*.jornaldotocantins.com.br

- J.CAMARA & IRMAOS S/A -

Issued by Soluti CA - OV

About this certificate

This digital certificate with serial number 68:00:31:53:de:a9:44:e3:4d:70:16:5e was issued on by SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES S/A.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

J.CAMARA & IRMAOS S/A

Organization: J.CAMARA & IRMAOS S/A
State / Province: TOCANTINS
Locality: PALMAS
Country: BR

SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES S/A

Organization: SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES S/A
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 68:00:31:53:de:a9:44:e3:4d:70:16:5e
Serial Number (int): 32186673964501736768417044062
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 77:3b:6e:9b:4c:e4:dc:56:56:84:85:f2:41:1a:b4:e6:7c:d0:13:da
AuthorityKeyId: 89:74:0b:bb:b1:51:75:11:93:ee:4b:4b:20:ef:61:6e:b8:a1:07:e6

Fingerprint (sha1): f4:85:b2:b5:e3:2b:64:1f:1e:65:85:4b:48:e7:6c:49:09:c5:05:d3
Fingerprint (sha256): b5:64:98:f7:fe:40:c0:cd:b5:44:bc:a4:4c:03:00:7a:84:2d:1a:8a:40:26:9d:bf:d6:0a:63:8d:f2:1d:12:f6

Issuing Certificate URL: http://secure.globalsign.com/solutiovsha256g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/solutiovsha256g3
CRL Distribution Point: http://crl.globalsign.com/solutiovsha256g3.crl

Check the revocation status for certificate *.jornaldotocantins.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jornaldotocantins.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jornaldotocantins.com.br
jornaldotocantins.com.br

Other certificates including the domain name jornaldotocantins.com.br

(limited to 100 certificates)
russia2018.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
*.jornaldotocantins.com.br
especiais.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
especiais.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
mail.ojc.com.br
especiais.jornaldotocantins.com.br
*.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
mail.ojc.com.br
eleicoes2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
especiais.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
especiais.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
especiais.jornaldotocantins.com.br
*.jornaldotocantins.com.br
mail.ojc.com.br
*.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
*.jornaldotocantins.com.br
russia2018.jornaldotocantins.com.br
cdn.ojc.com.br
www.jornaldotocantins.com.br
mail.ojc.com.br
store.jornaldotocantins.com.br
eleicoes2018.jornaldotocantins.com.br

Certificate

The complete raw certificate details for *.jornaldotocantins.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49qXKaegY3fb64Rk0CGP
ze024KoRa8qSmpb1miEaVGBefQvMPwZ9y7GuVp4YLc3MaY2gBCsVQtGVV6U6BEeq
v2X45VVjq0W2eA2ymucSW6SYdmWv+3Lhiv6FOWLAHi57E0FVhqT8bIJHvItZV2SX
Vj4Jy5w3joUfejd04gnhoGWhhhW1NaKoXmQygX1iBzfSM5CWHywFOy2g1tCxXmoG
P377mIXs6ZptUDiLXGRJa3NKXX0DnHfmVfcfwNF9Br+3jUkNQtHN5dHUoBlGbV5p
mGogxj5//WbYngGH3fuvhGFkxWxbqh24DXSTp4m+PublMngLjwqQAFCX9b+JPmt0
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32186673964501736768417044062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES S/A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Soluti CA - OV'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 13:11:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 13:11:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOCANTINS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PALMAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'J.CAMARA & IRMAOS S/A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jornaldotocantins.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28763886210088561686735082756521059315447860934877412255917802343589496267284060834574070797273083888230763060327060497418884836393931278790746639724365857807521030178364505625351052624136150979179192246861212061090535740406639914900774739300327061224210578701467599872487670056973584074369613138032223457746169414451265245457793435446948211823233380895280288139512189808958793613379876943589967169940253448548457326149238676017008409112482033808709546917825762084356141626074426842097824826810880154521754116241219815506091535106434729754246284523542123874864481206297195880267876859615570020573420979629866804278437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/solutiovsha256g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/solutiovsha256g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/solutiovsha256g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jornaldotocantins.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jornaldotocantins.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89740bbbb151751193ee4b4b20ef616eb8a107e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							773b6e9b4ce4dc56568485f2411ab4e67cd013da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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