eitv.com.br

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 72:ee:70:52:1f:7b:f1:19:d4:29:83:28:65:38:e7:32 was issued on by ZeroSSL.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eitv.com.br

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 72:ee:70:52:1f:7b:f1:19:d4:29:83:28:65:38:e7:32
Serial Number (int): 152770036308140505390440592326860007218
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e8:a2:b4:0c:09:a4:70:37:1c:36:64:cb:cc:ab:0b:38:4d:07:6b:a6
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): b3:53:b6:37:3e:05:94:ca:a3:52:d4:f7:63:e8:47:44:50:7c:5e:56
Fingerprint (sha256): 71:d9:46:b1:93:a2:6a:c7:1f:32:7a:78:f6:13:a4:8e:23:c5:76:ce:2a:25:3a:59:70:3e:48:11:97:82:39:cc

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate eitv.com.br

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eitv.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eitv.com.br
api.docs.eitvcloud.com
blog.docs.eitvcloud.com
fazendaroseira.com.br
www.eitv.com.br
www.fazendaroseira.com.br

Other certificates including the domain name eitv.com.br

(limited to 100 certificates)
eitv.com.br
eitv.com.br
eitv.com.br
materiais.eitv.com.br
eitv.com.br
eitv.com.br
materiais.eitv.com.br
eitv.com.br
eitv.com.br
materiais.eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
info.khost.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br
eitv.com.br

Certificate

The complete raw certificate details for eitv.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1URJe3oXBcM3XYJjvYoq
xQ8pobM/VzSJzLFyDYropSLcOIg7idt3doWxJEW24AIoj0gM8QiObSVN7upKFUxn
//ZLxqAE/SIH/2Bx85XmvceONuT23nAQlwR088rpbcjoB+n2HDsXgS3ed29Hz9uI
89i8w5hgObJ6ypYRWQDt47SI2HtE4b30UqVKa7r7e5BnxRBA9u97in/UVi8jUuKt
iwbk9eNLLU8raFy1ydx5TMtEZLGBMb/Vqog8Usv0igsRXLrSR92s6gXkAIqMlpK+
SnoGL+Jy/CyMARLpoiVLoXPUaahmvTIWCsafM+KOmGkLp7y95boeEKl3V2K9EkwQ
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152770036308140505390440592326860007218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eitv.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26922432552403165035143005167895366331045669931141254536816459314306937297016327464126571682806196860369319751534756048076516998250252583314289539253026438729490327738974097832114221320338720464244698525177705429478346665922033393840015769950250461354240186155227830710421485155437027335819596619217937375757462069049545674242136747412630053173142500739411500568017027243105913847185044064596661943878587577568347743240540903067519989777257537111423646173750056833184885528217289585390069435487722717506241580066790785115513225553205507171887702360670827244636074261292561697734343624452244714708027248047991661793419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8a2b40c09a470371c3664cbccab0b384d076ba6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b89e3e2a20000040300473045022069eca10b59d9b24b2257fcea7c75eb260fa3770c7f4c07c2905be8cc95787cc5022100f07611b1c85b692db1b19f5d866f12af86830f91a01e5aa6427074db496d3b55007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b89e3e2fe0000040300473045022100855704c8c153cc250f6b36725805d5ca362f6d51d54faa1b15926f5490894a77022014f7cee1288fe0f8050937b1bde265fc8f484c87fa6e189cc76056dabe721cc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eitv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.docs.eitvcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.docs.eitvcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazendaroseira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eitv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fazendaroseira.com.br'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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