*.avg.com

- AVG Netherlands B.V. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:c0:80:89:c7:ed:56:45:75:9d:3c:cd:87:16:75:dd was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AVG Netherlands B.V.

Organization: AVG Netherlands B.V.
Organization unit: IT
Locality: Amsterdam
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:c0:80:89:c7:ed:56:45:75:9d:3c:cd:87:16:75:dd
Serial Number (int): 12962580023464901407354834994716898781
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:76:ff:a7:bf:b9:56:00:66:89:4d:8b:c8:7e:68:4f:9f:0f:58:8c
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 90:e2:25:a4:76:27:19:62:f1:6d:56:4e:52:b6:5a:76:e2:cb:7a:dd
Fingerprint (sha256): 04:73:1c:5e:9b:30:e9:27:f5:39:ec:8e:68:7e:33:ff:19:eb:9c:81:9a:2e:5c:19:38:3c:02:67:aa:8e:ac:1e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.avg.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.avg.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.avg.com
avg.com
zas-api-beta.avg.com

Other certificates including the domain name avg.com

(limited to 100 certificates)
business-auth.dev-europe-west3.smbrm.avast.com
*.avg.com
estatus.facturame.mx
release-notes.avg.com
bsmtp-relay-prod-dmz-brq001.mgm.avg.com
*.avg.com
study.cz.avg.com
estatus.facturame.mx
ua-cloud-stage.avg.com
buy-qa4.norton.com
webtuneup.avg.com
*.avg.com
dls.norton.com
click.emails.avg.com
*.avg.com
partners-int.norton.com
san.avg.com
cloudcare-billing.avg.com
ua-cloud-test.avg.com
san-ion.avast.com
*.avg.com
estatus.facturame.mx
ks.norton.com
web.backup.norton.com
*.avg.com
*.avg.com
shop.avg.com
subscriptions-test.avast.com
bconsole-test.avg.com
*.ocm.avg.com
partners.avg.com
*.avg.com
san.avg.com
estatus.facturame.mx
xls-int.norton.com
*.cloudcare.avg.com
somni.avg.com
san-ion.avast.com
*.my.sso.avg.com
*.avg.com
renewus.avg.com
*.avg.com
somni.avg.com
*.avg.com
*.avg.com
tps.avg.com
ua-cloud.avg.com
*.cloudcare.avg.com
signal.avg.com
labs.avg.com
*.avg.com
my-web-test.avast.com
estatus.facturame.mx
study.avg.com
*.avg.com
estatus.facturame.mx
stage-signal.avg.com
*.update.avg.com
avg.com
business-auth.prod.smbrm.avast.com
www9.avg.com
*.avg.com
support.avg.com
sip-01.avg.com
estatus.facturame.mx
study.avg.com
ccrmm.avg.com
estatus.facturame.mx
estatus.facturame.mx
my-web-stage.avast.com
san.avg.com
id.avast.com
estatus.facturame.mx
ks-int2.norton.com
*.cloud.avg.com
integrationbugs.avg.com
mts.norton.com
vpnportal.avg.com
zas-api.avg.com
community.cloudcare.avg.com
support.avg.com
*.avg.com
ncs-spoc-int1.norton.com
*.ccrmm.avg.com
*.avg.com
platformdashboard.avg.com
whatsmyip.mw-rmm.barracudamsp.com
*.avg.com
shop.avg.com
us03.ccrmm.avg.com
activation.avast.com
akamai-san46.exacttarget.com
sni.cloudflaressl.com
*.download.avg.com
san.avast.com
*.avg.com
status.cloudcare.avg.com
share.avg.com
estatus.facturame.mx
vpn.avg.com

Certificate

The complete raw certificate details for *.avg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12962580023464901407354834994716898781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AVG Netherlands B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.avg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925793222221933594040386134710619892171651353468518065925556950835689894846506312452688318009153754605592705270489038394572005629121225826088596399140837288018948200194639607012453451371607031254515115061528905915111916781935631774982697235460133299022836286507141712975534391076113606539667385122807428119680014015499548117787305808156466069289521702265816578677716981467999384709059617514158045008303527592449725080489844697528775363622736480060241763883588746778653690417183468627448697589429722951823707619706859457762896345389954667810803669560644562591209658881616645227306714505837947181952761260807993249101921481740044496456466349348951430324719283321372059948457935067937362418566572747319984385958484583742812774891202568269273208247537568383444764954158423464530741534053734317199425858761564804483323871489413093973671584092103528695252551039313348952577486523818767747065179084563151698189465088589329898731317304947275887911610495769950500166237698342950021971269598826187886820901721328062746889012798112021712244925114556505005648487910176362059186157407461130265435245702602363935392030771861401715029807660209594179821357379504709946641561471245300672882451788005025534042199882325610737486485474144727890240157413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c676ffa7bfb9560066894d8bc87e684f9f0f588c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zas-api-beta.avg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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