www.oppa.com.br

- Oppa Design LTDA -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 04:3f was issued on by GeoTrust Inc..

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Oppa Design LTDA

Organization: Oppa Design LTDA
Organization unit: IT
State / Province: Sao Paulo
Locality: Sao Paulo
Country: BR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3f
Serial Number (int): 1087
Serial Number lenght: 11 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): 7d:c0:ad:09:30:e1:a5:81:15:ba:b7:ce:52:fe:af:7b:04:db:ee:f1
Fingerprint (sha256): bc:31:eb:35:22:07:f8:74:c0:45:ec:1f:74:30:5f:ef:21:ca:18:b8:74:cd:42:2c:e7:19:81:af:98:8d:37:f9

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate www.oppa.com.br

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oppa.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

release.designeparatodos.com.br
master6.designeparatodos.com.br
master5.designeparatodos.com.br
master4.designeparatodos.com.br
master3.designeparatodos.com.br
master2.designeparatodos.com.br
master1.designeparatodos.com.br
cdn.oppa.com.br
secure.oppa.com.br
www.oppa.com.br
oppa.com.br

Other certificates including the domain name oppa.com.br

(limited to 100 certificates)
blog.oppa.com.br
azion.com
ssl371039.cloudflaressl.com
m.oppa.com.br
secure.oppa.com.br
blog.oppa.com.br
azion.com
azion.com
incapsula.com
azion.com
azion.com
track.oppa.com.br
blog.oppa.com.br
azion.com
azion.com
busca.oppa.com.br
*.oppa.com.br
ssl371039.cloudflaressl.com
atendimento.oppa.com.br
azion.com
incapsula.com
incapsula.com
azion.com
azion.com
static.oppa.com.br
azion.com
azion.com
ssl371039.cloudflaressl.com
azion.com
ssl371039.cloudflaressl.com
azion.com
oppa.com.br
oppa.com.br
ssl371039.cloudflaressl.com
oppa.com.br
blog.oppa.com.br
oppa.com.br
busca.animale.com.br
ssl371039.cloudflaressl.com
azion.com
azion.com
secure.oppa.com.br
azion.com
pesquisa.oppa.com.br
track.oppa.com.br
incapsula.com
azion.com
oppa.com.br
busca.animale.com.br
azion.com
azion.com
azion.com
azion.com
pages.falconjobs.pt
oppa.com.br
azion.com
azion.com
ssl371039.cloudflaressl.com
azion.com
azion.com
azion.com
azion.com
blog.oppa.com.br
blog.oppa.com.br
azion.com
www.oppa.com.br
blog.oppa.com.br
mkt.conquistadigital.com.br
azion.com
atendimento.oppa.com.br
blog.oppa.com.br
azion.com
ssl371039.cloudflaressl.com
atendimento.oppa.com.br
azion.com
m.oppa.com.br
azion.com
dev.oppa.com.br
azion.com
azion.com
azion.com
azion.com
ssl371039.cloudflaressl.com
incapsula.com
lp.erasmusmais.pt
azion.com
ssl371039.cloudflaressl.com
azion.com
azion.com
azion.com
*.oppa.com.br
azion.com
oppa.com.br
www.oppa.com.br
busca.oppa.com.br
azion.com
valida.oppa.com.br
azion.com
azion.com
atendimento.oppa.com.br

Certificate

The complete raw certificate details for www.oppa.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VN4P+3p56lS7LqJsrkE
K7MZKKlimpdA4zzp4OM56PAxDfjrVBbVOeyVi1QFUEEgdeGcLIn+c7460FC+1nUK
sL9jhAA+A0UMbdYBi+2YVEfQ3mPTav9uHxDCW5iZmAZJt/J+CQdumOpxK7CPIAsm
5hAf26WlhwF9Ts9KSh9l70F7VKW65JgAi9kMOuFZqt9OMW2DAL04Vmd2ChwOxzGE
aMKVxmnmzlduCqRlHPncy6lDEW0DVAluHlIhBdMDHYdNMGZo8Ex2hvhOj98rirXP
yLsl6P5+CV58a1N6x8AYOVH743CMU2lHcmDOVSrzdQ+tMZiT/dC2V+AP1C0C0+rH
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-17 11:23:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-20 10:35:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oppa Design LTDA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oppa.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27434872633342306851026779076461427218975309356346042323974904449358393598507792660358421419505284150180522212058176036440568406439196435168821645093998954536551472734849911005595305665390991042568340140465173407265378808708115079011881488654598822571046829939825121588298766523999977204080609050992146547407830561622604044500609170462340229350673568334185868073338258354970101392586170994951398632855269992792624798460170388937497999752503628180740263722358184361585857735566904222231885548662127706718216531764652692033686034657316613706706625105288078994549060640658892971654177230871954603125445125434883273574367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release.designeparatodos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master6.designeparatodos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master5.designeparatodos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master4.designeparatodos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master3.designeparatodos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master2.designeparatodos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master1.designeparatodos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.oppa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.oppa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oppa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oppa.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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