wwws.banestes.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4e:b8:70:32:03:ca:84:ed:43:89:95:c6 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wwws.banestes.com.br,OU=Domain Control Validated,C=BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:b8:70:32:03:ca:84:ed:43:89:95:c6
Serial Number (int): 24362802944530469096404915654
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c5:30:48:bf:5b:17:8a:a1:c9:48:d9:cf:c1:bf:72:a5:4b:f2:a0:6a
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 2e:b2:bd:be:a5:e9:2c:22:2b:f4:27:69:c3:7e:18:f8:99:67:a6:03
Fingerprint (sha256): ab:d2:52:81:7e:9a:f3:73:bd:fe:e0:4c:5f:43:9e:fb:5f:42:01:54:ed:40:a3:09:ae:8b:c2:ef:35:ec:18:27

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate wwws.banestes.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwws.banestes.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwws.banestes.com.br

Other certificates including the domain name banestes.com.br

(limited to 100 certificates)
portalinternet.banestes.com.br
www.banestes.com.br
mail.banestes.com.br
*.banestes.com.br
www.banestes.com.br
gerenciador.banestes.com.br
av.banestes.com.br
portal.pix.banestes.com.br
www.banestes.com.br
wwws.banestes.com.br
av.u.banestes.com.br
seg.banestes.com.br
portalinternet.banestes.com.br
svcpiprapl01.banestes.com.br
banestescorp.banestes.com.br
www.banestes.com.br
seg.banestes.com.br
ws.u.banestes.com.br
wwws.banestes.com.br
wwws.u.banestes.com.br
wwws.banestes.com.br
seg.banestes.com.br
seg.banestes.com.br
wwws.banestes.com.br
banestescorp.banestes.com.br
misp.banestes.com.br
portalinternet.banestes.com.br
seg.banestes.com.br
seg.banestes.com.br
wwws.banestes.com.br
misp.h.banestes.com.br
ws.banestes.com.br
www.banestes.com.br
*.banestes.com.br
www.banestes.com.br
wwws.banestes.com.br
portalinternet.banestes.com.br
depositojudicial.banestes.com.br
wwws.banestes.com.br
seg.banestes.com.br
chat.banestes.com.br
wwws.banestes.com.br
ws.h.banestes.com.br
seg.banestes.com.br
www.banestes.com.br
portalinternet.banestes.com.br
banestescorp.banestes.com.br
depositojudicial.h.banestes.com.br
wwws.banestes.com.br
*.banestes.com.br
portalinternet.banestes.com.br
sisjur.banestes.com.br
wwws.banestes.com.br
chat.banestes.com.br
*.banestes.com.br
seg.banestes.com.br

Certificate

The complete raw certificate details for wwws.banestes.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy4Iq9uCTWLAfpzVS8z9
+heZMWJ08UmN3PgPTbjaxZBMxxomQdpCiAfOCKt5iAI4dogjG3fV1Q5VEcFsaYPr
EST/JGoUgr6L2bz8AG5DDO2m2VzgZcE0G+jac7uHa7UJof+I+wG756qCrrDayy73
Dej7MsSpizeBlUZRMZcGrIGH5ThoWezXTLHj2JjkiYjg8dx7ujHhWZMiAzq8kZqP
Ap4KxraJyCqMikoTjpLH5xWC1S487AbChYK0gFG+nQJxe1/k0e5yBl1EFUkBECeP
tpzXCubBvHGjUxFZDR8c+WCAJaisLMlrS2GU0LSJKKol1EyfDvRBVSFyYX+VwVow
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24362802944530469096404915654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-01 18:14:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 18:14:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwws.banestes.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25649076056605240489842185438839133247767851253449631202570475107624062319109295119774640033185150833793612579045458271875459212317482836783099017971775763426481029673093871717063504517928801087494882272055054987540536709155174035317751969896918163365556220584535807036537947004553798245613992275316264550726890459138148093626860737994918289542234385115030540910799859363220515412670145066383438553978620423486561640072284360845391809603262383099845388559220003156963555858021729871805548565626845367263923762027525414904434184377113439845806741500283898563078679746296042505299595361154412611057012520028567989006497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.banestes.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c53048bf5b178aa1c948d9cfc1bf72a54bf2a06a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							0259007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015821193ddc000004030047304502206829d7683fe1c84043e6d86ff0f35a52b25ef3e917ff3bf0ac268a94617ac0f2022100d1d69d75ec55d44919cd2e0b39782a4cfbd18d357048878dfd911adbc9372e070076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000158211940820000040300473045022100bdc1e664c787b83116122baaee41fd0f619af6def1b4d7fb8277b20e03062f8802204608f430b98f978d4804828893a8735273c6d91b1da5a4f3ac225dc168b44fa800750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000158211940ca000004030046304402205b846c3746d45d67bdd997daa3ba6ede182a13681d7da4a8037cfe82a3a19bda02207e4dff3beae04ee5b51f1044ce9e920cf96fc3e5337b76bc94471b10e644f899007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000158211940f10000040300483046022100b25b84bf78694c87fad41270fa6fdef541148f303b23d6bec5fea934e4b43a86022100abc19c603764bc445adbe4a06cd9094edd2d25992fb26294b06d2db359342b11007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000158211943f30000040300483046022100ac85972c618810c214376712ec321055973d847ef4987804a90ecd97f917d943022100ceb7d31dba1d289b4327375bd33760f536e2cc689be487567157fa8e4a5a7b38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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