juridico.linx.com.br

- Linx Sistemas e Consultoria -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 27:39:a0:f3:fa:39:8e:05:79:1e:b0:9b:67:4b:e4:e5 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Linx Sistemas e Consultoria

Organization: Linx Sistemas e Consultoria
State / Province: São Paulo
Locality: São Paulo
Country: BR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:39:a0:f3:fa:39:8e:05:79:1e:b0:9b:67:4b:e4:e5
Serial Number (int): 52139117271969111355632776644796343525
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 7a:15:fe:be:57:16:0a:e2:aa:76:01:64:c6:6b:09:55:de:ef:f8:67
Fingerprint (sha256): 95:a5:da:f4:f6:c1:aa:47:29:6e:70:73:ee:f4:9b:52:5c:d9:b2:23:bd:15:bb:40:ba:ad:2b:98:25:d4:2f:19

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate juridico.linx.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for juridico.linx.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

juridico.linx.com.br

Other certificates including the domain name linx.com.br

(limited to 100 certificates)
api-portal-pagamento-hml.fiscalflow.linx.com.br
www2.linx.com.br
sni.cloudflaressl.com
*.linx.com.br
webinar.linx.com.br
san-17-s13.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
overturstatus.allegion.com
*.linx.com.br
mkt.linx.com.br
webstatus.engr.ucdavis.edu
api-portal-pagamento-hml.fiscalflow.linx.com.br
share.linx.com.br
*.linx.com.br
x.linx.com.br
partner-status.verify.interac-id.ca
status.fringesecure.com
webstatus.engr.ucdavis.edu
x.linx.com.br
sni.cloudflaressl.com
status.madeinleander.com
sni.cloudflaressl.com
api-portal-compras-dev.fiscalflow.linx.com.br
sni.cloudflaressl.com
conteudos.linx.com.br
status.fringesecure.com
webinar.linx.com.br
conteudos.linx.com.br
sni.cloudflaressl.com
*.linx.com.br
webstatus.engr.ucdavis.edu
intranet.linx.com.br
webstatus.engr.ucdavis.edu
*.linx.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
api-portal-pedido-dev.fiscalflow.linx.com.br
sni.cloudflaressl.com
status.startlink.com.br
status.console.macrometa.io
apple.mide.homologa.linx.com.br
api-portal-pedido-hml.fiscalflow.linx.com.br
video.linx.com.br
overturstatus.allegion.com
x.linx.com.br
x.linx.com.br
status.madeinleander.com
api-portal-carrinho-hml.fiscalflow.linx.com.br
status.metaserve.cloud
x.linx.com.br
status.ahima.app
sni.cloudflaressl.com
x.linx.com.br
status.albania10.com.br
sni.cloudflaressl.com
*.linx.com.br
share.linx.com.br
api-portal-pedido-hml.fiscalflow.linx.com.br
standalone-stg.linx.com.br
sni.cloudflaressl.com
x.linx.com.br
juridico.linx.com.br
api-portal-carrinho-hml.fiscalflow.linx.com.br
api-portal-compras-hml.fiscalflow.linx.com.br
api-legacy-datalake.linx.com.br
status.startlink.com.br
*.linx.com.br
status.startlink.com.br
status-namer-attest.gtil.gt.com
webstatus.engr.ucdavis.edu
status.plantdemand.com
status.eicatalyst.com
status.fringesecure.com
sni.cloudflaressl.com
intranet.linx.com.br
status.startlink.com.br
api-portal-catalogo-hml.fiscalflow.linx.com.br
sni.cloudflaressl.com
api-portal-catalogo-dev.fiscalflow.linx.com.br
www.linx.com.br
*.linx.com.br
sni.cloudflaressl.com
*.linx.com.br
status.albania10.com.br
sni.cloudflaressl.com
auto-linxdmskey.linx.com.br
x.linx.com.br
auto-linxdmskey.linx.com.br
sni.cloudflaressl.com
status.tecfiscal.linx.com.br
mkt.linx.com.br
x.linx.com.br
*.mide.homologa.linx.com.br
*.linx.com.br
*.linx.com.br
x.linx.com.br
status.eicatalyst.com
x.linx.com.br
api-portal-pedido-dev.fiscalflow.linx.com.br

Certificate

The complete raw certificate details for juridico.linx.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+so7Hz6j8dqQs17HzVlL
5rBI4h+upsqUimN74dHEzF1pP5zGZgZn/jRGFOnjp5INbIjXKivjQ2hd5r0MJ3hZ
1CI669+JBaS4z2dVXBaJOdMm7+oSL9Eius02XCe1Pk7cXj9cmtRFk3Vd5Rqf77iN
Hb1TEHoiC676Y7NNl0b1EOawh1DIspo3y3sp27iLA7j0Oy+30o1auXRKPFurrh1j
qCcF17DM/70E9Fb8vjc8IXhLakJC2xTmvkee1ZNIFw7kb5zt72AtM+LBwziIk0ac
7IuKlFLxmutZ077yZZbLUeuoHJMexh7BtNSI4QGFzCCy8zBtd8K4dFOItuy54wUe
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52139117271969111355632776644796343525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'São Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'São Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Linx Sistemas e Consultoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'juridico.linx.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31659300037500499291737424493008084750986531171988485475229152406336462159453624766159937029174826115648681441162768921772646938025700521110035581008338304178585255787017933229677728590279025649658189706814478337945457850244904308310369853516619430394651668044577618785216919404771814805226591442080836676006256524772866430577818378932668241852991862191709111894863678975687367897551274971572502964496618160315175684548740968597561422510742363095926823542897169245485867327050930121245828821383289649450006593260496814675543788226930545705812055586305597219370091003976382058530841203745922766020861599326698444496453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juridico.linx.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008f2b98b358def385d6262b9f02204102f458d5c432a84ecd2e5855ca9cc921ec85a56408b52c6863310ad0079dd6c73041685109a9276d28c6579b79253d3592b71803102d2f378c42f6fc16a804486ced7ab58523d6d3f687241652115b6ee6c45a54fc2051165c4a5ad0ebf416ad1c6dee17b446230e4d6530e7165d89b5df6a38837014af1f1d1c1e1f69eabcd572c122100af22e27ed9b251110301427efde6ef27a1697276bb13fa16f7ecb5b3d7a9a39b32f8ed4f649e561afc84c317eeafc27c5985c141ca18e802c5663f2c08b5a5d00d3963ef4a3dd4453798361927bb9b0209ecec19de6a8cd1799cfb368f918d9507c78835348807b4b7a406b50