*.sicoobnet.com.br

- BANCO COOPERATIVO DO BRASIL S/A -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 14:54:ce:f0:88:23:75:ed:4d:31:a3:38 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BANCO COOPERATIVO DO BRASIL S/A

Organization: BANCO COOPERATIVO DO BRASIL S/A
State / Province: DISTRITO FEDERAL
Locality: BRASILIA
Country: BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:54:ce:f0:88:23:75:ed:4d:31:a3:38
Serial Number (int): 6292227209798393137783219000
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 4f:d4:7c:54:da:2e:38:c5:cb:8a:01:de:c6:40:0f:c1:41:b4:8d:f1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): a4:b3:77:11:52:2b:d6:1d:3e:c3:f1:d5:bf:30:27:b5:60:66:25:5b
Fingerprint (sha256): 5d:e7:09:f9:ef:91:1f:93:59:4b:49:13:5d:9c:be:95:dc:f0:d5:24:53:36:0e:35:bc:d0:33:1b:40:ee:af:b1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.sicoobnet.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sicoobnet.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sicoobnet.com.br
sicoobnet.com.br

Other certificates including the domain name sicoobnet.com.br

(limited to 100 certificates)
*.sicoobnet.com.br
*.sicoobnet.com.br
www.navramlogistics.com
host.bulbul.tv
empresarial.sicoobnet.com.br
empresarial.sicoobnet.com.br
cecos.sicoobnet.com.br
empresarial.sicoobnet.com.br
geopbytepc.com
*.sicoobnet.com.br
empresarial.piloto.sicoobnet.com.br
wap.piloto.sicoobnet.com.br
missionary.sayitlanguages.com
virtualevent.inhance.io
*.sicoobnet.com.br
empresarial.piloto.sicoobnet.com.br
ib.sicoobnet.com.br
geraboleto.sicoobnet.com.br
dev-pro.colavo.kr
wap.sicoobnet.com.br
ib.piloto.sicoobnet.com.br
*.sicoobnet.com.br
ib.piloto.sicoobnet.com.br
ib.sicoobnet.com.br
www.beta.bildin.com.pe
link.sicoobnet.com.br
*.sicoobnet.com.br
*.sicoobnet.com.br
*.sicoobnet.com.br
sharedmobility.africa
geraboleto.sicoobnet.com.br
wap.sicoobnet.com.br
*.sicoobnet.com.br
*.sicoobnet.com.br
*.sicoobnet.com.br
appios.vpnsafenet.com
empresarial.sicoobnet.com.br

Certificate

The complete raw certificate details for *.sicoobnet.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyufvtJXaeqyBLrzulG5
dKUiMj+UqNevKzIIU4CN1dNCsgX6m4mkbu4isxpkYHpo4ij3dtw8Z42YzkA5Tjbr
X0sCBQrxDPTlyFuxl+C88YwHb3HegLheP3vfoYFJravwNR+zzcpdkvph/P5ckXCE
fdJKeSDTf4Rzs5VtQ1dYdN15iTiGTv+RNcaqGYux2wrtkbQ05BOAfm3P/VsIUUAZ
LPlzohe9uM9FylP1WtZqAFLm83ywLorlRScA3qsFEdbXQYw4dbJV0U/gFdRSMNr5
1vF5BnavfCaO9l+FDwS6baUZKqJ8xQv495jqhn9VqhXidfNR4kLgG1RxGcvjEymf
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6292227209798393137783219000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-12 00:32:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-19 17:00:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DISTRITO FEDERAL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRASILIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BANCO COOPERATIVO DO BRASIL S/A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sicoobnet.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23123121607635420512936571977832196388484453277111500301974155976326929834880584865677807276336731258400648133826963126084844698736723407013910713284686432345178644889951946738835778946575746443292388330596280589941812926491837327964078991767959432448256495178695922561980069683915921080370850692012781048670231436761760452955867752985542419962627160031660415951152451408384634090212250233025816195254382082313315377737735772013394319996917782874845884770634474404430199063469485756170988278709442586056885961307041660498481896082522468239094077588974493425807784620762109652129479848682426885887731229614138207084417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sicoobnet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicoobnet.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fd47c54da2e38c5cb8a01dec6400fc141b48df1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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