itgroup.com.br

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:1e:92:7f:1b:cf:a5:9a:e7:9c:06:98:03:cc:7b:1b was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=itgroup.com.br

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:1e:92:7f:1b:cf:a5:9a:e7:9c:06:98:03:cc:7b:1b
Serial Number (int): 10792564174421269225333169557450029851
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:8d:48:88:bb:1a:33:3c:6e:46:8d:8f:75:30:4d:f2:70:68:04:6a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 9f:32:43:1b:c8:c9:e0:72:1b:cf:6f:a4:db:56:da:57:91:54:77:d0
Fingerprint (sha256): fa:41:3f:1e:9a:f7:a0:30:e8:44:39:01:7b:7d:6e:6d:81:83:ad:43:9e:44:99:4a:27:82:eb:8f:14:ad:7e:7d

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate itgroup.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itgroup.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itgroup.com.br

Other certificates including the domain name itgroup.com.br

(limited to 100 certificates)
itgroup.com.br
intranet.itgroup.com.br
outback.itgroup.com.br
intranet.itgroup.com.br
crm.itgroup.com.br
intranet.itgroup.com.br
tfs.itgroup.com.br
meusite.itgroup.com.br
tfs.itgroup.com.br
ims.itgroup.com.br
sip.itgroup.com.br
meusite.itgroup.com.br
itgroup.com.br
itgroup.com.br

Certificate

The complete raw certificate details for itgroup.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cm71I3acncnGZN09Dd8
H4dJX7cfdLdJ7VSBh1Hhz3IAU1LrFzg4kBGMHgntBGr4r/GWy+OEX2RSlRsVMUfj
OfG/nfKCHxYlmZ7QYcWzpx+I/7Ne6DlFLQOkfuvUB3/Of9fa+DVP5hvbK7ulnmmq
2Mlr8En1VNjETKV4sw7Dhbdk7ECphgHUbbkR+VOliglkRGhgUdh5LWQc/CTgtwaF
A5amXA7xT5x75wqn+uczDyCiVFMPQ345hqrdb/gornjDwtlcpa0aUhnzHHiMXNGT
ATL0xZ6ptDk7CmVs8Mht13rhsg6RY47VQpKsD7BXuWw4fedZUF9qrmfU3HiwCTYZ
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10792564174421269225333169557450029851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itgroup.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27998143998538117260878704740567523807716627763193070865616449768492078817424592856789977795172055354196116008018889089461920323235334201436084711814529516949648381533529978938482124759085107599700599293571046666271633426236176950081529437945660958826509646747270330798979743929701197727028029935807531236198123150395952645993233472023986264101612936491254443413381475352673501570326503152524253058100102234571479905738412612262576955230218613273351215904618489124275923783318408002361276187812548251787555107434014191362750512421634861310806374413545020587152758857653797462246184489261732761316056473058471451171293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b58d4888bb1a333c6e468d8f75304df27068046a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itgroup.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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