www.shpgroup.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number fd:34:3e:38:b0:f0:09:08:cc:39:0f was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.shpgroup.com.br,OU=Domain Control Validated,C=BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): fd:34:3e:38:b0:f0:09:08:cc:39:0f
Serial Number (int): 306104943202771756361988367
Serial Number lenght: 88 bits, 11 octets

SubjectKeyId: 55:f8:96:26:97:80:67:7b:be:df:81:43:f4:9a:cc:b9:8c:34:0a:6e
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 10:b0:a6:c8:8d:43:83:59:73:ec:e3:40:30:dc:16:eb:b3:e7:98:8c
Fingerprint (sha256): 64:35:6c:58:cf:54:1b:09:b4:88:55:84:f1:8c:85:63:89:1e:21:91:90:6f:39:9e:af:5c:d5:17:33:e0:1c:ab

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.shpgroup.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shpgroup.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.shpgroup.com.br
shpgroup.com.br

Other certificates including the domain name shpgroup.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.shpgroup.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAm8o8h6W2bXydsmncvtOm
zO/fxIDZl7YQTChfLgGE7QK9hlGhOYlLxcj6pGp1DMZKxJl/fXqRTi4qm4dlM34E
ZrBK+Qi2UydiFhv8lWJqqNKNgFIG13XGotoc1mTYxZKENGC34GC10QZtrRv6vM7y
EDtx/NJuNGweZs8XsnP8qW4MZ4Fa/rwrU2d/QswiOfctALizayh/bjXjNtBMucAu
tUtw0u9rfqi22Dhf/BBcDjbcaZZQD0+Hp+fD/V5KYq492tqIpHojSMU5W+Gsj8Fd
UNfTCrlav6Qyu1OLotjy1mEiOMSAZeHr8ROAcUpBdqmK2ROG4f1FJFZ9UUk3r0OF
sYGQjpZ2/17Jl1ulLhTKgtngv0CYBm9zEKhHfhOFADCX1QAKfoRaJRMumqDkHXK8
E1mRXpEfEa6/fGJeU3FlYOHgt0L9FK1sXWu8+7eam909JCtTOwgDeRO62pxLABuk
g5XmXIrWIWN6lzUaA6n61BjSKsPiAuGG2jtUqEHTwRbTS3q/M1NmEK3F7rR4jOWT
sTwgkSgFD/qGc4UIDwcEn+nombA1p8HX3c/G1+5ey1ZBRslR/bNGPlxvjrdKqhPt
012pDfXmLgKKvuuqCzOxw8EZYMx+iDKXsr7WzlBQvkSe8E8sH960dvh09IZS17Ys
bKQET8E9OxTxQeUSBOXbUYsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306104943202771756361988367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 15:58:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 15:58:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shpgroup.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635567692701017941329862124356203073165089959515223105340175765384114383735035832494636070800827812527086712975379964041265156326689043142122080211224121336394562803173463074984238246150324090884488360923095331487132305845272387483666803717752431309426674541191194496740530167292969190567658896819295802184571114641515759678168017738561575934820376625932206729153712777499384338820899494698449361910828583632793413122175997472939795435049472915239709417502385896005744354928643383043486406944383258507359717655886528661543663219276341386859787341613654240314396085569651199591440453794328843887499992677974215556242755914644456221792918193567762379724099244390159004041287132527850318231280618260048930578536114337867570628952186323207503233707289453262391282238202365351826482294159232390561459368288547027598753343106708869988526509110438261670285642015411240322113868945934982906257854480682425228415484183663697758505028336749094264409485277953235028418519348474638352957040057959949585670122466048194146748616931456075999462890625645179985997328755063779090249215430752139755275816791975429601539948836054564364114537707252821063432441824617983051998493272452687941513751320878863118720290769289758309804522008536382636704878987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shpgroup.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shpgroup.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55f896269780677bbedf8143f49accb98c340a6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd54ab5560000040300473045022100fcd25b51716c732d346dfd0f6f2fd5470b0771aab5408c4957d047421851f2840220222022956662397a2924bb1896fb2de656e397465a639eea5cba40a535d1e437007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016dd54ab53c0000040300473045022076b65791bc8ebba78b14cbef10602caf5a9c91d4e3744cc6827b88754926288a022100c5c2e0bafab5df6c7a0861e94dd37895d58a59a8f6430b8897c1933d4a9a114f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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