*.campanhaforcaagro.premmiar.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:86:85:fb:49:89:16:b7:d7:2d:7e:89:39:30:c3:81 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.campanhaforcaagro.premmiar.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:86:85:fb:49:89:16:b7:d7:2d:7e:89:39:30:c3:81
Serial Number (int): 19307677189536701712958877370820903809
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:86:e0:c2:9b:30:1f:c2:25:6c:3d:ab:e1:40:22:43:52:2a:3b:f7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ce:84:44:37:4a:4e:8e:f7:25:cb:32:2b:02:0b:20:d6:85:75:f7:1d
Fingerprint (sha256): bc:e6:03:da:88:5a:b7:e5:11:52:c8:b4:90:10:47:b4:79:56:b0:3f:c2:0c:a9:5f:80:fb:3d:e2:b4:2f:28:e0

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.campanhaforcaagro.premmiar.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.campanhaforcaagro.premmiar.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.campanhaforcaagro.premmiar.io
campanhaforcaagro.premmiar.io

Other certificates including the domain name premmiar.io

(limited to 100 certificates)
*.gigaclubeaparelhos.premmiar.io
*.asicspro.premmiar.io
*.gigaclubemagalu.premmiar.io
*.gigaclubeamericanas.premmiar.io
*.premiacaocamedseguros.premmiar.io
*.gigaclubepap.premmiar.io
*.gigaclubeagenteautorizado.premmiar.io
*.amigoleo.premmiar.io
*.boravenderpointer.premmiar.io
*.imobelix.premmiar.io
*.clubecondor.premmiar.io
*.gigaclubeextra.premmiar.io
*.cluberb.premmiar.io
*.gigaclubevarejo.premmiar.io
*.levelup.premmiar.io
*.bmg.premmiar.io
*.lojaclienteagente.premmiar.io
*.vendeuganhou.premmiar.io
*.sededecrescer.premmiar.io
*.consultorhmlcogny.premmiar.io
*.embaixadoresconsorciohonda.premmiar.io
*.prohondadevantagens.premmiar.io
*.gigantesdaexecucao2022.premmiar.io
*.gigaclubevarejo.premmiar.io
*.timepremiado.premmiar.io
*.atlanticalets.premmiar.io
*.bmg.premmiar.io
*.premium.premmiar.io
*.basamaispremios.premmiar.io
*.fidelizavendas.premmiar.io
*.basamaispremios.premmiar.io
*.festalab.premmiar.io
*.campanhaforcaagro.premmiar.io
*.premiacaocamedseguros.premmiar.io
*.bmg.premmiar.io
*.promoclubspot.premmiar.io
*.cluberoku.premmiar.io
*.rivesa.premmiar.io
*.bmg.premmiar.io
*.intelbrasifi.premmiar.io
*.clubeale.premmiar.io
*.buzzpoints.premmiar.io
*.mundolenovo.premmiar.io
*.clubeconexaoligga.premmiar.io
*.gigaclubedistribuicao.premmiar.io

Certificate

The complete raw certificate details for *.campanhaforcaagro.premmiar.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2o3uFcvXp0ccY27Au9A
ajyawPPVeUvi6B7EGUY3cGY6pTPxit+hm/eP8LKHKV2/3TH8lmlW1J/06C2b7y1d
lLrdpG/JNCB/BKMHyMElllrDc5nL38haTAbctIRRFuEYuwUIk7CFGs1tJMqiciX2
M2JXpU76Plm40+qRjW4GZLrO5cmEssfmxmwaPaiMC8z6ZdsVSptmMW4kNkfikumM
Ys1CS9JqjOHDkhhJjwr2PvQtr+GQ+I+YFaRLdUYUp7tGQ9kPXn1+KG7SfRC7HRsq
6HW6AQGQANV2yxKebUf7d6V/5T8XIjI0Y4isP0x8u2m9kZI848rWh1YDpBS56AnV
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19307677189536701712958877370820903809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.campanhaforcaagro.premmiar.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22144081247662148249198798397175781049245731120189908661372026212132740098945248447059322841280986915327498765529242421754936166959395625683321591090775852794239668757438963721224275361216947488768303921390009106044442858568275556076702414470123533007447617906907993477639568161241910474338320891173211014710475225443498016613512079281615922366975759433245822514794975258538335162040775632496665542256354564453310705267990725037913982859614405211361850946246645015611174760407937663977889836819482379463125880208016837905662533552589828036163565406396064497550034291479555447688680552536881842764033198210442846655751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e386e0c29b301fc2256c3dabe1402243522a3bf7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campanhaforcaagro.premmiar.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhaforcaagro.premmiar.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018dc5082d3a00000403004630440220353842a66e80dd7bcaab0919dcc1362d5840df598db36dd2efdd511c9dfbb78d022037a16ecd02043eb12cf870a8649605dda66dc6c2a33b1dfcb5d4bf216bfde4ad0077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018dc5082d3c0000040300483046022100ca5cb0f7a47974a7cc5e46d2e01c557d3ed36449548e58a7612ed48325e3de0b022100a045002f405ec9242243708f5d2de60201587e3cbeaebebaedb5c832738636de007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018dc5082d6800000403004630440220152b539e425224318561d270f053f29c32697e216a795c22b154d02166475699022068d92a33514cbbd781c6685d2635efe8bb2d8b5aa57ec387ae5c2116af343ef1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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