*.ojc.com.br

- GJC -

Issued by GJC Advanced G2 CA1

About this certificate

This digital certificate with serial number 21:25:51:d5:00:00:00:00:00:64 was issued on by Grupo Jaime Câmara.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

GJC

Organization: GJC
Organization unit: TI
State / Province: Goias
Locality: Goiania
Country: BR

Grupo Jaime Câmara

Organization: Grupo Jaime Câmara
Organization unit: Tecnologia da Informação
State / Province: GO
Locality: Goânia
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 21:25:51:d5:00:00:00:00:00:64
Serial Number (int): 156526520084712656994404
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 85:b3:3a:ce:94:0c:47:db:0e:3e:0e:53:37:78:37:08:56:0c:40:cd
AuthorityKeyId: c1:5b:48:cf:c4:22:7e:55:0a:f0:69:e4:f1:34:cd:8c:48:b4:22:f3

Fingerprint (sha1): 86:8a:e3:6d:58:64:cd:33:9d:a2:af:c7:81:fb:67:c9:ed:e0:c4:65
Fingerprint (sha256): 7d:81:9b:8f:d4:f3:e0:00:c3:ba:88:c5:2e:ac:c8:af:3e:2e:c1:be:be:32:0d:cb:61:bf:65:f3:a4:fd:0b:3e

Issuing Certificate URL: http://pki.gjccorp.com.br/repository/GJCAG2CA1.crt

Revocation information

OCSP Server: http://pki.gjccorp.com.br/ocsp
CRL Distribution Point: http://pki.gjccorp.com.br/repository/GJCAG2CA1.crl

Check the revocation status for certificate *.ojc.com.br

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ojc.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ojc.com.br

(limited to 100 certificates)
popstore.opopular.com.br
mail.ojc.com.br
*.ojc.com.br
*.ojc.com.br
*.ojc.com.br
mail.ojc.com.br
*.ojc.com.br
acesso.ojc.com.br
*.ojc.com.br
srv-crm.ojc.com.br
fb.opopular.com.br
*.ojc.com.br
srv-adfs.ojc.com.br
*.ojc.com.br
lgpdtvanhanguera.nuvemx.com.br
mail.ojc.com.br
*.ojc.com.br
*.ojc.com.br
sip.ojc.com.br
sip.ojc.com.br
*.ojc.com.br
sip.ojc.com.br
*.ojc.com.br
cdn.ojc.com.br
crm.ojc.com.br
sts.ojc.com.br
*.ojc.com.br
mail.ojc.com.br
store.jornaldotocantins.com.br
*.ojc.com.br

Certificate

The complete raw certificate details for *.ojc.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEqJZVmMuuXtP388HUST
ibBcE3h7QVJ/93GUsMpUJ7F4J+PTLwp5fRoACC4m1qXyQBRE4FnyVZuxOi99mDXi
q5GSL6CketZ3p5ZI6Fhyty3NICdW5fsoJrrl9atRCf6Cfh2fDsIRWRfziIPxGCv7
uc+ds+3wjKgPDuDOljyFfQS+7B9Qy9mPav5fTaOD9VQuXm5PXLPTIh5n/3VuNWtb
fgN/BFNbT9i2q1OqcxiCSICKSLYYsizL/3MbZrCcWQ6d5XYFUzXFoOKl9kM0rQjP
sK6kLW+/zwT5jOWmp3nYFHXF8y5MwdPvphB8fTt/pVDT5CHMSL9L1hA+vodQ/kc7
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156526520084712656994404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'br'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'ojc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Goânia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Grupo Jaime Câmara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tecnologia da Informação'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GJC Advanced G2 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-23 20:39:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-23 20:39:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Goias'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Goiania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GJC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ojc.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18215071333119463929123789584538037797337719708963466620283799983261259155469810408758739398355107364806272565598671656027739869566086043713072025943090674069797370299245780565263748908059249858177871710550426883508352078120965153836440533311886014278725689082396376102232715975798653369293286495031415031454726153814392771000454834143251490156650825679631519207262573736047704603609545429480306080227011390417806555152821021961691898756009294296999409448485716859594036945767871999880944315625265067320754031202697386808029731955565646223578079616983952441989962907176134543611782076606632248090744301581977900235641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.13596435.14818047.9718449.613037.6600341.84.11617239.8383451
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85b33ace940c47db0e3e0e5337783708560c40cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c15b48cfc4227e550af069e4f134cd8c48b422f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.gjccorp.com.br/repository/GJCAG2CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.gjccorp.com.br/ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.gjccorp.com.br/repository/GJCAG2CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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