netsales.netservicos.com.br

Issued by TrustSign BR Certification Authority (DV) 2

About this certificate

This digital certificate with serial number c9:02:3f:a0:61:d3:53:c6:fd:c5:e6:7b:44:dd:a4:8a was issued on by TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=netsales.netservicos.com.br

TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda.

Organization: TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda.
State / Province: São Paulo
Locality: São José dos Campos
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): c9:02:3f:a0:61:d3:53:c6:fd:c5:e6:7b:44:dd:a4:8a
Serial Number (int): 267186502245071717374221842229200004234
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9b:d8:39:0f:68:52:2d:7e:8d:5d:67:5c:2d:3b:0e:95:bd:b5:7b:d5
AuthorityKeyId: 81:91:b6:27:2c:f2:a7:6f:8c:ff:cf:1a:1a:76:25:4b:7e:74:15:0e

Fingerprint (sha1): 13:c0:1c:fa:79:f2:79:ac:e7:3b:cc:f5:26:d7:c5:63:7d:95:a3:4c
Fingerprint (sha256): cf:72:ce:58:28:41:fa:c9:10:7a:76:bb:a4:69:aa:0b:6b:70:f3:b8:5c:32:8c:4c:72:30:b2:2f:e6:d6:9d:b3

Issuing Certificate URL: http://crt.usertrust.com/TrustSignBRCertificationAuthorityDV2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustSignBRCertificationAuthorityDV2.crl

Check the revocation status for certificate netsales.netservicos.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netsales.netservicos.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netsales.netservicos.com.br
www.netsales.netservicos.com.br

Other certificates including the domain name netservicos.com.br

(limited to 100 certificates)
webmail.netservicos.com.br
acessoct.netservicos.com.br
webmail.netservicos.com.br
atlas.netservicos.com.br
iqr.netservicos.com.br
iqr.netservicos.com.br
*.netservicos.com.br
webmail.netservicos.com.br
acessoct.netservicos.com.br
netsales.netservicos.com.br
acessoct.netservicos.com.br
webvpn.netservicos.com.br
appcitrix.netservicos.com.br
*.netservicos.com.br
updateasc.netservicos.com.br
vipmail.netservicos.com.br
vas.netservicos.com.br
webmail.netservicos.com.br
batatlas.netservicos.com.br
updateasc.netservicos.com.br
vas.netservicos.com.br
iqr.netservicos.com.br
batatlas.netservicos.com.br
iqr.netservicos.com.br
webmail.net.com.br
webmail.netservicos.com.br
webvpn.netservicos.com.br
vas.netservicos.com.br
vas.netservicos.com.br
netsales.netservicos.com.br
webvpn.netservicos.com.br
*.netservicos.com.br
netsales.netservicos.com.br
updateasc.netservicos.com.br
webmail.netservicos.com.br
vas.netservicos.com.br
webmail.netservicos.com.br
correio.net.com.br
webvpn.netservicos.com.br
*.netservicos.com.br
atlas.netservicos.com.br
*.netservicos.com.br

Certificate

The complete raw certificate details for netsales.netservicos.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoldH59nquR0gXsqI5Ipz
Vu5sHDm4KngXrFevn37mV4TOBZyt09fDIIG+EOlYluCXM5apcU34p9NaDGQMVd/6
ntFTa1bMwILhiqoybA6ucYS/yAgiH3MpfsaffRCVFVKzQGo62jIO1zd+aVHgN30H
ydtilQQ2Jo340o5ORXMy3EBeblxv74Z/4KZ82J91BJb9ffbSF0Btz5J9T05AwPeT
4BHJaWKxVMZ3pnm6dgeYdOUp62ng5CEtNhRNbrl+8uPRFe0SNXIXpa1nrS7yKqgv
NIRLhZJrXFFRrFMK7kYkUPlF9Rcvgs5Ws9FSZZOyCSRDQM3zFN4CR9X4HnSz0Gqr
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267186502245071717374221842229200004234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'São Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'São José dos Campos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustSign Certificadora Dig. & Soluções Segurança da Inf. Ltda.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustSign BR Certification Authority (DV) 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netsales.netservicos.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20493645211294147690428625138589167289723807585051553656519888962234611739211789891267626669077925019774830198232554106278874747113435276171636532790642905266194547652891622141593655688952931599169284948866413795577307866236827463677844253277206619631466129335596057409035082405143888587954516779270867169615285800181072980976494203603891995923429970881750684493371019787185046813864798343188847804098942109978868438119048497432215715408518854677998268019276887015110891675004436839251765972184873487886152416459380798528593169956269859574285755202396667513714001635705398241286053691282456111168416380969831788882751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8191b6272cf2a76f8cffcf1a1a76254b7e74150e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bd8390f68522d7e8d5d675c2d3b0e95bdb57bd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.38
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustSignBRCertificationAuthorityDV2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustSignBRCertificationAuthorityDV2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netsales.netservicos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netsales.netservicos.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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