seg.banestes.com.br

Issued by TrustSign BR Certification Authority (DV)

About this certificate

This digital certificate with serial number a0:49:93:43:9a:41:2e:da:6b:eb:30:ce:f6:7d:b1:64 was issued on by TrustSign Certificadora Digital.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=seg.banestes.com.br,OU=Domain Control Validated+OU=Hosted by TRUSTSIGN+OU=EssentialSSL

TrustSign Certificadora Digital

Organization: TrustSign Certificadora Digital
Organization unit: Security Dept.
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): a0:49:93:43:9a:41:2e:da:6b:eb:30:ce:f6:7d:b1:64
Serial Number (int): 213058503866497700281541669289648304484
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a5:b3:8b:67:db:df:71:6b:18:b9:21:3c:b3:8c:dd:52:43:e9:bf:3e
AuthorityKeyId: 03:e2:01:45:5c:82:92:f7:04:f1:eb:d0:2f:cb:f0:37:be:08:31:de

Fingerprint (sha1): 21:69:e9:04:31:df:0a:44:ab:f1:b6:c2:99:c0:a5:4a:d3:1f:86:b9
Fingerprint (sha256): 5f:83:0f:b9:a7:ed:40:8b:a2:73:da:78:a1:84:2f:1c:17:7a:1b:63:1c:f5:7e:be:e3:42:39:da:0d:b1:03:84

Issuing Certificate URL: http://crt.trustsign.com.br/TrustSignBRCertificationAuthorityDV.crt

Revocation information

OCSP Server: http://ocsp.trustsign.com.br
CRL Distribution Point: http://crl.trustsign.com.br/TrustSignBRCertificationAuthorityDV.crl

Check the revocation status for certificate seg.banestes.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seg.banestes.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seg.banestes.com.br
www.seg.banestes.com.br

Other certificates including the domain name banestes.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for seg.banestes.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSQVYoGrrUqaXP4jFliv
1qkeQlCy+VETLnyUWy+MvJK69qxPaJWglab9ahQq60I+M63S9UyWFnlHUg4/7+OB
nw7nJQXuZt0SsTNShkIRfEhuJnSuNdvcVHdKn/F+e5/WTng0LMjvaLHj6hWF0pB9
dY3ExoFqYs5QMjpVPPbrWJ+sFbLNU7V3bzZf/jt4QEeH2qrYybekhrqODxcobPNG
xN/r/esh/np+NVvY+U0BQANbeldDMlM2WUpVuGbAQnBrCAHn49w/6Mguekaya5is
lvtLm0/uHFPLStbjItRBXVupGBeY5G+x7uy+KHDn0QS+pdnUx9eIgA8obHjeQaDR
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213058503866497700281541669289648304484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustSign Certificadora Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Security Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustSign BR Certification Authority (DV)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by TRUSTSIGN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seg.banestes.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21352066993218219302465430954012038811070234061272646475682127561236825628099322235503922521986868140846371604199344013900397699610655805374729746602334046519307154836814579555802889294932286408346903126301444817009911825770861685785082756458137816308910395623936039851492738252904231735407022742871241869662940072766247783241841022289627306894957661750104258817850543785997790098950410833939145810623572971664992341203607268998184568349390968708812419630468461118655266427883760560088282563491818867943120688548571761991402602596908332483733418875162740438901863605873200513575230984913063412905341853406728175014333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 03e201455c8292f704f1ebd02fcbf037be0831de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5b38b67dbdf716b18b9213cb38cdd5243e9bf3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.38
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.trustsign.com.br/files/repository/TrustSign_BR_DPC.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustsign.com.br/TrustSignBRCertificationAuthorityDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.trustsign.com.br/TrustSignBRCertificationAuthorityDV.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustsign.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seg.banestes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seg.banestes.com.br'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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