closecare.com.br

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 13:9a:4c:a4:50:24:90:0f:0e:18:2f:38:10:3d:52:a4 was issued on by Google Trust Services LLC.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=closecare.com.br

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 13:9a:4c:a4:50:24:90:0f:0e:18:2f:38:10:3d:52:a4
Serial Number (int): 26056500117479297319973656028967162532
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: af:98:7c:f8:ba:9c:69:fa:3c:ec:49:77:b0:de:29:68:8c:da:21:c0
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): d4:1c:25:f7:20:f4:0e:ff:d9:6b:30:c5:38:a4:9c:70:2c:c6:ba:80
Fingerprint (sha256): ba:2c:62:3b:0c:b1:45:15:b0:d3:a2:c0:af:94:d3:36:fb:29:cf:7c:ad:24:24:4f:47:ed:d3:d5:5a:0f:b4:77

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/sQ47tlHWze8
CRL Distribution Point: http://crls.pki.goog/gts1p5/N872v9Ue4Zc.crl

Check the revocation status for certificate closecare.com.br

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for closecare.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

closecare.com.br
*.closecare.com.br
api.closecare.com.br
bff.closecare.com.br
app.closecare.com.br

Other certificates including the domain name closecare.com.br

(limited to 100 certificates)
empresa.closecare.com.br
closecare.com.br
beta.closecare.com.br
grandpal.app
closecare.com.br
tls.automattic.com
first.closecare.com.br
tls.automattic.com
2017.tag-der-sommerfrische.de
tls.automattic.com
closecare.com.br
closecare.com.br
closecare.com.br
tls.automattic.com
tls.automattic.com
empresa.closecare.com.br
catdeck.store
metabase.closecare.com.br
dev.closecare.com.br
tls.automattic.com
closecare.com.br
closecare.com.br
tls.automattic.com
closecare.com.br
www.nearestschool.com
closecare.com.br
www.closecare.com.br
system.datakora.com
tls.automattic.com
login.mybrand.site
avalancheesc.com
app.youkno.ai
closecare.com.br
web.tiss.app
phillipichurchofchrist.com
closecare.com.br
fitgram.app
tls.automattic.com
closecare.com.br
closecare.com.br
tls.automattic.com
www.longpham.ca
closecare.com.br
closecare.com.br
app.closecare.com.br
tls.automattic.com
alpha.closecare.com.br
yasin.io
gemcard.life
www.kiranbose.com
www.closecare.com.br
tls.automattic.com
tls.automattic.com
gcdcblr.in
blog.closecare.com.br
www.bildx.studio
closecare.com.br
www.closecare.com.br
closecare.com.br
www.gastodiario.qtg.com.br
app.closecare.com.br
closecare.com.br
tls.automattic.com
emojoy.app
limestreet.co
share.ent.sdy.ai
www.longpham.ca
www.closecare.com.br
tls.automattic.com
cryptoport.biz
pich.co
closecare.com.br
closecare.com.br
commitments.csforall.org
tls.automattic.com
closecare.com.br
www.nolascape.io
www.bukbot.app
www.closecare.com.br
coronavirus.closecare.com.br
cwar.fr
tls.automattic.com
ukiku.ga
tls.automattic.com
api.closecare.com.br
tls.automattic.com
videos.videomusica.es

Certificate

The complete raw certificate details for closecare.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqwUquymvIYMQJ5BgXel
ep/gpNrEZH5iwiuEBZLDmHA5fe0q3cVWaXCRGQ24YKALfj8QYt9Gsw+nvPgX3CPA
QHknfjgPBYK09ELCcpCunzwOlQuhnNFxTN0DyGKNPSCAqYMKWwQsvqeUpbbAGX5r
47/7bihPQZI1ms6JL5694UpT0gIdcpy6yRfKYq8EIOnPSHI5UmLNyBmF4xKIZ/Lx
QHCB5cJjERLbolYUTZTiIzcRL2wW7c12Innyo02Ils3z2MB0jJ8OMaAa/rwlTo2v
SJ4K3ffG1m3KrOFJ4I+fkVkhhgFoe5QD8v9HubcUb2p2pIf07OXDgN3eD669O4Gb
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26056500117479297319973656028967162532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 15:15:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 16:12:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'closecare.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20030508356761549750129594440333728673881654519675971493565307600311222505643567418217803861938232491782547189552417617983327575072041843261673543734557178956565335494303678831199048177063332730692657045685568903354583888614267690541831840697364016646654008951833285580632099236130869662628596850988661350342457860873342952877387449999399616245302452249365791468607972871320891697409559912421038439437838199671480831868622185187603302992040504091786147816248933854545788326627394274760371579999498599823864738739994955514871648216750426346816962845149093602143017108973145711662435710295314661299918972401791226977187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af987cf8ba9c69fa3cec4977b0de29688cda21c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/sQ47tlHWze8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closecare.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.closecare.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.closecare.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bff.closecare.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.closecare.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/N872v9Ue4Zc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e90254008000004030046304402202acb43200cec982aa0fb44baebb57efa04226f214ebd683accdec566cdec4a2b02200e02d2e68fc836f2eba71127ac35d844d339e24a3f05a9e053c4eaf39bc8f854007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e90253fd00000040300473045022100b606185e5b7147929701fdb2f4df876d4e0add7058bdb868d0773ff08b647a9d022019169a17461493a695b0a63248a0a25706f39d817b513f07ea7e5f78a923a473
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002009a4711f043106d7194f67ca7c8cf332c28a7f0d99bfa108fc9911ee3306fb511b0241bbdfe23928ffd607fd5d6b80613e21f826d320ed035960028f6cb20e93d5893dd4ea7540ee32c2e88dd97dc69521493d6e867eb806828ce0ab104b65af61be130e99267f94831c775cec96ba8d6e59eb41dc52331e54e5eedfb022817a885398ab7f179029ca44b0c2088530aabeb1f4551ed187939d1edf66f1830ad3560916a442a13f71445e9ab8f68fbb0f14789b157c66906d04cb841c50e0ca7afdcc4dc88a1b6d5609387fd99d404cc523610e73e6bd72cd92e51b7c7d371a33fb0996f09a9fae3b11b32d49020a57e12413ddc4f642d9f0e5b7d6c8c79abc