hlg-api.avalia.grupoa.education

Issued by Amazon

About this certificate

This digital certificate with serial number 09:7a:23:74:fb:9b:40:73:d9:98:c1:f0:92:f6:c6:c8 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hlg-api.avalia.grupoa.education

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:7a:23:74:fb:9b:40:73:d9:98:c1:f0:92:f6:c6:c8
Serial Number (int): 12597231331476896625650830347165157064
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e9:73:05:2f:32:b6:47:3e:9f:00:4e:62:11:ee:c1:d8:bd:35:2b:c1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 93:d1:ad:09:63:04:d2:ac:ce:9a:00:c3:39:ce:f0:41:05:e3:97:42
Fingerprint (sha256): 23:ea:a5:1b:89:1b:7c:36:45:65:8d:e0:c0:d1:dd:08:11:01:fc:56:cf:ea:78:7c:62:bb:36:c2:2a:c1:9e:b6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate hlg-api.avalia.grupoa.education

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hlg-api.avalia.grupoa.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hlg-api.avalia.grupoa.education

Other certificates including the domain name grupoa.education

(limited to 100 certificates)
qa.batch-date-bb.grupoa.education
dev.sample-custom-tools-bb.grupoa.education
schedule-room-bb.grupoa.education
prefect.data.grupoa.education
doc-api-client.safea.grupoa.education
marketplace.status.grupoa.education
sagah.status.grupoa.education
qa.sispag-stg.grupoa.education
dev-api.orbita.grupoa.education
avalia.status.grupoa.education
sagahcm.grupoa.education
doc-api-client.safea.grupoa.education
paguea.grupoa.education
dev.blackboard.grupoa.education
dev.sample-custom-tools-bb.grupoa.education
avalia-internal.grupoa.education
dogma.univali.grupoa.education
plataforma-a.grupoa.education
sagah.status.grupoa.education
dev.blackboard.grupoa.education
dev.avalia.grupoa.education
dashboard.veniceprojectcenter.org
developer.grupoa.education
reports81.grupoa.education
schedule-room-bb.grupoa.education
qa.batch-date-bb.grupoa.education
hlg.api.contract-sagah.grupoa.education
marketplace.status.grupoa.education
api.support-query.grupoa.education
api.catalogo.grupoa.education
hlg.avalia.grupoa.education
hlg.avalia.grupoa.education
doc-api-client.safea.grupoa.education
www.heartcryelementary.com
labsapp.grupoa.education
api.support-query.grupoa.education
dev-bibliotecaa.grupoa.education
fruumi.com
pratica360-p6b-es.grupoa.education
core-status.grupoa.education
plataforma-status.grupoa.education
*.safea.grupoa.education
avalia-status.grupoa.education
api.support-query.grupoa.education
status-jaleko.grupoa.education
dogma.faesa.grupoa.education
api.support-query.grupoa.education
hlg.api.contract-sagah.grupoa.education
grupoa.education
www.lasercat.app
sagah-status.grupoa.education
admin.lavenderia.ch
sagah-status.grupoa.education
hlg.api.support-query.grupoa.education
hlg.avalia.grupoa.education
api.catalogo.grupoa.education
secad.status.grupoa.education
medicalplussarl.com
lrq.sagah.com.br
avalia-internal.grupoa.education
docs.data.grupoa.education
docs.data.grupoa.education
www.10x-sale.com
hlg2.sagahcm.grupoa.education
contract-sagah.grupoa.education
reports-aps-bb.grupoa.education
www.qurasense.com
catalogo.grupoa.education
dev-bibliotecaa.grupoa.education
hlg.api.support-query.grupoa.education
qa.reports-aps-bb.grupoa.education
gpkbattles.com
academic-protocol-public-files-dev.grupoa.education
nordahl.vetspire.com
avalia-status.grupoa.education
plataforma-status.grupoa.education
secad.status.grupoa.education
hlg.catalogonew.grupoa.education
myleave.co.za
dogma.unifeob.grupoa.education
kilometa.com
dev.sispag-stg.grupoa.education
hlg-api.avalia.grupoa.education
proto-store-mgmt-dev.ai-linka.com
core-status.grupoa.education
takeup.dev
api.support-query.grupoa.education
status-artmed.grupoa.education
www.paguea.grupoa.education
sagah-status.grupoa.education
hlg.api.catalogonew.grupoa.education
catalogo.status.grupoa.education
orbita.status.grupoa.education
api.catalogo.grupoa.education
qa.batch-date-bb.grupoa.education
dogma.cursosonline.grupoa.education
secad.status.grupoa.education
avalia-status.grupoa.education
catalogo.grupoa.education
orbita.status.grupoa.education

Certificate

The complete raw certificate details for hlg-api.avalia.grupoa.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPm8qcykAhPFu8WFVlSG
6lyE/sTXXROQw7QPNR3PBs9Rx7iqN7EejjQYfZrcoQk6+Wp5qjLp+pP3ioZLo1Z7
GeZmNqHBDeriW7yPcGN6DbCX5TdDoEp5isYWTwzT2lAQG7n3TknUQT/krQyiusw0
FHpM8nMp3zH59NZ4qksKwHUYE7FtXodtfoGaCm2uGfFeJYuTKrKwgigSsSulheRq
C75Qup8n4D31mBbxhyH/nM5PcYlgg5s/5yWs9E103qs27DVOAfWrNM3bj8ol8y+3
0Ny9fPt+qg7MnFeaZTCAIN7f1str6a9whYuzLQKnTjcRUhRvXLmDH69XoLs9IdyG
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12597231331476896625650830347165157064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hlg-api.avalia.grupoa.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24360904441243934210543093050456128401421276477296295980805604726250907654848162287985502314059226708730478071406091361514360756703180300027536551382791132057349254252726760947325442520166757915521707512646375996504944245070707450169771234688685697135949297811869626150059719025023344722750984083289088703721483296738982324643938868245134375410269888175633114684289903420872031788779519411191201272815347602842206628187971111105019922343166456171728937485097035811757116401654762819655984968637499757852987951206358288325052344095765225988019908051318598432339062870579067303524750990707055929213889408577235670828617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e973052f32b6473e9f004e6211eec1d8bd352bc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlg-api.avalia.grupoa.education'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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