www.cryah.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 33:83:2b:17:02:e1:c8:c7:3d:30:d0:0c was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cryah.com.br,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 33:83:2b:17:02:e1:c8:c7:3d:30:d0:0c
Serial Number (int): 15942308269499659832800628748
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 40:71:60:aa:19:10:bd:34:d2:f8:1f:75:2f:51:ba:88:50:b7:8c:85
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 49:8f:27:19:09:9f:96:e0:b4:83:ec:48:0c:e3:e8:4c:c4:be:77:43
Fingerprint (sha256): 83:29:61:fb:af:85:b7:70:ea:69:a6:f7:4b:ef:91:05:5c:81:76:cb:a5:6b:f8:1c:25:84:93:2a:f7:11:d6:f1

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.cryah.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cryah.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cryah.com.br
cryah.com.br

Other certificates including the domain name cryah.com.br

(limited to 100 certificates)
cryah.com.br
materiais.cryah.com.br
materiais.cryah.com.br
materiais.cryah.com.br
cryah.com.br
cryah.com.br
clube.cryah.com.br
cryah.com.br
materiais.cryah.com.br
sni.cloudflaressl.com
www.cryah.com.br
materiais.cryah.com.br
materiais.cryah.com.br
www.cryah.com.br
sni.cloudflaressl.com
materiais.cryah.com.br
www.cryah.com.br
sni.cloudflaressl.com
cryah.com.br
materiais.cryah.com.br
materiais.cryah.com.br
pages.rdstation.com.br
sni.cloudflaressl.com
materiais.cryah.com.br

Certificate

The complete raw certificate details for www.cryah.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMaw2HhNIKLj5cl/5X96
5STmqBq2yWVeqRbZ/Tczop5rBkEJW8vcBW9lchTWzGK5fNlnL5Lr8Qj/bNXacbdo
mmUKGqVzLkqTRzY/pI9KElrzfuEyc6LhI/Uhm7ZLVmOsYbiOOh9m0vr72OY8K/S8
UtmMd5vGrryIShrFwpIOQpjBS94a5/JwDKYgs39Ml3ZpXLdiBOxy7qJfFMwsWYh4
cDwT5bhMjoy35Ojuu1jAXGQzeG6k2E7pF7yv149Y3FldE3B8uY3kU4pECrRoi9Zo
Ezq8mDXKMwMBI4gyC0nNPVwypO+0Z0fuGGC8jNPfBD0AWJzx90CM8R6TL6P4Q6bZ
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15942308269499659832800628748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-09 18:37:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 18:37:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cryah.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24840685860034089667883785207227603649597067490693573902595459855961879652317673530071763744382122930440344175207935289862369459899834941460060735164321697262658761614093009426750624871293722653910806676591948102740284463404268682256657628351959561358201468544090876549143983973294309419045496864077501574025040455461729833392853231022910843777916438826131494655626452434546002411197894234160817306245064211110026483746880817425335400254897724397410573083574523242695381231198376239745424552417970757525259047440916189483971338491237460439651407281411732729557851175990305373826756680019648950015933446244961865882049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryah.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryah.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							407160aa1910bd34d2f81f752f51ba8850b78c85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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