querobolsa.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 03:d2:31:6f:4f:e7:f9:f9:e2:9b:b8:a8:90:fa:72:6a was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=querobolsa.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:31:6f:4f:e7:f9:f9:e2:9b:b8:a8:90:fa:72:6a
Serial Number (int): 5079068984773437554934668280708362858
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ea:ed:d8:a2:46:f2:5e:e0:4f:32:ce:80:f1:cd:2a:eb:64:45:5f:1a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): bd:86:1a:8c:12:6c:1f:0f:12:21:5a:c5:a3:74:7c:8a:f6:77:0e:e3
Fingerprint (sha256): 5f:f7:ed:36:33:bb:39:d9:68:74:3c:d8:36:13:4e:63:b7:48:27:3d:51:de:ed:21:ea:5e:95:c4:18:11:42:ef

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate querobolsa.com.br

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for querobolsa.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

querobolsa.com.br
*.guiadafacu.querobolsa.com.br
*.guiadafacul.querobolsa.com.br
querobolsa.com
*.querobolsa.com.br
*.querobolsa.com
que.bo

Other certificates including the domain name querobolsa.com.br

(limited to 100 certificates)
app-11.dev.carto.com
*.querobolsa.com.br
gambit.querobolsa.com.br
gambit.querobolsa.com.br
incapsula.com
vendas.querobolsa.com.br
athena.querobolsa.com.br
materiais.querobolsa.com.br
querobolsa.com.br
admissao.querobolsa.com.br
querobolsa.com.br
gambit.querobolsa.com.br
gambit.querobolsa.com.br
*.querobolsa.com.br
athena.querobolsa.com.br
gambit.querobolsa.com.br
*.querobolsa.com.br
incapsula.com
materiais.querobolsa.com.br
www.querobolsa.com.br
crm.querobolsa.com.br
querobolsa.com.br
troisiemecouronne.fr
*.querobolsa.com.br
*.querobolsa.com.br
ssl951687.cloudflaressl.com
querobolsa.com.br
email.querobolsa.com.br
ssl385664.cloudflaressl.com
*.querobolsa.com.br
gambit.querobolsa.com.br
preprod-admin.placeshaker.fr
www.mcnimum.xyz
www.querobolsa.com.br
qm2.querobolsa.com.br
novabreeze.net
aiaru.love
querobolsa.com.br
sni.cloudflaressl.com
querobolsa.com.br
querodevs.querobolsa.com.br
*.querobolsa.com.br
querobolsa.com.br
*.querobolsa.com.br
querobolsa.com.br
qe-cdn.querobolsa.com.br
www.jessedevs.com
afiliados.querobolsa.com.br
psapp.tbr6.com
assets.querobolsa.com.br
bizu.querobolsa.com.br
querobolsa.com.br
www.querobolsa.com.br
querobolsa.com
schoolhubs.in
qi-cdn.querobolsa.com.br
materiais.querobolsa.com.br
sni.cloudflaressl.com
*.querobolsa.com.br
querobolsa.com.br
*.querobolsa.com.br
*.querobolsa.com.br
assets.querobolsa.com.br
www.querobolsa.com.br
ssl425638.cloudflaressl.com
*.querobolsa.com.br
shradhhawelfare.com
querobolsa.com.br
*.querobolsa.com.br
querobolsa.com.br
vendas.querobolsa.com.br
*.querobolsa.com.br
simplonsolutions.nl
campanhas.querobolsa.com.br
gambit.querobolsa.com.br
app.querobolsa.com.br
*.querobolsa.com.br
querobolsa.com.br
gambit.querobolsa.com.br
materiais.querobolsa.com.br
visilaw.com
querobolsa.com.br
vendas.querobolsa.com.br
incapsula.com
pages.rdstation.com.br
foro.discoverymexico.com.mx
qe-cdn.querobolsa.com.br
pamadmin-dev.my-pam.ch
blend.xcaliberinternational.com
*.querobolsa.com.br
*.querobolsa.com.br
preprod-admin.placeshaker.fr
semtaxaoculta.querobolsa.com.br
incapsula.com
assets.querobolsa.com.br
*.querobolsa.com.br
querobolsa.com.br
ssl385665.cloudflaressl.com
yourhost.app
querobolsa.com.br

Certificate

The complete raw certificate details for querobolsa.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GXjUae0GPs07LZLNmwu
RH0qU2WoezKakQjfGpmE3q+hvEDMhyNDwKlfaKZcYQTHKxKxKmzvriZbgm5PGDVL
Uu/AT4AK6y5Aq68L4CS50C95LAN6QJGqydZubLF9ULSxSCJ/AAiJYMDnisw+sFze
UzhYYJGnxt6OxtWOaPku+AIMJvAr2p4ysHkRNwXiVmFT5kXB82FuJf14IEeFcgn7
tUNbQFUTyyKHZl8qBuFB5y66eO95tYaUiX8ft2b9+kz0RrOSH8a3DLEKnFNSHjBA
4N5rsRnMy9tW9YUJ/T0pFXykNRZTHr+ZoeI+0ksduhcg1ODSFRfY9xT/6In0yIzR
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5079068984773437554934668280708362858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'querobolsa.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27317716700641932131146416055028635999204907561757697656645873814494834008358938922610792482329812803770913950012636980231105584837465822372500413579353360573555941347008347491064085954340604753659244908340363560631489471336416791453470492551765106684644833297570476622112077976340492939429611899023804370334643907026456250016874365280202104765106439633600778806960586740966343186374370273466730142213621987447021950425004955491892231226280160734924022385901235279148211259794310946223947046074051871774879797612562222623985451271179371451384573656889252513730901706887784895004995490618463607486013881366071850357097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eaedd8a246f25ee04f32ce80f1cd2aeb64455f1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querobolsa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guiadafacu.querobolsa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guiadafacul.querobolsa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querobolsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.querobolsa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.querobolsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'que.bo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016c6877788a0000040300473045022100a5bb82296ec3493ea31bfe989c00480621f96bc8f65b067f61f645cae43eb8cc022055b385bdd4da0b1b4788923fdfa77b917a0df226b8bbcd2d45a0e4591a31c5240077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c687778ae0000040300483046022100e92a3a6773828ac7c864502345a231371c13a87642f3398b274793a9636b67cd022100b34cb01a872e9e55524de646225aa7d954072c59a62f02377725c7c334d7ae62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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