prod-ecom-aws.avonnow.com

- The Avon Company -

Issued by Corporation Service Company RSA OV SSL CA

About this certificate

This digital certificate with serial number fa:f2:9c:df:16:5f:56:1f:28:48:11:82:3e:1b:73:ac was issued on by Corporation Service Company.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The Avon Company

Organization: The Avon Company
State / Province: New York
Country: US

Corporation Service Company

Organization: Corporation Service Company
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): fa:f2:9c:df:16:5f:56:1f:28:48:11:82:3e:1b:73:ac
Serial Number (int): 333566716516696731720791727882211390380
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ec:44:00:8a:b5:df:b1:15:9c:dd:70:f3:67:85:61:c5:f6:6c:6a:17
AuthorityKeyId: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d

Fingerprint (sha1): 9c:20:69:bd:19:a6:c4:2e:27:86:66:fb:b2:cb:9e:5a:17:f2:ee:b6
Fingerprint (sha256): c1:91:a7:63:f7:1e:f5:de:98:f9:a6:3f:6d:68:4e:73:79:39:74:43:21:f0:96:7d:0b:a3:ba:ff:c9:d9:6e:21

Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl

Check the revocation status for certificate prod-ecom-aws.avonnow.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-ecom-aws.avonnow.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-ecom-aws.avonnow.com
prod-ecom-admin-aws.avonnow.com
prod-ecom-admin-aws.newavon.com
prod-ecom-api-aws.avon.com
prod-ecom-api-aws.avonnow.com
prod-ecom-api-aws.youravon.com
prod-ecom-aws.avon.com
prod-ecom-aws.youravon.com
prod-ecom-cms-aws.avonnow.com
prod-ecom-cms-aws.newavon.com
prod-ecom-custapi-aws.avon.com

Other certificates including the domain name avonnow.com

(limited to 100 certificates)
catalog.avonnow.com
catalog.avonnow.com
trn-naws.avonnow.com
catalog.avonnow.com
catalog.avonnow.com
prod-ecom-sonar-aws.avonnow.com
prod-ecom-aws.avonnow.com
avonu.avonnow.com
catalog.avonnow.com

Certificate

The complete raw certificate details for prod-ecom-aws.avonnow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Df6+At2pbrnY6N5X1l
3NB3I15MKzhq7bER4ob8vm2uyaiE/E+3XqCRphZjc7THH+JwLnUdz5KxJHsrhtov
2SCkCa3Eg/6QOD192z0zh6my0eQ7nKTi6TfHRjQCyKGWIFiuGq+l2VHNmMVgM+Rx
boR/6Qu1OcRXePsPkGSZfrp57HgrF6sCNcoFVDjzERzyCrpBbbbceYeM8SE3WcRF
LMBtvg/w5jgOEUXsanBdK5oaOayatj+amXN104ZFd4E5A2Gdqd+8Yv8ZC9xYMhud
4zTe31nSVBVipUMTCCXFWYz5FqHw6bCG7d9cwc68LiCLUNIg8EMGnn7yhZ/C5SUs
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333566716516696731720791727882211390380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Avon Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-ecom-aws.avonnow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22675986856686636449622238319563674484848407141155196886074726010545906182779538249711270254038390012505433330480553009324197838993020459650415570546619787571746396454380859626081701188648765182263360724334476884545905130659246302505859312925062294501717919152040656683268892085337542852258874804505146265268182670457201868065015083077636186480071272223094757712892265095714135942401576546831466678619679559274418263959942706145873024948570601727638190194071205336115530183943508206906805267178331856424811414272109060033395930327018138438196312192725994065993364783626440723688977440243564936373841669541722006563909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec44008ab5dfb1159cdd70f3678561c5f66c6a17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-aws.avonnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-admin-aws.avonnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-admin-aws.newavon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-api-aws.avon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-api-aws.avonnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-api-aws.youravon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-aws.avon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-aws.youravon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-cms-aws.avonnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-cms-aws.newavon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ecom-custapi-aws.avon.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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