DV SSL/TLS Certificate for www.colegiovip.com.br

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R6 AlphaSSL CA 2023)

About the www.colegiovip.com.br DV SSL/TLS Certificate

This certificate with serial number 64:3e:77:3d:07:86:8d:94:63:15:41:7a for www.colegiovip.com.br was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.colegiovip.com.br provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 64:3e:77:3d:07:86:8d:94:63:15:41:7a
Serial Number (int): 31024017470355740338974703994
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: b9:9a:66:c2:88:c6:ff:52:b3:24:8a:55:ce:46:51:1f:f4:8b:6d:c9
Authority Key Identifier: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (SHA-1): 03:93:ef:89:ac:ba:9d:8d:65:8a:40:91:1b:f3:7c:64:ff:fe:3f:4c
Fingerprint (SHA-256): 38:61:8c:8e:1c:0d:7b:7c:a9:8c:bb:5f:57:cf:f4:fd:6d:29:77:1a:5d:4b:aa:77:4c:07:17:b5:6c:ef:f2:4a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate www.colegiovip.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.colegiovip.com.br

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.colegiovip.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtEXvTwLRlKqfp2Avcur+
JpPBlFoMtZnrERSTe2Yv2vorwuHkUBpR4DjSjlezLgB/dVic7FHoTg867/z+Kow4
ESAxMRJU2VzExlYpP+LAWHnNvCZmRgts6PspXlU2zqrfUyAp/DXpuJ7KIqeV0jfz
OOCRXi1emxhzh916q53XHTsv8fUQkXv0nCDAGgRTSASZvTJoZKsdNxEHJy/QZwzK
3Qq7IydRCTLv4y/4VPALc2yeF1Ss65MLoqvyQiQe1xXJXw3/HS0fgJbqQ0ajbJ8k
TCTUiNnlOEl3DAspWVOzQ6n6hckRC8CtJ+Nr5tzHRiJVW9OtnuPU65jUSn4ZnbGm
wbjNAbveAWFi8/HmZ2d7UTkd7Su0bHcXLCOkZdAjHAsr9b6rnN/Gt7RSXspRITqq
KRTIC5+y68S98AdKMcmRWi7086eK7rpT3kWb8v+Tp4q26IqqLiW2tqS1xnHnDsEC
EhEX5IRdv3iEcLprqnwKQXeMjza85n5qAAQfkRvLYfbxFZh5z+228FA8qsRTXFe2
sZvciHoF6VcihpRxQPRo9l+3rUHNyygl5vgkisKOZmYmIGpDFtNl5TD16JDDHXPr
2IjFnkkqsn+j2vxGnim8jt3/GN8x7cJgnt7kP52vtoxtBC9ls0457wnvSwt/O4Fr
kpD6dzqTXPmGQUAwkOQ6MXECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31024017470355740338974703994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-03 06:50:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-04 06:50:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colegiovip.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735450420873961748745900601755018660508342856289034331254211093340530390186627796250302240413253534363943065082642980385103700219844654531804587327982826687405445041757373310006080989833543767061114028571522604130620220108959202956273029066062810238885322595983868705695677698722218180103987192850374748715380098491814946387523678506541396573816826727755091475798669068229513001224518780600666018487887237423056222579829158138833062058734097941260939510779273597467003413554513269935265167187672634152368739492180694553498635135638661030024117721193817144044208604264281709116997259506920501552562697724846156221435103969710092571538833244422054774873285642193265121985147007511458532948614997436354744712842450088221353130042518280278400601505278561046520261647293340821414209273499338825796888672303441807694522840327780864715477646144670176949838150781171420526686187782352548879703954503568500711792987404574473361243881524095865581351289110547858911207864003854736078939430456590404931437944495250343337850834986489447465530420094750693323438397244939518706747245054426446111639895683029417699318724875510482246880465163693972648980093821478191611733090612267002315804040355677277719437765610994933988000342340284518839522832753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiovip.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiovip.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b99a66c288c6ff52b3248a55ce46511ff48b6dc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000da9425e5ebf13792211da346774585641d49f1eb1bfc6139f39847ce8600776928b2d1d836d05ff515e5c8b9595d0172ad17737969cf156d51f8c99e19a79ca33b45ea053914674dc48f3866144cc94adee70d093d464d57cf6e7f39ddd4436058d131326b807a321d623aade4136eb1731f9fdfa6ce16390a51dd544cd5bb64de54658bb404adef358dbe34399a00f73ffc347a063bde381ff29307b00c4fa3e7df2e8383669bf7b52cea9e3ca563ea80fcd6a61c8faa0b20b80d1dac0d3d96b86353fc680fba5f8e1af3b3bc1390ca58e277893072be5108cc42ee17cdea1f44c41ac95eb33d5b1fefa49c1e71551f000c7fdc385d83822d685e63783f944