hlg.avalia.grupoa.education

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:1a:06:36:59:fa:f6:3c:af:99:77:88:c7:13:e6:d7 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hlg.avalia.grupoa.education

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:1a:06:36:59:fa:f6:3c:af:99:77:88:c7:13:e6:d7
Serial Number (int): 16085861668366853824100326185695962839
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 95:c2:61:94:44:85:3a:63:ee:0d:05:30:48:8d:34:80:50:07:41:db
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 27:8a:17:49:42:d5:7d:92:81:1a:b1:81:63:03:61:1b:24:4d:80:79
Fingerprint (sha256): 0e:b4:37:6a:9f:09:1c:0c:6b:2a:c1:61:3a:ff:39:c0:e9:3a:6b:53:d6:86:94:c9:dd:65:fb:e8:22:5e:c0:a6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate hlg.avalia.grupoa.education

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hlg.avalia.grupoa.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hlg.avalia.grupoa.education
staging-hlg.avalia.grupoa.education

Other certificates including the domain name grupoa.education

(limited to 100 certificates)
qa.batch-date-bb.grupoa.education
dev.sample-custom-tools-bb.grupoa.education
schedule-room-bb.grupoa.education
prefect.data.grupoa.education
doc-api-client.safea.grupoa.education
marketplace.status.grupoa.education
sagah.status.grupoa.education
qa.sispag-stg.grupoa.education
dev-api.orbita.grupoa.education
avalia.status.grupoa.education
sagahcm.grupoa.education
doc-api-client.safea.grupoa.education
paguea.grupoa.education
dev.blackboard.grupoa.education
dev.sample-custom-tools-bb.grupoa.education
avalia-internal.grupoa.education
dogma.univali.grupoa.education
plataforma-a.grupoa.education
sagah.status.grupoa.education
dev.blackboard.grupoa.education
dev.avalia.grupoa.education
dashboard.veniceprojectcenter.org
developer.grupoa.education
reports81.grupoa.education
schedule-room-bb.grupoa.education
qa.batch-date-bb.grupoa.education
hlg.api.contract-sagah.grupoa.education
marketplace.status.grupoa.education
api.support-query.grupoa.education
api.catalogo.grupoa.education
hlg.avalia.grupoa.education
hlg.avalia.grupoa.education
doc-api-client.safea.grupoa.education
www.heartcryelementary.com
labsapp.grupoa.education
api.support-query.grupoa.education
dev-bibliotecaa.grupoa.education
fruumi.com
pratica360-p6b-es.grupoa.education
core-status.grupoa.education
plataforma-status.grupoa.education
*.safea.grupoa.education
avalia-status.grupoa.education
api.support-query.grupoa.education
status-jaleko.grupoa.education
dogma.faesa.grupoa.education
api.support-query.grupoa.education
hlg.api.contract-sagah.grupoa.education
grupoa.education
www.lasercat.app
sagah-status.grupoa.education
admin.lavenderia.ch
sagah-status.grupoa.education
hlg.api.support-query.grupoa.education
hlg.avalia.grupoa.education
api.catalogo.grupoa.education
secad.status.grupoa.education
medicalplussarl.com
lrq.sagah.com.br
avalia-internal.grupoa.education
docs.data.grupoa.education
docs.data.grupoa.education
www.10x-sale.com
hlg2.sagahcm.grupoa.education
contract-sagah.grupoa.education
reports-aps-bb.grupoa.education
www.qurasense.com
catalogo.grupoa.education
dev-bibliotecaa.grupoa.education
hlg.api.support-query.grupoa.education
qa.reports-aps-bb.grupoa.education
gpkbattles.com
academic-protocol-public-files-dev.grupoa.education
nordahl.vetspire.com
avalia-status.grupoa.education
plataforma-status.grupoa.education
secad.status.grupoa.education
hlg.catalogonew.grupoa.education
myleave.co.za
dogma.unifeob.grupoa.education
kilometa.com
dev.sispag-stg.grupoa.education
hlg-api.avalia.grupoa.education
proto-store-mgmt-dev.ai-linka.com
core-status.grupoa.education
takeup.dev
api.support-query.grupoa.education
status-artmed.grupoa.education
www.paguea.grupoa.education
sagah-status.grupoa.education
hlg.api.catalogonew.grupoa.education
catalogo.status.grupoa.education
orbita.status.grupoa.education
api.catalogo.grupoa.education
qa.batch-date-bb.grupoa.education
dogma.cursosonline.grupoa.education
secad.status.grupoa.education
avalia-status.grupoa.education
catalogo.grupoa.education
orbita.status.grupoa.education

Certificate

The complete raw certificate details for hlg.avalia.grupoa.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqpSS6gFtvksiXv39UXv
LKiQ+YxIL7qoyrxQtfZLt0ebI+rRpX1Kz5spJg5eDTPfqyQ5vfZo9QzwZRmUL830
p3Ex0zzj6GVyU92CiY/iEFUf0ccAVuGP9fsepEXNn5mYjGx2mY+4GjrHfNflglMo
t9/O4HuEsElXKqvD6hdVOFq7sRTfqVRqR5RVfwWxoaGMVkOoFVhxwL8ZMUUSUBZT
nqyef66whebLXAZ2c7oeetnGS0Uh5GKslwXx9wfa62GxqwxPJJNiS/gmcMSp5JBG
qq5oHdl6Rx3GNV9jt1ptbIS5iXTCtmZOfTVfMTqBSStf8KkVcmQqRETIF/wk3Jk5
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16085861668366853824100326185695962839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hlg.avalia.grupoa.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17504874730956050079171679212426290512225956825694835672537657291620458919450545538640925043101936571683729332832992634191951222893981531346298137800380447028480593261567133962833331600767213935201913233690225424098129710922295699008240815368837094358073885465977077602929582665519629335903588896168091850683320091964144042030999772296041448855837217187262291121345135657192892930183372547449316993994086493182776390182551710597656876264070565675626621827150380567408178126397505806743734272243322689087900233014250209634082866718861690825677467347700813854656176120956275126122450491000996460035646769694960640408033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95c2619444853a63ee0d0530488d3480500741db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlg.avalia.grupoa.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-hlg.avalia.grupoa.education'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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