justto.com.br

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 54:fc:02:16:27:af:12:fc:c0:b3:1a:df:c4:49:28:4f was issued on by StartCom Ltd..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=justto.com.br,C=BR

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 54:fc:02:16:27:af:12:fc:c0:b3:1a:df:c4:49:28:4f
Serial Number (int): 112963652774404059569992440729729312847
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b8:29:d7:f5:2b:2e:91:41:fe:e1:d9:bf:36:18:2e:5c:07:7c:86:14
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 90:85:fb:f4:e6:bd:25:5c:6a:f6:e9:24:7c:f7:50:24:f5:a2:cb:20
Fingerprint (sha256): 7c:0c:22:45:a8:7a:ae:6a:2a:0b:dd:2a:98:fb:9e:3f:9b:86:4d:96:f9:19:99:89:9e:d2:4d:e8:3a:53:84:48

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate justto.com.br

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justto.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justto.com.br
www.justto.com.br
app.justto.com.br

Other certificates including the domain name justto.com.br

(limited to 100 certificates)
justto.com.br
ajuda.justto.com.br
justto.com.br
app.acordo.pro
ajuda.acordo.pro
app.justto.com.br
acordofacil.net.br
justto.com.br
argo-cd.justto.com.br
justto.com.br
app.justto.com.br
www.justto.com.br
app.justto.com.br
acordofacil.net.br
www.justto.com.br
ajuda.acordo.pro
saas.acordo.pro
justto.com.br
justto.com.br
sou.justto.com.br
v1.justto.com.br
app.justto.com.br
justto.com.br
justto.com.br
app.justto.com.br
app.justto.com.br
justto.com.br
materiais.justto.com.br
sou.justto.com.br
www.justto.com.br
acordofacil.net.br
app.acordo.pro
justto.com.br
materiais.rds.land
promo.justto.com.br
app.justto.com.br
app.justto.com.br
www.justto.com.br
justto.com.br
justto.com.br
materiais.justto.com.br
v1.justto.com.br
justto.com.br
tls.automattic.com
justto.com.br
ajuda.justto.com.br
ajuda.justto.com.br
justto.com.br
justto.com.br
www.justto.com.br
justto.com.br
ajuda.justto.com.br
justto.com.br
tls.automattic.com
materiais.justto.com.br
justto.com.br
app.justto.com.br
justto.com.br
materiais.justto.com.br
justto.com.br
ajuda.justto.com.br
saas.acordo.pro
justto.com.br
app.justto.com.br
ajuda.acordo.pro
www.justto.com.br
promo.justto.com.br
sou.justto.com.br
justto.com.br
sou.justto.com.br
justto.com.br
argo-cd.justto.com.br
justto.com.br
saas.acordo.pro
justto.com.br
acordofacil.net.br
justto.com.br
justto.com.br
www.justto.com.br
kubernetes.justto.com.br
justto.com.br
app.acordo.pro
materiais.justto.com.br
promo.justto.com.br
links.justto.com.br

Certificate

The complete raw certificate details for justto.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt7QvhhxPQqa403nEenX
ZNwF3riOis0JFiWR1YEVrjw/xi2Ci8I936E6J2j4y2L7/hl4Y0CAIyGhOft8mkKE
F82RAnSSKdJALAwrRaFULdetmT0vS6z2xxa3PGSfUYS5b69yQCYlWtDonyp5e161
WnqLtMtoGVPR/hrszefBJTON2qNzUeX+bVhgDXP44g6IPlvBA3MJ9ued8CFwYJh5
0R8RjKBRnt0X5AwZRJ9/eMbsSnj1PnoNqeTyHuX0y5D6teTs9uFJt8bZL16czaG4
/STMFq5ParbiY5vfpfepkhk+zlbFYO6sA4447I6XeWSmU6/8kXc7/BZsV2J1KdhG
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112963652774404059569992440729729312847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-23 19:04:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 19:04:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'justto.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25105058752402499191462022670092282819123660849817240709740615062739857865993375237008098735804346627932750587242090288196021756912075197124843456972364527654279070728197295969172630915797340536698986476506746648893854218784724160881917091242914123166891194257690011920327791091277839810370678536356701182481025432878368759966913678041936183941866627755470418588261014216401123365800548103907185616658162076062259534602756254621088351721096182197502137912309665012909966114423663656567604678059948125513542251582007716165264458090404838713083325621448327631407216982960833835777960668602851409578732881742844164327011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b829d7f52b2e9141fee1d9bf36182e5c077c8614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.justto.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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