biokybernetik.com.br

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:52:eb:1c:58:e3:04:62:96:13:70:fb:ae:d6:2d:c8 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=biokybernetik.com.br

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:52:eb:1c:58:e3:04:62:96:13:70:fb:ae:d6:2d:c8
Serial Number (int): 11064360920833719124112886333596642760
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 25:7f:4b:95:f5:92:b6:fa:bc:35:63:56:ed:dc:c2:b0:b5:be:f8:21
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 37:10:8b:ea:32:ec:3b:74:67:f8:cf:83:ff:fd:b1:dc:6b:cc:52:5a
Fingerprint (sha256): e4:b3:99:87:de:63:3f:97:67:90:23:42:f5:57:f8:63:a9:6e:d2:eb:b6:e4:39:11:bd:fe:39:a6:f2:41:47:e9

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate biokybernetik.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for biokybernetik.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

biokybernetik.com.br

Other certificates including the domain name biokybernetik.com.br

(limited to 100 certificates)
biokybernetik.com.br
cursos.biokybernetik.com.br
davidbacisin.com
biokybernetik.com.br
yarb.iolace.com
biokybernetik.com.br
homolog.biokybernetik.com.br
yarb.iolace.com
biokybernetik.com.br
www.biokybernetik.com.br
biokybernetik.com.br
loss.gg
quantacarbo.tk
frogo-ad.com
www.biokybernetik.com.br
northernconsult.dk
www.go-leaf.com
preview.lvlp.io
davidbacisin.com
biokybernetik.com.br
www.biokybernetik.com.br
go-staging.hivemetric.com
alexalbadree.com
quantacarbo.tk
cncpts.io
biokybernetik.com.br
forum.biokybernetik.com.br
darwin.hullo.ai
www.graphology.app
biokybernetik.com.br

Certificate

The complete raw certificate details for biokybernetik.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHaS9MFtU8BRNbCp/TIa
8tUdDM3gFB4L72A9+jYsYgI6SLDNiSPXCpQFhXmslw1qOf5SA++Ag/ndxOsp9giC
xYBBsMEpuVFyHuzyVBFs0Ya6Ta92cUD4TmiUJJ9yBY4CqnRrxY1w2FzpTwMmPGND
VOoqaOnR9jdVUInmViDIcg/qZK3f6sPcfAS8FAsKAkJrNsgqDz2/xROKe7h19NeF
Gr7niiEg1oQ3RrsU7Fsuf2jYZhXzcQfVClxBbyHig3dK92ujUjsgV6baERjpfSnw
83PEY+/opEFkrAPhQbvPB+5sxx/k2P+E0Db0oFbM23ThMjgoAs31m9UO+xtYqDOo
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11064360920833719124112886333596642760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'biokybernetik.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24296225595390173993713992282093849252613458628805964765112410855302425568223350072755539515770189124293883193877564820609981344479622258730565981408265212552466678663203472306621718231613241009527792518715261469229499755273351566799009390974340040979012737793186427108420941727417095317707112182840377059152667684180104111069113479161280055409688808803062226771615449164182075111921284708637139965057259458431016265259110768786673653924504376481942167425756257523638694223729358444161374637034938769310579792602254947794399770823079727978681241239733103364870643154659243197910547651984401066391176390323259047127277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							257f4b95f592b6fabc356356eddcc2b0b5bef821
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biokybernetik.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d44c6e58d0000040300483046022100d27b7896e9616191c4ab4e51613f0848da1f592bb531de3776b87f36b0e96265022100ae9f39c09e093571b43e88764c15c921bac6e974e49b98d0a7be092560cabad200750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d44c6e560000004030046304402201d3f5b3d1e7e84be6e60aa66798eb0817a46cabdcd4def6ac810d7fabcf82152022001dcc4a5c56fa510a0f458d65be1bf1445fe0ff9cf0db1d0fe3b01b25aca2582007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d44c6e5440000040300463044022073c129cac1501ab483fe00eeef4706a0e24130fa38e1aa0dce0be0ce2445360e0220487e528b710d2ac9e0461980527d0ab346a448831804e053f2c5cceb32be5f93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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