*.fiat.com.br

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:14:b9:c0:ea:5b:f2:4c:5f:4e:e2:1f:d2:c6:81:b2 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.fiat.com.br

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:14:b9:c0:ea:5b:f2:4c:5f:4e:e2:1f:d2:c6:81:b2
Serial Number (int): 17387577412489129967390106412814598578
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 46:b7:06:d6:e7:9a:b6:ca:f8:23:f8:2d:16:a9:3c:98:cb:1c:cc:30
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b2:0f:06:1e:e3:f1:d5:a2:69:be:c3:21:82:58:da:d5:e4:e9:e3:36
Fingerprint (sha256): 5f:ac:51:af:d6:3a:e2:fe:1e:bd:07:49:27:49:28:aa:fe:72:73:71:a9:35:01:e4:41:e1:af:ad:96:a3:23:ef

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.fiat.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fiat.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fiat.com.br

Other certificates including the domain name fiat.com.br

(limited to 100 certificates)
ccdealer.fiat.com.br
espaider.fiat.com.br
www.fiat.com.br
scp.fiat.com.br
www.fiat.com.br
www.fiat.com.br
efs.fiat.com.br
scp.fiat.com.br
sapiensr3.fiat.com.br
www.fiat.com.br
app.fiat.com.br
www.fiat.com.br
www.fiat.com.br
paixaopelofutebol.fiat.com.br
www.fiat.com.br
obtlatam.fiat.com.br
cceservice.fiat.com.br
www.fiat.com.br
www.fiat.com.br
elog.fiat.com.br
*.fiat.com.br
beneficiosbianco.fiat.com.br
*.portalstellantis.com.br
elog.fiat.com.br
autoseg.fiat.com.br
www.fiat.com.br
boleto.fiat.com.br
fiat.com.br
ccdealer.fiat.com.br
www.fiat.com.br
www.fiat.com.br
painelcontrole.fiat.com.br
*.fcalatam.com.br
obtlatam.fiat.com.br
fiat.com.br
cmpsms.fiat.com.br
www.fiat.com.br
email.fiatgroup.com
www.fiat.com.br
rtmmecanica.fiat.com.br
sapiensr3.fiat.com.br
scp.fiat.com.br
espaider.fiat.com.br
integracaocrm.fiat.com.br
www.fiat.com.br
www.webdealer.fiat.com.br
boleto.fiat.com.br
www.fiat.com.br
services-tcae-bra-prod.fiat.com.br
*.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
scp.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
rtmcarroceria.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.fiat.com.br
*.fcalatam.com.br
boletocpfh.fiat.com.br
*.fiat.com.br
ac.fiat.com.br
msc.fiat.com.br
services-tcae-bra-prod.fiat.com.br
espaiderfca.fiat.com.br
www.fiat.com.br
*.fiat.com.br
www.fiat.com.br
sapiensbw.fiat.com.br
*.fiat.com.br
sapiensr3.fiat.com.br
fcalatam.com
www.paixaopelofutebol.fiat.com.br
*.fiat.com.br
painelcontrole.fiat.com.br
www.fiat.com.br
elog.fiat.com.br
www.fiat.com.br
fiat.com.br
www.fiat.com.br
www.fiat.com.br
www.paixaopelofutebol.fiat.com.br
qca.fiat.com.br
fcalatam.com
beneficiosrosso.fiat.com.br
paixaopelofutebol.fiat.com.br
scp.fiat.com.br
promocaobigdrive.fiat.com.br
www.fiat.com.br
cceservice.fiat.com.br
www.fiat.com.br
elog.fiat.com.br
www.paixaopelofutebol.fiat.com.br
www.fiat.com.br
www.fiat.com.br

Certificate

The complete raw certificate details for *.fiat.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZddlm9UvtxGfQj3sPKy
Q1o3Dl61iA80qtytQzC0bHFOsk0oXOc3Yp4fN9a2zT/UAZjfSZKd7MFdOwYBLJA8
imaMXLePZsBaPkf2/yrHgHDWUdB6EUoVy6zc5Qkp4GzudotAMrbAVS5/Q9XbvyfF
SkYsIns20urUXVrmkYr3tjayMk/VrRzQN0XSucSxhfQ+tfEyDF+IbPBuXBs4Fd2o
4iLbPcASImkaug59Vr9o0Hc2SivsbSF3xtqMxcq+32H4hV9jTnEP9TczwjbOg9Vl
JxMo9zxSQmLaBRznIXs6XSi0Z5i9hsqv1k9IV+K4azF2JPjYMDVKDYFQVHTcBYak
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17387577412489129967390106412814598578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fiat.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24943587226100067861049690494104510355775852918982784520833530731623928917309628879063175330911062487889305216174461890591031334953569884489137644520981674141445329424789956504398079043661291914526726311778766428123724011015945744510720277347612089483593862674971477779707126738945601634244187148465339344342107658990183858530427651389689400703745798808117927730423511300031533112971430590194997035146939314988593338720904172520854569076766154729640945721947903839877030508614784364269932911830128696145467725060572102418017873664706058887142616462691396699567952869509622926976683608568344016433057379431903819900077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46b706d6e79ab6caf823f82d16a93c98cb1ccc30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiat.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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