consultoria.regtech.inovamind.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:bc:f1:24:a4:fd:b6:6f:32:11:12:6f:f0:ac:c9:73 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=consultoria.regtech.inovamind.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:bc:f1:24:a4:fd:b6:6f:32:11:12:6f:f0:ac:c9:73
Serial Number (int): 19590234714383961745864608766703225203
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:28:46:66:29:43:ad:54:25:7a:66:05:fe:8c:17:d9:fe:e1:3d:eb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 86:d5:f3:49:91:d3:64:7a:a0:b2:0c:14:ca:c3:43:b5:24:56:cd:4b
Fingerprint (sha256): 6d:c0:90:a5:74:cd:93:bf:45:08:20:7a:05:a6:9c:4f:ca:82:63:82:54:c3:da:b2:34:6b:8c:cd:e8:5a:6e:d5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate consultoria.regtech.inovamind.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for consultoria.regtech.inovamind.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

consultoria.regtech.inovamind.com.br

Other certificates including the domain name inovamind.com.br

(limited to 100 certificates)
inovamind.com.br
gm.api.client.inovamind.com.br
inovamind.com.br
ws.inovamind.com.br
xpi.regtech.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
painel.inovamind.com.br
filemanager-hml.inovamind.com.br
aa.client.staging.inovamind.com.br
eudora.front.inovamind.com.br
quiz.inovamind.com.br
bgcveiculo.staging.inovamind.com.br
rocket.client.inovamind.com.br
*.inovamind.com.br
aa.client.inovamind.com.br
bgc.credilink.com.br
ocrprd.inovamind.com.br
aa.client.staging.inovamind.com.br
sni190869.cloudflaressl.com
mikkel.full.inovamind.com.br
sni190869.cloudflaressl.com
full-dev.inovamind.com.br
painel.staging.inovamind.com.br
aa.client.inovamind.com.br
poseidon.client.staging.inovamind.com.br
anubis.client.staging.inovamind.com.br
anfora.client.staging.inovamind.com.br
show.regtech.inovamind.com.br
backstage-pagon-aqbank.inovamind.com.br
crt4.regtech.inovamind.com.br
sni190869.cloudflaressl.com
legal.inovamind.com.br
orchadm.private.inovamind.com.br
inovamind.com.br
xpi.regtech.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
bgcveiculo.inovamind.com.br
moira.admin.inovamind.com.br
sni190869.cloudflaressl.com
inova.regtech.inovamind.com.br
anfora.client.staging.inovamind.com.br
poseidon.client.inovamind.com.br
sni190869.cloudflaressl.com
www.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
eudora.front.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
dashboard.inovamind.com.br
a2.client.inovamind.com.br
bgccredil.client.inovamind.com.br
liveness.app.inovamind.com.br
*.regtech.inovamind.com.br
motorbgc.vb.hml.inovamind.com.br
hml.regtech.inovamind.com.br
bancoob.regtech.inovamind.com.br
projeto.inovamind.com.br
moira.admin.inovamind.com.br
poseidon.client.inovamind.com.br
*.legalfinder.inovamind.com.br
sni190869.cloudflaressl.com
inovamind.com.br
inovamind.com.br
spartacus.staging.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
spartacus.inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
consultoria.regtech.inovamind.com.br
eudora.dashboard.inovamind.com.br
devportal.inovamind.com.br
sni190869.cloudflaressl.com
painel.compliance.inovamind.com.br
sni190869.cloudflaressl.com
full.inovamind.com.br
*.dashboard.inovamind.com.br
*.pservice.inovamind.com.br
crt4.regtech.inovamind.com.br
eudora.client.inovamind.com.br
inovamind.com.br
ocrcnh-stg.inovamind.com.br
consultoria.regtech.inovamind.com.br
full-hml.inovamind.com.br
anubis.client.inovamind.com.br
anfora.client.inovamind.com.br
cloud.inovamind.com.br
*.dashboard.inovamind.com.br
bnp.regtech.inovamind.com.br
sni190869.cloudflaressl.com
poseidon.client.staging.inovamind.com.br
inovamind.com.br
inovamind.com.br
rocket.client.staging.inovamind.com.br
easy.regtech.inovamind.com.br
sni190869.cloudflaressl.com

Certificate

The complete raw certificate details for consultoria.regtech.inovamind.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH2bh8BgsjVtzeE6qZIl
nDBzLVvrdrl/WILcXVfEvrSMJ9KXy4cZQM9vMYas5yPU+1rDeWPbJ6si5eRV7Uvl
3DftsY6U+yz0kXpIu0eCpqIuhk5TZP6Y7qVRI7zDHV+u+VMmOIL/RZ1xzm+zmX9r
2wxwguMKcBj6NBmwNQGbLkmCQxYVrH7i4GR9G3drxOSwDOL5onZ7ApZotj1cbHWp
rAfLqoIjsi0wI62hlicV+IVUnAJT7BXeYXcXgOHRhOJlWkmQxH4JexooTZL70GsA
P7qoPsTaZQpiHmdTa96yXH+zZa7ZqM7Y3PMk8QynngP0qB08OeBbcIxzlEO9RE+X
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19590234714383961745864608766703225203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'consultoria.regtech.inovamind.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24804647159909549181463388936369779088584552669423430915507321359066455707871694908861410828819395010044022964317039266972344200334710201203102477543006170733754038121045841910925866475597864450285823257328240763085199043875211565491114709366482241041448577191258162611534589047061709195207731702303396436043230539727615332886769777673341521881311158752462895531590394543970720198462922596307276969872862363350308186811355884893244948096088072648364606345012432216144373017252502139926153330018193394907786112019894316987149696973878094140388927662580471872932786090778573871992447058027857215186806545744764871874447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							862846662943ad54257a6605fe8c17d9fee13deb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultoria.regtech.inovamind.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bbdf4b7038503713ff8c38dff73bb0b7017d251394ad705dd658fe6c35772b97475b6473ef87b2df7c553de57b0e181cd55403ef5ef680957fb51ac23d17c5a03c38ee35a8a23d533930db0d8259d154657466101fad4077bc391d2c1350c27c26dd3dad47158b560a1f997069cb971d3d714ea7cc57f4414b3f035533650ac30289cc462959b4c0e1e805751586a9eab7522fe9154e8d82c2e46f50558583c9e07534f2bccf053d5cd0b395f91d9d4b6d8485cca86fd2fa92cc7d7992aae7e0181fdd3dd2f8b617f37f9d3c4eafcdec4904bcbae0bcf24fe25b85a2132f477718a9b3b09ce17e026e1d57eee9ab7117806ded6bb884935d64d0a2628dbe6dac