www.nossaseguros.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 02:8e:36:c9:eb:08:58:69:3d:64:06:7b was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nossaseguros.com.br,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 02:8e:36:c9:eb:08:58:69:3d:64:06:7b
Serial Number (int): 790896218549484864470779515
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: ed:f3:c7:db:54:99:a8:0b:e5:af:42:7e:c7:60:3d:ce:32:fd:27:be
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 13:19:13:c9:26:f5:11:af:48:d1:e7:e7:77:02:e9:e5:cf:74:cc:23
Fingerprint (sha256): c2:79:65:53:62:5d:f0:ae:41:67:04:5e:eb:fd:1e:1e:f1:60:18:18:28:53:c2:ca:e6:1d:a2:ff:c3:44:b7:b4

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.nossaseguros.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nossaseguros.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nossaseguros.com.br
nossaseguros.com.br

Other certificates including the domain name nossaseguros.com.br

(limited to 100 certificates)
www.nossaseguros.com.br
pet.nossaseguros.com.br
www.petnosso.nossaseguros.com.br
pet.nossaseguros.com.br
whatsapp.nossaseguros.com.br
alexvanston.com
www.app.gonerocket.com
www.infinittag.com
pet.nossaseguros.com.br
nossaseguros.com.br
crew.stanpass.com
www.innovationcloud.com.br
innovationcloud.com.br
www.nossaseguros.com.br
sni.cloudflaressl.com
nossaseguros.com.br
homeofficeprotegido.nossaseguros.com.br
www.nossaseguros.com.br
link.busykid.com
portal.tactilebrain.com
nossaseguros.com.br
whatsapp.nossaseguros.com.br
www.nossaseguros.com.br
nossaseguros.com.br
planoodonto.nossaseguros.com.br
www.nossaseguros.com.br
www.pich.co
nossaseguros.com.br
nossaseguros.com.br
www.fongbi.com
nossaseguros.com.br
pet.nossaseguros.com.br
sni.cloudflaressl.com
www.nossaseguros.com.br
nossaseguros.com.br
www.jobcolab.com
www.nossaseguros.com.br
nossaseguros.com.br
donate.craxic.com
nossaseguros.com.br
www.nossaseguros.com.br
lax-api-qa.itxi.aero

Certificate

The complete raw certificate details for www.nossaseguros.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 790896218549484864470779515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 17:53:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 17:53:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nossaseguros.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900667835588058557119677613589567817933463265824451697034108931901683138584359608194097836663936381701017389169577112812190717698163101811795249437786567616550726393242878154994781930610911961025537770778185638673670962354549284615600545977925608655531103761346702968714938129204736702169609811112302472316459643909854152179559850814797275886827734595855553831495335457105719084092536969586089422588206286464848576892995880677104446122110818707119758916335708838672120240802682124669254611381643987106585811445017892632822812293477268790536643525178540394420104572607365605106345476642388045368026755676735904061300111944763718449167948563900683761399562202690742304420972156682190252490722225012975006128560080971802264957480934003319509870039373110303920068403047568311784298613404849657663227633245242046840290347665830003966529808505420749549819783728446755469915946343511141389145140149344798138369875796978728974887718444166470945311525715358233423079925359120199790599588378846636588282263457513499316209411032109318352366956251631131518812468642689151187873136521730283430280411829909390781097525761602417136388707241359782855416802063817064087622213459967933641352615690019070229760711302449936886323453780113700408166463061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nossaseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nossaseguros.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edf3c7db5499a80be5af427ec7603dce32fd27be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168d88a99a2000004030046304402204fed7636e8a352364277ba71120283c6f84a147745cbdf1aef7662a8413624b302202b4c1d1f5df2b7fec935cc17c6bec87354e05cd9e05cc5daaeec31a4fe7885d6007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168d88a96760000040300473045022100db2e9c367f2f03a814231bc9d973549566dfed2ce8dea92490896d79ed48c31f0220283ccf7cc4637734affd26cb8b8faed55878669dece6a5be507099b7114e689d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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