www.ingresso.com.br

- Ingresso.com Ltda -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 05:f0:2c:ad:7e:73:1a:48:32:a6:fe:2c:08:bf:ce:99 was issued on by Symantec Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Ingresso.com Ltda

Organization: Ingresso.com Ltda
Organization unit: Tecnologia
State / Province: Rio de Janeiro
Locality: Rio de Janeiro
Country: BR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:f0:2c:ad:7e:73:1a:48:32:a6:fe:2c:08:bf:ce:99
Serial Number (int): 7893197396601875456684584727960604313
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 9d:5a:4c:d2:96:44:3d:ab:81:05:b4:65:f7:5a:20:27:e8:5c:b8:b5
Fingerprint (sha256): 5e:aa:b8:f5:ed:26:58:fb:d9:af:74:15:fe:ac:c9:53:6b:68:7e:1a:58:5f:4e:15:c1:07:cc:ef:f8:a6:de:f7

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.ingresso.com.br

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ingresso.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingresso.cl
*.ingresso.com.br
*.ingresso.cl
ingresso.com
ingresso.com.br
*.ingresso.com
www.ingresso.com.br

Other certificates including the domain name ingresso.com.br

(limited to 100 certificates)
www.ingresso.com.br
*.ingresso.com
televendas.ingresso.com.br
www3.ingresso.com.br
www.ingresso.com.br
*.ingresso.com
www.ingresso.com.br
ingresso.com.br
www.ingresso.com.br
ingresso.com.br
ingresso.com.br
ingresso.com.br
ingresso.com.br
www.ingresso.com.br
ingresso.com.br
*.ingresso.com
*.ingresso.com
www.ingresso.com.br
carrinho2.ingresso.com.br
carrinho.ingresso.com.br
www.ingresso.com.br
www.ingresso.com.br
ingresso.com.br
carrinho.ingresso.com.br
ingresso.com.br
ingresso.com.br
www.ingresso.com.br
*.ingresso.com
www.ingresso.com.br
compra.ingresso.com.br
televendas.ingresso.com.br
ingresso.com.br
www.ingresso.com.br
www.ingresso.com.br
ingresso.com.br
carrinho.ingresso.com.br
ingresso.com.br
compra.ingresso.com.br
*.ingresso.com
ingresso.com.br
*.ingresso.com
ingresso.com.br
www.ingresso.com.br
ingresso.com.br
ingresso.com.br
www.ingresso.com.br
www.ingresso.com.br
ingresso.com.br
www.ingresso.com.br
carrinho.ingresso.com.br
*.ingresso.com
ingresso.com.br
www.ingresso.com.br
ingresso.com.br
www.ingresso.com.br
www.ingresso.com.br
www.ingresso.com.br
www.ingresso.com.br
ingresso.com.br
ingresso.com.br
ingresso.com.br
www.ingresso.com.br
www.ingresso.com.br
www3.ingresso.com.br
ingresso.com.br
www.ingresso.com.br
televendas.ingresso.com.br
compra.ingresso.com.br
www.ingresso.com.br
ingresso.com.br
www.ingresso.com.br
ingresso.com.br
www.ingresso.com.br
televendas.ingresso.com.br
ingresso.com.br
carrinho.ingresso.com.br
www.ingresso.com.br

Certificate

The complete raw certificate details for www.ingresso.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MAzXfmAwijuqAeL8DMX
0Gv+ELPNa+1P49TfzxqcjByY98WlHhA0qX3hJ63KtYqwexj9I+/EsPbMCh8k83Pt
AGVIWrPkEeg3U52vtryXQvWteti7SbrCJWlDbpeyf+BSpYgy2LSZHWKBQs88Ec/q
FFNU1AIV8o2IT72/wHhLxBAlQD4P6a6j4b+TjdT7D6AJnz6RL5CO2fjZZj8ncIfy
8LJimGv6cDjztPSeHRYMlGGJHp1Z3vkICABOq51jKb1W9jId5YNllTnfDzmL/d5u
aTRzKPVGAstAovE0g7YxbhkQFRCxNuuNDMRM61HzdQSg0dms0MkQU4sQdXG8PNmV
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7893197396601875456684584727960604313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rio de Janeiro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rio de Janeiro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ingresso.com Ltda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tecnologia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ingresso.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28877111206514565798706688622259855677096133942591140388872009046170303805777871122491157574242190647437199787956117813984672742747883342444888648009376856573968532085074952930510545923731907867871666227849526681006672737869847313471458106061089507691686135614725041484437850521638207217130498339789899662232376560914184987146780804843211936273489188791187053410643287574096315691621314982635017814439153834518152583958099018781097840221424766297643896665850851857288997144034354148123248012086367301906520507875506113259618680572087386028017111134368938414710447394611152275405229283777570374948147434965935316374893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingresso.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingresso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingresso.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingresso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingresso.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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