*.quintoandar.com.br

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:2b:13:65:8a:ad:5d:9c:c8:33:34:fa:ec:12:47:06 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.quintoandar.com.br

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:2b:13:65:8a:ad:5d:9c:c8:33:34:fa:ec:12:47:06
Serial Number (int): 20162082112436136598359934182718850822
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 29:45:4b:e4:e7:55:fb:65:9a:bd:30:ac:a5:4a:87:97:84:cb:ed:c4
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): f7:a9:74:e9:1a:5b:e2:c8:dc:76:29:1c:17:76:b9:1c:e1:f0:b4:00
Fingerprint (sha256): 00:66:0d:25:51:4e:d9:4b:19:8b:7c:43:45:39:97:88:c5:a3:8a:2a:de:29:38:17:9a:27:26:38:73:af:52:72

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.quintoandar.com.br

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.quintoandar.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.quintoandar.com.br
quintoandar.com.br
*.prod.benvi.mx
*.k8s-prod-03.quintoandar.com.br
benvi.mx
*.prod.quintoandar.com.br
*.benvi.mx

Other certificates including the domain name quintoandar.com.br

(limited to 100 certificates)
*.quintoandar.com.br
incapsula.com
ssl4533.cloudflare.com
incapsula.com
api.mobile.forno.quintoandar.com.br
incapsula.com
incapsula.com
incapsula.com
*.quintoandar.com.br
*.forno.quintoandar.com.br
incapsula.com
help.quintoandar.com.br
tls.automattic.com
help.quintoandar.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.quintoandar.com.br
incapsula.com
carreiras.quintoandar.com.br
incapsula.com
tls.automattic.com
incapsula.com
api.mobile.quintoandar.com.br
*.static.quintoandar.com.br
drone.staging.quintoandar.com.br
staging.quintoandar.com.br
*.forno.quintoandar.com.br
help.quintoandar.com.br
incapsula.com
taporty.it
incapsula.com
incapsula.com
noticias.quintoandar.com.br
incapsula.com
k8s-sandbox-03.quintoandar.com.br
*.quintoandar.com.br
incapsula.com
incapsula.com
*.data.quintoandar.com.br
mkt.quintoandar.com.br
contato.quintoandar.com.br
incapsula.com
meulugar.quintoandar.com.br
help.quintoandar.com.br
mission-control-api.dev.quintoandar.com.br
incapsula.com
*.staging.d2a.quintoandar.com.br
incapsula.com
incapsula.com
mission-control-api.dev.quintoandar.com.br
help.quintoandar.com.br
incapsula.com
verify.biopreva.com
incapsula.com
incapsula.com
help.forno.quintoandar.com.br
incapsula.com
incapsula.com
*.d2a.quintoandar.com.br
incapsula.com
incapsula.com
*.quintoandar.com.br
quintoandar.com.br
incapsula.com
forno.quintoandar.com.br
*.quintoandar.com.br
www.peruzza.si
help.forno.quintoandar.com.br
help.quintoandar.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
staging.quintoandar.com.br
*.quintoandar.com.br
abrir.bondit.app
incapsula.com
www.putratresna.com
incapsula.com
contato.quintoandar.com.br
app.onyxcard.io
tls.automattic.com
incapsula.com
mkt.quintoandar.com.br
incapsula.com
help.forno.quintoandar.com.br
*.quintoandar.com.br
api.mobile.quintoandar.com.br
incapsula.com
kimetsu-tdca.selforder.live
*.quintoandar.com.br
meulugar.quintoandar.com.br
paravoce.quintoandar.com.br
incapsula.com
www.classipedia.org
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for *.quintoandar.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhgLIKionmSC4IdyymKY
pIvW0O6T2htEp3lHZb/YYYRSccumlOPUL4CKXiILDc7KYXCiR0J6BDzNJURsTryz
WZ57Wv+LBpeb3A68A404iGjQWBKGOfo6VLuvFqFcryVJ3z8/W6rr7vI/nK+K0dNJ
D0EJbhqQ4YAI6FElRImtjz53p5CkNRPINxCnMDB/jb/N1j9AvUyxj/Q5zDO/Jg/X
oPFUB9ilRYTX1xHseGeAhpHPo4xQC4LUdpbLt1laOTJi/I/lM29R0Mwo1XasnDev
+wMgQr3iRIiuuF32qU7xSkxna6XMlKb8cCwQP4nXvtF+AqvWwfQop0SZXaUH+22m
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20162082112436136598359934182718850822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.quintoandar.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19957508460145866758003055077347313931317083858978112133187936153862648636390960756541941891817519330761168451685987209499774713527300296983455223812651752720929063782533416653022348075518895426500443606500823480989534365075125036101092019900614568139262708076263774394056979435841043163614598860420483806378750908127255140692111399761096490248299704997799612232039898968414554092188488598220653799316701665446403555146828413313839430709610747609970796794837316025095572557152185487357775920244756286906645490712722053173587713882778622889902453118329650685264323513226624304056908488983615136594736897703473518061179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29454be4e755fb659abd30aca54a879784cbedc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.benvi.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s-prod-03.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benvi.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.quintoandar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benvi.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b48cb9159000004030047304502206cccd39333685032e0955823fc2083ef9fc6602a804378bc7fc04349d87152f6022100f60b665cfc1e194b7610a5008777e18815dd004fceb06a6ba3453b53d594057e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b48cb91550000040300473045022004356b5551bfeddfa29a881b88f481cdece817741996f47104721b39895d7aac022100f9875089811b256783195fd7d16914e301a2740a847917d75a257039b2e3eab1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b48cb915d00000403004730450221009c5d70e6329ce3c3f5bb183842bc088d02e23bc8a4325d554aaece0e1a3d12e702201f70376313a03d712dd1cbd2089ac3ae2e35a0e5647469ea886cf5c414352fea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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