amigoedu.com.br

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number a4:d0:13:c9:a9:28:00:f6:0d:f2:1e:64:d9:46:d5:ac was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=amigoedu.com.br

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): a4:d0:13:c9:a9:28:00:f6:0d:f2:1e:64:d9:46:d5:ac
Serial Number (int): 219073790398295910283324455421936588204
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4e:8c:86:23:c5:1b:e1:8d:54:4c:3e:bc:ab:79:8a:61:87:ed:69:2c
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): fe:71:be:6f:08:74:3e:e5:f6:fd:3e:bf:c1:57:d3:78:84:9a:47:af
Fingerprint (sha256): 19:55:d5:f5:c7:b7:5b:2a:13:42:7c:4e:cf:7e:f4:5c:cc:87:97:15:26:25:b0:57:8c:72:c4:ea:eb:45:f4:81

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/bydEBj2oeek
CRL Distribution Point: http://crls.pki.goog/gts1p5/jIxzAS7JDcg.crl

Check the revocation status for certificate amigoedu.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amigoedu.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amigoedu.com.br
*.amigoedu.com.br

Other certificates including the domain name amigoedu.com.br

(limited to 100 certificates)
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
tinderup.com
san-38-s12.tlsprovisioning.exacttarget.com
www.swgt.in
sni.cloudflaressl.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
alpha.swingwizard.ai
san-38-s12.tlsprovisioning.exacttarget.com
www.pixelplumbing.com
fuji-app.cc
amigoedu.com.br
chef.behired.co.uk
www.colab.academy
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
travelbooks.kr
san-38-s12.tlsprovisioning.exacttarget.com
console.thevillageco.com.au
san-38-s12.tlsprovisioning.exacttarget.com
dev-instituicao.amigoedu.com.br
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
statsd.mxkaa.com
business.beanclub.app
nyhetonline.com
san-38-s12.tlsprovisioning.exacttarget.com
statsd.mxkaa.com
*.amigoedu.com.br
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
www.shiftstudio.ro
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
san-38-s12.tlsprovisioning.exacttarget.com
chatcents.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
partyservice-riesenbeck.de
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
www.evfs.ca
san-38-s12.tlsprovisioning.exacttarget.com
eagle-mountain.portal.plenadata.com
prevencionsalud.ballesta.com.ar
kanban.institute
auth.apps.badgersett.app
zootopi.dev
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
partner-uk.vygoapp.com
sni.cloudflaressl.com
san-38-s12.tlsprovisioning.exacttarget.com
glamstyle.vn
customer.value8.app
sni.cloudflaressl.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for amigoedu.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ3P7foWgFxk8ggJmBms
bzKPR1LDr2dpcgfiHlpBDYMauvHl0BIBhLObe2qP9+uGcLZgzr8u2yeO/uIecNgw
ewNk+8OiJVPlyWOidShI6Vpf1QXVlsGvNpichuuX7G7jgj7tgxyuP1E/Of3cnFQ9
2TKvP2bnh9MtC4vrfjEZKcYsHN4j9EauDWmzNG3SlgGthTzOogXiwf9RqDpL+nrH
hyBwBv2vYp/9dXumsCt5wGaiDGp8S4h1zbytMhnlsOXn5bGsJQ9EGX6lXbMyFn7i
F31jRouQI+wOosUoh8GDvDeOfYFNe5acciBMtw9sufzkJFdcOgXUdVkpfkqnMIyO
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 219073790398295910283324455421936588204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 00:30:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 00:30:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amigoedu.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22926953307394052613295616686423523435320726377759068366488582694485735268253297549311437470614638266375608984969644353966220832097325161042284024557063610939490842386603899824328391208069257672080166123183760032676729550800151895082678404280150671311979571325555991457702484698126290661955306065358986397786529039530509068958758640696830279250875113009910754404862903472376685919519325526634141670036192049014231566793236879449535665376432916999280075270138291115491513604955225991133108154186618195035296780059137892360841691501584445473428341062139996281927351732912963946121167658878917101989276020196459254943373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e8c8623c51be18d544c3ebcab798a6187ed692c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/bydEBj2oeek'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amigoedu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amigoedu.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/jIxzAS7JDcg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ec5a089fc000004030047304502210081ed1276c904cd369aabdc92b91895481bf184c1a5d65215f74468b83c83d7bb022039374cef6ebd52d2569c86afc66c4ac0789ba078dbf4c9beb5cd439b00f182e500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec5a089f000000403004730450220060740aab304ee50781f2b61d2071bbe5ed8bd3a9c1fb8993081680cf6d6ac390221008b6a5f1267667529b1a52609e06fe492e2106199d571333b8a4c7e3c55886b85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ca3f524ec082c547d9449defacfda848a9e000c4e6a664f0f232d526b48fa88266ebed783b5ea86d191c4ac21b3a95067d929c79b3bc3cf3d564a3617681703afb7c47b8764dbc64bfdb68d9154d440bff8b8d17b740b3844bebc257e6d5b91fec3a489eb719f8d38e705a68da1308d709476a678780762ed7785ef276dd365c31f17c4130d1f4e5c3c795aaa645eb58baa77cc457afe24ed8cc363bb358e3688685a119df46891fe9cc43b581e009e2f5680e7a39facde81fd60aff3a820e51d4fbdec0dab233c59b9fa2a2b5253da49b35f35acb69ed28a57f1f0180e86ef997c3008bf28f6c9a204f357cca9ab4da89a724cd7cc262e4f7f311818c6886e