312530877554295107062536022241930404366309277620120054543883990336827362871907336939608325536263730982424604143025609336765428135317713019535189781304340157981291396823599924050993773950695636223292244370313312949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distriseg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distriseg.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bab47a6e7726d65d4d1c4b75632b689c92f4d731
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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