www.robbu.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5b:f4:e1:f8:28:0b:6b:53:dd:75:b1:09 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.robbu.com.br,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:f4:e1:f8:28:0b:6b:53:dd:75:b1:09
Serial Number (int): 28459180903865064716928135433
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: cb:2e:d6:9e:c5:e2:35:be:8e:3d:ea:03:9b:e9:a4:94:5b:fc:f6:6d
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 1f:46:70:f6:44:9b:d7:05:79:53:c6:8e:b8:6a:e0:56:d0:df:88:d4
Fingerprint (sha256): c0:df:5d:ce:98:bb:a5:16:41:16:1f:83:cb:7c:27:6e:fe:da:2e:cb:47:ef:f7:4d:b5:f3:65:ab:e9:1b:e6:62

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.robbu.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.robbu.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.robbu.com.br
robbu.com.br

Other certificates including the domain name robbu.com.br

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
robbu.com.br
robbu.com.br
robbu.com.br
robbu.com.br
tls.automattic.com
inveniochat.robbu.com.br
robbu.com.br
s.robbu.com.br
beta.invenio.robbu.com.br
robbu.com.br
invenio.robbu.com.br
invenio.robbu.com.br
robbu.com.br
campanha.robbu.com.br
tls.automattic.com
s.robbu.com.br
invenio.api.robbu.com.br
inveniocenter.robbu.com.br
invenio.api.robbu.com.br
directapi.robbu.com.br
eventos.robbu.com.br
campanha.robbu.com.br
invenio.robbu.com.br
campanha.robbu.com.br
tls.automattic.com
campanha.robbu.com.br
campanha.robbu.com.br
invenio.api.robbu.com.br
inveniomonitor.robbu.com.br
robbu.com.br
eventos.robbu.com.br
*.robbu.com.br
tls.automattic.com
tls.automattic.com
inveniomonitor.robbu.com.br
robbu.com.br
campanha.robbu.com.br
robbu.com.br
directapi.robbu.com.br
*.robbu.com.br
s.robbu.com.br
tls.automattic.com
robbu.com.br
tls.automattic.com
invenio.robbu.com.br
robbu.com.br
invenio.api.robbu.com.br
eventos.robbu.com.br
eventos.robbu.com.br
robbu.com.br
robbu.com.br
inveniocenter.robbu.com.br
robbu.com.br
www.robbu.com.br
inveniochat.robbu.com.br
robbu.com.br
robbu.com.br
invenio.robbu.com.br
invenio.robbu.com.br
inveniochat.robbu.com.br
robbu.com.br
robbu.com.br
eventos.robbu.com.br
inveniomonitor.robbu.com.br
tls.automattic.com
invenio.robbu.com.br
robbu.com.br
eventos.robbu.com.br
invenio.robbu.com.br
inveniomonitor.robbu.com.br
robbu.com.br
eventos.robbu.com.br
invenio.robbu.com.br
robbu.com.br
robbu.com.br
campanha.robbu.com.br
s.robbu.com.br
robbu.com.br

Certificate

The complete raw certificate details for www.robbu.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eAS8XHxABSH1utCc/bL
Tm4tbBDgLDXe9vZfXEqApn+0UNQ7T2RBPWFO7+rCvQbnBGSTItBoqpvORV3yYxJx
tnClZzFuQ0V07V8hIFVnW1L+CDnG1BVCupEZXI9OVSgbe4rp+itndNdDUAyViacH
5Hf0a6v91fDREZ/FQRCTe2VRq8t5x7xdmNMOnjL07gDXPpS9WaGw3SXmWwIkuQnT
wnI45zo72GRMPMhcmoRgOj3yk20mWKwA6BFE0fsXPj6k4hcR3Ya0CvkRXqu/h3CP
dWp3oewfAIoYxDPhU4VC06pqdFJGWk4m1I1rktQain/zf+fpOKHc7atwW/2zv9DJ
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28459180903865064716928135433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 16:51:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 16:51:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.robbu.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26999253963728605038490762532928165972718375239295356004190028110545808677116358531608715185801572099905740728301537631364357098407317975619798301639546347294785125092902011492707148672233265432670034893096291132507913183081286099777729543019444559580724596885535356104631804378178804371894464797627273558685001473411444609304252686035213208219607891188460660403565306417017494424131042489219305774891114055760656078832366718296181661353082639528063602158120349026928689301594678329045080481288450587998328567213172406767709876183370572333739521435667839457113378147728419129850310760172104583208274335730699263330799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbu.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb2ed69ec5e235be8e3dea039be9a4945bfcf66d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d42ebe33d83ded30056c340fbb3031349519fd9db372b5e017510ff14ba9a5c7c614e609a6fa4e429bd9e805632fa728ffa433d09ab0cba13f59dabdb26ae7e0141df59c7ed379e84b07c0a7e74d6bfd9ee946f20dad8478e37fb12f1cea080a3b5fd29a960c2f248188817d77089ece7327b431b701c4530dabcf7c9a433667abcc3aa5263f7e34c6e440c8d9e07640812094e0b4fff596721bca389eaa71fd2e6201a181b373bedce9fb86bdee81ae44b65b0ac54990536048edecc41827c90931f3f0c7dfc524571ee03d97498ecdec930d16d1e6ad41b11ce3373a987d55d614e737e6853167cd4d9bb5dcaa1674b32dbf02c5e003cb7577594f28011ffc