www.envymecosmeticos.com.br

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 10:f4:f4 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=4Dy/RF0W5P1m3oRydNXIU-o4K56kTMit,CN=www.envymecosmeticos.com.br,OU=GT08289250+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:f4:f4
Serial Number (int): 1111284
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 82:69:a8:68:24:27:07:3f:ac:6e:79:55:e2:a1:3e:4e:4c:80:75:5d
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 4a:80:c8:8e:19:13:58:96:2d:9a:8e:f3:75:8c:64:df:5f:26:75:43
Fingerprint (sha256): 5c:33:d8:83:2a:3b:ad:bf:32:50:fc:30:c7:89:91:18:98:f1:94:d4:6b:e9:7d:b4:41:ee:57:7a:35:ea:9c:02

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.envymecosmeticos.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.envymecosmeticos.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.envymecosmeticos.com.br
envymecosmeticos.com.br

Other certificates including the domain name envymecosmeticos.com.br

(limited to 100 certificates)
www.envymecosmeticos.com.br
www.envymecosmeticos.com.br

Certificate

The complete raw certificate details for www.envymecosmeticos.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1111284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-26 06:47:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-30 20:31:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4Dy/RF0W5P1m3oRydNXIU-o4K56kTMit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT08289250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.envymecosmeticos.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798661664066205057178652517339466838331104382071103248226593501985362325218637859911526369272754322824366983134433545847380646000401001555309903952287417675318533147605387400306020746313851310142703513391752561862069911890337505737978243743486559161206835291722685520679973961570439070457220065995933435173736816083359904592773010561125912098439255634435107371477282440070277641965206516794440563100972437637016344964887159712832256302343315753441168130045128601941769808334540952651171104340298683879217364763990220532562221156881567771768597553178445279235188170555314911409574897063354331288939149029329848758841118254407914356651435110799316228488547852714329452984907739993286481459665304621177067844348594152069892499722445113211514574825024146960026378012309080729579145366146535687653082213269057240093044199369901284048344149442117270181148181101256408766712533093998196614028473216403595377138502556796639656474111568279207724196441986195259507368670710684008533186765116073272203947077443230218930393029715504393629822708245675064427089621028857499379317800721805193059076094945484383022174202895123757556554152466299225011576101289899768508405732296173855020002258120302687405218749313457240880212908929035975775218191149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envymecosmeticos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envymecosmeticos.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8269a8682427073fac6e7955e2a13e4e4c80755d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae0a0f0444e111ce766f72986d05a4e542d89df4e7027592f1e422eb90db3a3bc54c472505c161d14d869208edeb8a1f1c8e06f3f33dddee4da51d7caca8213a73f9e9ad4b2bb136c52f0d121db1e1f953f5cc819e2d64af11d99dcb25eb91bd7c3317c4779d6d2ea1200efb55480378a0a630a46cebfe6f6b8af2ed446ece2450e6fa746026e8382cb6f7bed9a32e56c40b084f708eb425920fb62d9d1624be3ac723127047ed367a234be21653d7e13ac0d363294e2452d037643886e184b0750f28d9a380147bb23cbcd400f6b7b72d6162a5c8294f22528da8c4430befe59f79ac59d007cacef4d27fe6fffd6c61d34a4342a13a44fb40d9240b7f44b6a3