*.pservice.inovamind.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:2d:e4:e9:fc:13:94:cc:a5:70:aa:91:1c:c8:0d:19 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pservice.inovamind.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:2d:e4:e9:fc:13:94:cc:a5:70:aa:91:1c:c8:0d:19
Serial Number (int): 20176716222973198492136404279137668377
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:c1:a4:db:4d:73:68:17:eb:1c:14:88:95:12:9d:d7:78:ec:5b:55
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2e:f0:ae:05:fa:2b:50:4c:f2:4a:6a:46:a6:91:05:5a:75:dd:89:e7
Fingerprint (sha256): 66:b6:6f:60:15:bb:d1:e0:b1:62:c7:fd:55:fe:55:8b:9b:15:de:1e:df:61:e1:c3:5b:b3:6d:45:61:07:9d:5a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.pservice.inovamind.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pservice.inovamind.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pservice.inovamind.com.br

Other certificates including the domain name inovamind.com.br

(limited to 100 certificates)
inovamind.com.br
gm.api.client.inovamind.com.br
inovamind.com.br
ws.inovamind.com.br
xpi.regtech.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
painel.inovamind.com.br
filemanager-hml.inovamind.com.br
aa.client.staging.inovamind.com.br
eudora.front.inovamind.com.br
quiz.inovamind.com.br
bgcveiculo.staging.inovamind.com.br
rocket.client.inovamind.com.br
*.inovamind.com.br
aa.client.inovamind.com.br
bgc.credilink.com.br
ocrprd.inovamind.com.br
aa.client.staging.inovamind.com.br
sni190869.cloudflaressl.com
mikkel.full.inovamind.com.br
sni190869.cloudflaressl.com
full-dev.inovamind.com.br
painel.staging.inovamind.com.br
aa.client.inovamind.com.br
poseidon.client.staging.inovamind.com.br
anubis.client.staging.inovamind.com.br
anfora.client.staging.inovamind.com.br
show.regtech.inovamind.com.br
backstage-pagon-aqbank.inovamind.com.br
crt4.regtech.inovamind.com.br
sni190869.cloudflaressl.com
legal.inovamind.com.br
orchadm.private.inovamind.com.br
inovamind.com.br
xpi.regtech.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
bgcveiculo.inovamind.com.br
moira.admin.inovamind.com.br
sni190869.cloudflaressl.com
inova.regtech.inovamind.com.br
anfora.client.staging.inovamind.com.br
poseidon.client.inovamind.com.br
sni190869.cloudflaressl.com
www.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
eudora.front.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
dashboard.inovamind.com.br
a2.client.inovamind.com.br
bgccredil.client.inovamind.com.br
liveness.app.inovamind.com.br
*.regtech.inovamind.com.br
motorbgc.vb.hml.inovamind.com.br
hml.regtech.inovamind.com.br
bancoob.regtech.inovamind.com.br
projeto.inovamind.com.br
moira.admin.inovamind.com.br
poseidon.client.inovamind.com.br
*.legalfinder.inovamind.com.br
sni190869.cloudflaressl.com
inovamind.com.br
inovamind.com.br
spartacus.staging.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
spartacus.inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
consultoria.regtech.inovamind.com.br
eudora.dashboard.inovamind.com.br
devportal.inovamind.com.br
sni190869.cloudflaressl.com
painel.compliance.inovamind.com.br
sni190869.cloudflaressl.com
full.inovamind.com.br
*.dashboard.inovamind.com.br
*.pservice.inovamind.com.br
crt4.regtech.inovamind.com.br
eudora.client.inovamind.com.br
inovamind.com.br
ocrcnh-stg.inovamind.com.br
consultoria.regtech.inovamind.com.br
full-hml.inovamind.com.br
anubis.client.inovamind.com.br
anfora.client.inovamind.com.br
cloud.inovamind.com.br
*.dashboard.inovamind.com.br
bnp.regtech.inovamind.com.br
sni190869.cloudflaressl.com
poseidon.client.staging.inovamind.com.br
inovamind.com.br
inovamind.com.br
rocket.client.staging.inovamind.com.br
easy.regtech.inovamind.com.br
sni190869.cloudflaressl.com

Certificate

The complete raw certificate details for *.pservice.inovamind.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE8yKMztHEE+7XcYdhAv
Zzf4AabIEQRSl6SP6XBkRtAZqv7IA8FUGL1TZTxOh5uQZtwIDUt7LTQM1T3bsQpr
oYzf7HJtsbG8gCIGqDzOh8z4hgtMIJEMpUZYPZWGKLuGvrhIQGnchJOSz5QxE3l/
NREmr0ZJfhLkwj4kZ+AGMArWEj9JBvp/odFusj1auMLXslc0RyE0ER2FHosWOJTw
08/aoUYFLgpbv4ges3i7iFSSzsDBwh++n0spQKe3lK60kU0GYyBdySvgHmcEgXdl
RFtOnnNQmWoLLYkrmK1SFAtw8Nw60hSEUFWRHSRwKZh/fbk0oOzzGuoHoeY7QSYq
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20176716222973198492136404279137668377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pservice.inovamind.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23266901084860054476528031316731219117175607231448717472241609896053570659627990522549703258564037790933159454285984204693292177795796821365699465823330425708349050704844445653334645984487030950545935201131316469987061611519754322446924845826110101142613516433559568296809031510774788039335049142149992998243463680989196112958986573056099079614077129849308728948888199648526994441096052554490853679078223026195243245020713503627135161104325869684486895740860742141474001517099035177919959903139684238888097359646462090798060704839528587550792685942265005147304477108239588913592348878863524742198906814385436611717727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abc1a4db4d736817eb1c148895129dd778ec5b55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pservice.inovamind.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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