*.ubik.com.br

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 6d:3e:67:5f:60:9e:fe:ea:98:de:1f:dd was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ubik.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 6d:3e:67:5f:60:9e:fe:ea:98:de:1f:dd
Serial Number (int): 33809307634493424433199194077
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f1:26:06:39:4b:d1:af:79:64:f8:83:ad:ef:94:35:9c:e7:43:72:25
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): aa:41:b3:f7:29:de:22:7a:18:ed:a1:be:20:29:0a:13:06:f1:71:b0
Fingerprint (sha256): e9:e0:17:6d:f0:22:d5:03:97:fe:c9:10:a9:62:61:c3:c4:85:17:17:81:a9:09:74:b8:28:f4:87:72:68:84:40

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.ubik.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ubik.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ubik.com.br
ubik.com.br

Other certificates including the domain name ubik.com.br

(limited to 100 certificates)
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
*.ubik.com.br
tmms.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
cpanel.ubik.com.br
*.ubik.com.br
www.ubik.com.br
www.ubik.com.br
www.ubik.com.br
*.ubik.com.br
www.ubik.com.br
www.ubik.com.br

Certificate

The complete raw certificate details for *.ubik.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIMbT5nX2Ce/uqY3h/dMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMDYxOTE5MjAyN1oXDTI0MDcy
MDE5MjAyNlowGDEWMBQGA1UEAwwNKi51YmlrLmNvbS5icjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMej5iXT/aaKgQZHy6AJi1+qDeQvQ68z4ioI3wBA
qr0ZGOwpD+/iruiPCoxIi9W2W08qqBKuE5zBSMjgSTkSwoPq/ZJd1xyx7rukxEsR
t70XRtkgEDIADXwJtdGKyvi8PUNx0qXt/MRHjrQz4gzUJTiOj+qkwnQt2IXZC+4C
Y/O5unTv5kofYE6ipeyB6qJ09E2oXDcjw6YIOnfsoQVrICE+/SLjx/Bu8Gg3hXcJ
g13LyzW4txobXzFTcOY44dP5S5UJPGDyikxo36pCbQ9eZV6aifvfuGb2e+yZo94C
t1D3iWhf6euDA0ESVeKbq/Fk2PGRIEQDg46VQEWJcSczZScCAwEAAaOCA1gwggNU
MA4GA1UdDwEB/wQEAwIFoDCBkwYIKwYBBQUHAQEEgYYwgYMwRgYIKwYBBQUHMAKG
Omh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2FscGhhc3NsY2Fz
aGEyNTZnNC5jcnQwOQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24u
Y29tL2FscGhhc3NsY2FzaGEyNTZnNDBXBgNVHSAEUDBOMAgGBmeBDAECATBCBgor
BgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24u
Y29tL3JlcG9zaXRvcnkvMAkGA1UdEwQCMAAwQQYDVR0fBDowODA2oDSgMoYwaHR0
cDovL2NybC5nbG9iYWxzaWduLmNvbS9hbHBoYXNzbGNhc2hhMjU2ZzQuY3JsMCUG
A1UdEQQeMByCDSoudWJpay5jb20uYnKCC3ViaWsuY29tLmJyMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRPy6yowu+r3YNva7/OmD1c
WCV2FTAdBgNVHQ4EFgQU8SYGOUvRr3lk+IOt75Q1nOdDciUwggF9BgorBgEEAdZ5
AgQCBIIBbQSCAWkBZwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABiNUaAeoAAAQDAEcwRQIgSD9wSivIrMLTa7AfTsYtGbWnBqsAGBVVYnJwxiuD
QcICIQDiuNHCwFWNC/Q7Lk8i/oR/NUF+7xtKUdKZBw/8EowdHAB2AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiNUaA3AAAAQDAEcwRQIgbcE+L+mi
rISqIuSQ+wWjaYtbo/NQYD4tPz85ANSq4b8CIQDLP6HApxlvlORfjePKenYypz+0
V9vIlfvahg6I1G/VgQB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/ur
AAABiNUaAJYAAAQDAEYwRAIgUNWz4AoDwDZh7vsZQRhaANq6sMvOBd5fBcWRTLcr
1RcCIFmNMwOWZa1AZ6JBKeb1vNdcSy1oL5ueIk0vEb96ZR0zMA0GCSqGSIb3DQEB
CwUAA4IBAQBgr7LyDNZW3tToDFb/3BIChQonabfN1dqr7dG58O2bWX3OCv/UiouE
dkNNezyIvxBmT8ZfY99MNuEk5bD1SjyAYKgzgAgKA/UYordVz7U9zAc5UpXWyKzH
tvs5DYOHj33fp/Oz7hH3+TRzB1LT8VtpZOlOKTSuOR0D/U45zpsWE45ncd9jF6rj
wO+UO6d4yjFAWZaWZRBSXWBuhv2AMD/UC3MqHqtjxC1X2WrqLSr7nHw7Q/NynOjR
kUhZJOuTmHPHnqHbDEpUn1yAdvjl6zL8IMG8Jl2eSeAtQ/ZUWY26SxMAYwZb1ULB
9o7XqRNjAnl70nfpM8fuXm8EJlsg/mSf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6PmJdP9poqBBkfLoAmL
X6oN5C9DrzPiKgjfAECqvRkY7CkP7+Ku6I8KjEiL1bZbTyqoEq4TnMFIyOBJORLC
g+r9kl3XHLHuu6TESxG3vRdG2SAQMgANfAm10YrK+Lw9Q3HSpe38xEeOtDPiDNQl
OI6P6qTCdC3YhdkL7gJj87m6dO/mSh9gTqKl7IHqonT0TahcNyPDpgg6d+yhBWsg
IT79IuPH8G7waDeFdwmDXcvLNbi3GhtfMVNw5jjh0/lLlQk8YPKKTGjfqkJtD15l
XpqJ+9+4ZvZ77Jmj3gK3UPeJaF/p64MDQRJV4pur8WTY8ZEgRAODjpVARYlxJzNl
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33809307634493424433199194077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 19:20:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 19:20:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ubik.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25202244304662473106058629816859710863068829831796577330601497321601710670651208067060474657250902799042525421395689572565300940801258942129568286383034342140165578374003521107183105702440384403436958409784243958207029870804916759094692331698766381085080943623688410702891139904968795116975093619229275581782437536222824267738111463618086270185499753706641352375870281897004499650593632429760387752156550853188497174430330775101361719844945448881333863076637306945447387498972776036760257722267564194483460682180171606499667516158178244358453443366272714377624335587820923053543367706234475282638876337903731163227431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubik.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubik.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f12606394bd1af7964f883adef94359ce7437225
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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