www.detetivefelipelacerda.com.br

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 14:79:94:d2:fa:e4:08:ba:31:ef:fa:f0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.detetivefelipelacerda.com.br,OU=Domain Control Validated,C=BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:79:94:d2:fa:e4:08:ba:31:ef:fa:f0
Serial Number (int): 6336683022734576091099298544
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: da:35:4c:eb:be:c2:fd:3a:5d:77:b4:0b:9d:e3:23:08:95:c5:df:b7
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 74:c6:a7:05:37:56:22:ec:85:a4:23:fe:ef:a6:aa:31:6e:ed:7c:e3
Fingerprint (sha256): e5:4f:7b:f4:c3:a5:59:bb:d9:57:7b:0f:f0:81:a7:11:3b:43:7d:91:e2:6e:c2:c5:a5:ca:1e:0b:b6:8e:20:b7

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.detetivefelipelacerda.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.detetivefelipelacerda.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.detetivefelipelacerda.com.br
detetivefelipelacerda.com.br

Other certificates including the domain name detetivefelipelacerda.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.detetivefelipelacerda.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6336683022734576091099298544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 15:36:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 15:36:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.detetivefelipelacerda.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686702025799333542190926234807117764777895378887392343231635394238976008655789986686499432710831405344741604140331179047281658275484901087199105848385942081866015391416428240957607037906451343232335967182159819160857200564237840003372247227996336845337049429534004708111194824748682361103040851608122143829047132159207580861267552460640763280119934458281451038371100445350705853704601978358045903032852615689585500285455107549523500230475630683244595913256244568548040542465991910187402333697821551868392703336756593038165053959921185275856985839363931200281509146926324461471749303619827620831314555643604625676869061950342377547643163478230668560434643536228567175421257662396466659580115321175631504553784183059211779143200288386890349302669998983146550428600915080213381111933250076500865140658041798054512113826002794790018011075515797753742220346631783128415381947077832408167608161147526436864759193080117275046919069954793212884283819482501574078840236580411746072647376973595730061614372037492360521569742462654707358659498295146063467629844934946776197842124329078653651085905004513973448635140385681918504916375881599347474380706780517522736766180450969086972691815854084678588253454823459967154315613230832451030133989251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detetivefelipelacerda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detetivefelipelacerda.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da354cebbec2fd3a5d77b40b9de3230895c5dfb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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