avolin.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:90:f9:66:3e:5c:72:25:a1:36:b5:4b:b3:aa:97:41 was issued on by Amazon.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avolin.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:90:f9:66:3e:5c:72:25:a1:36:b5:4b:b3:aa:97:41
Serial Number (int): 3411205159762563473467192636428949313
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1c:2c:84:78:47:6c:64:90:80:f3:e9:5d:1e:06:0c:d9:48:31:cb:6f
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): d1:75:2c:16:ac:47:79:bb:83:75:1c:cd:ad:db:76:fa:04:ee:74:c1
Fingerprint (sha256): c1:55:7b:4e:79:89:7f:66:24:28:89:1e:85:43:db:70:42:fb:9b:14:c4:69:01:1e:88:3d:59:3a:ea:4b:62:6e

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate avolin.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avolin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avolin.com
onescm.com
*.firm58.com
*.qaenv.projectbeckon.com
*.aclate.com
aclate.com
*.gfi.com
symphonycommerce.com
projectbeckon.com
*.onescm.com
firm58.com
acornsys.com
*.beckon.com
*.stage.projectbeckon.com
supportsoft.com
nuviewinc.com
*.dev.projectbeckon.com
*.projectbeckon.com
*.xinet.northplains.com
*.symphonycommerce.com
streetsmartmobile.com
*.uat.projectbeckon.com
*.objectstore.com
beckon.com
*.supportsoft.com
*.acornsys.com
*.telescope.northplains.com
*.streetsmartmobile.com
*.support.northplains.com
gfi.com
objectstore.com
*.nuviewinc.com
*.avolin.com

Other certificates including the domain name avolin.com

(limited to 100 certificates)
support.engineyard.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
support.engineyard.com
lp.avolin.com
aliases.ignitetech.com
email.avolin.com
avolin.com
avolin.com
support.infinio.com
aliases.ignitetech.com
aliases.ignitetech.com
support.engineyard.com
classichelp.kayako.com
avolin.com
classichelp.kayako.com
email.avolin.com
ssl954700.cloudflaressl.com
aliases.ignitetech.com
classichelp.kayako.com
supportsurvey.zephyrtel.com
email.avolin.com
ssl954701.cloudflaressl.com
avolin.com
support.cardinal-mark.com
aliases.ignitetech.com
avolin.com
email.avolin.com
support.engineyard.com
sni.cloudflaressl.com
supportsurvey.zephyrtel.com
support.engineyard.com
lp.avolin.com
aliases.ignitetech.com
*.avolin.com
dnnsupport.dnnsoftware.com
aliases.ignitetech.com
email.avolin.com
classichelp.kayako.com
aliases.ignitetech.com
support.engineyard.com
sni.cloudflaressl.com
supportsurvey.zephyrtel.com
support.cardinal-mark.com
classichelp.kayako.com
*.avolin.com
avolin.com
supportsurvey.zephyrtel.com
blog.avolin.com
email.avolin.com
classichelp.kayako.com
avolin.com
support.cardinal-mark.com
avolin.com
support.cardinal-mark.com
supportsurvey.zephyrtel.com
*.avolin.com
lp.avolin.com
support.engineyard.com
support.engineyard.com
classichelp.kayako.com
support.engineyard.com
supportsurvey.zephyrtel.com
www.avolin.com
sni.cloudflaressl.com
avolin.com
classichelp.kayako.com
lp.avolin.com
*.avolin.com
supportsurvey.zephyrtel.com
aliases.ignitetech.com
classichelp.kayako.com
avolin.com
avolin.com
supportsurvey.zephyrtel.com
aliases.ignitetech.com
support.engineyard.com
support.engineyard.com
blog.avolin.com
classichelp.kayako.com
lp.avolin.com
*.avolin.com
lp.avolin.com
aliases.ignitetech.com
support.engineyard.com
support.cardinal-mark.com
support.engineyard.com
supportsurvey.zephyrtel.com
avolin.com
support.engineyard.com
ssl954701.cloudflaressl.com
avolin.com
aliases.ignitetech.com

Certificate

The complete raw certificate details for avolin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoRaNyq17Y7P/0boSGej
asMOdoWX+v4LySjUuh6a5ptwhRsOi4Ag1c6Plu/SiAKXB2MqKQjOPzdLpjmAWVEh
qK6R21MFtWBNmOJOlzzYITsA9fcuzfqFE2ctM4i8M3xIfNQ1gMfLjqm/6lWeD2B1
Tp83YPRjOKNDgiGRDTZqlbnSfTI1uUNozSdnfNyhAE+sj8pafIDSZpA7xPsZcQA6
xOg3eMer2jRQxpKuJaNOKt6fo8THILsaVL9OuILAYWVXWs25ZwhUA3JOAJfcQEss
Lva+j9A3AvazjwQ4GjVxwLlPwEcHqtY2IalWd6uDAn7+rxArO1SsdXZn6CL0l757
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3411205159762563473467192636428949313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avolin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23545590126711836017498594712336434021584555973577877170025089526170405303146435135630550107577441694691004758595040974494605341117242268777031568429912170430165869122198656297670866308274775021919945899867101839110575328628334191648831980945537124367213494777199859574351696890556633257998121050674665976667594527438598680848846503598673681484033078046837279369162427067293053979950396691025851449449280094860435220565042900459621198642055728103287695238867523210338986931286111561998750597675704005473090734187115184462525009665634631435479843550782683195058893935999926723457345803451401072712338242053176880429843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c2c8478476c649080f3e95d1e060cd94831cb6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avolin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firm58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qaenv.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symphonycommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firm58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acornsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuviewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xinet.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symphonycommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.objectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acornsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telescope.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.support.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'objectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuviewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avolin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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