*.web-flags.dev.greetz-nl.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 01:8a:5d:f9:b0:4b:3d:a0:fe:e7:ad:94:72:84:f9:09 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.web-flags.dev.greetz-nl.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8a:5d:f9:b0:4b:3d:a0:fe:e7:ad:94:72:84:f9:09
Serial Number (int): 2047671008728649942040680024418613513
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 8c:45:8a:b9:ef:23:f7:75:3b:40:5a:bf:98:ba:a5:6c:81:01:2e:39
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 9c:d7:64:2f:e5:67:98:08:ee:55:19:10:76:b6:2a:60:70:0a:31:e6
Fingerprint (sha256): 96:36:16:85:e5:b8:4f:dc:8c:f6:73:b7:10:86:82:81:cc:e4:38:20:01:ad:b0:dc:3b:09:75:e3:6d:58:fc:44

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.web-flags.dev.greetz-nl.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.web-flags.dev.greetz-nl.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.web-flags.dev.greetz-nl.net
*.api.web-flags.dev.greetz-nl.net

Other certificates including the domain name greetz-nl.net

(limited to 100 certificates)
*.suggestions.uat.greetz-nl.net
*.renderer.uat.greetz-nl.net
*.product.dev.greetz-nl.net
*.web-explore-server.prod.greetz-nl.net
*.promotions.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.renderer.uat.greetz-nl.net
*.web-flags.dev.greetz-nl.net
*.content.uat.greetz-nl.net
*.renderer.uat.greetz-nl.net
*.consignments.dev.greetz-nl.net
*.consignments.dev.greetz-nl.net
*.web-flags.uat.greetz-nl.net
*.renderer.prod.greetz-nl.net
*.product.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.deliveryconfiguration.uat.greetz-nl.net
*.product.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.product.prod.greetz-nl.net
*.content.dev.greetz-nl.net
api.prod.greetz-nl.net
*.deliveryconfiguration.prod.greetz-nl.net
*.web-explore-server.uat.greetz-nl.net
*.studio.uat.greetz-nl.net
*.suggestions.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.renderer.prod.greetz-nl.net
*.promotions.prod.greetz-nl.net
*.favourites.prod.greetz-nl.net
*.studio.dev.greetz-nl.net
www.greetz.nl
*.customer-services.uat.greetz-nl.net
*.content.uat.greetz-nl.net
*.products-lookup.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.deliveryconfiguration.dev.greetz-nl.net
*.products-lookup.dev.greetz-nl.net
*.deliveryconfiguration.uat.greetz-nl.net
*.web-explore-server.prod.greetz-nl.net
*.design.prod.greetz-nl.net
*.product.dev.greetz-nl.net
*.favourites.dev.greetz-nl.net
*.content.uat.greetz-nl.net
*.web-explore.prod.greetz-nl.net
*.web-flags.dev.greetz-nl.net
*.deliveryconfiguration.dev.greetz-nl.net
*.deliveryconfiguration.dev.greetz-nl.net
*.ui-events.uat.greetz-nl.net
*.content.uat.greetz-nl.net
*.addresses.prod.greetz-nl.net
*.product.dev.greetz-nl.net
*.suggested-messages.dev.greetz-nl.net
*.template.uat.greetz-nl.net
*.webhook-v2.content.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.favourites.uat.greetz-nl.net
webhook-v2.content.prod.greetz-nl.net
api.uat.greetz-nl.net
*.content.prod.greetz-nl.net
*.web-explore-server.uat.greetz-nl.net
*.promotions.dev.greetz-nl.net
*.aichatbot.dev.greetz-nl.net
*.web-explore-server.dev.greetz-nl.net
*.ui-events.prod.greetz-nl.net
*.content.uat.greetz-nl.net
*.products-lookup.dev.greetz-nl.net
*.ui-events.prod.greetz-nl.net
*.product.dev.greetz-nl.net
*.addresses.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.content.prod.greetz-nl.net
*.product.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.web-flags.dev.greetz-nl.net
*.renderer.uat.greetz-nl.net
*.suggestions.uat.greetz-nl.net
*.aichatbot.dev.greetz-nl.net
*.suggestions.prod.greetz-nl.net
*.product.dev.greetz-nl.net
*.deliveries.dev.greetz-nl.net
*.web-explore.prod.greetz-nl.net
api.dev.greetz-nl.net
*.renderer.prod.greetz-nl.net
*.content.dev.greetz-nl.net
*.web-flags.dev.greetz-nl.net
*.ai-chatbot-api.dev.greetz-nl.net
*.promotions.prod.greetz-nl.net
*.web-flags.dev.greetz-nl.net
*.ai-chatbot-api.dev.greetz-nl.net
*.product.dev.greetz-nl.net
*.suggestions.dev.greetz-nl.net
*.template.prod.greetz-nl.net
*.deliveries.dev.greetz-nl.net
*.promotions.uat.greetz-nl.net
*.product.dev.greetz-nl.net
*.product.uat.greetz-nl.net
*.promotions.uat.greetz-nl.net

Certificate

The complete raw certificate details for *.web-flags.dev.greetz-nl.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2hQPjcnwZFpwZa2Bher
x7/M+Q150TJYLzpDz666wt1Rrv/1QO/sL3JT6GQLqnybfoh9DZW2x3M9OeOZ8pWF
kw4lCe+RKU1g8nQbkQPzATc8tjPhSg0kENceCNH/ms/iErLOAkoWOFCTIhaPMYcH
AxD4aG9OY7Vr0O1/e8U1VNHJR0Rw44WkaElSS6WrjKg48Ewd9i9PzRR7JopwvWsh
/kn9BJzrSWGUrQKMbuUC8kCcYvK20MmzA7NhSB7X/irF907IIGiAQIUYHIoFB/Lc
8OQDG1bDP7forYISc9OoxQxbxakGKG4l0Oee96qNtp/K70VVczfNSDZdpwXFRgWV
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2047671008728649942040680024418613513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.web-flags.dev.greetz-nl.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21133235808350888668660246050113299168861085075863225137052520816668779439337319859757458944812334355961783769089596358757299230808118019612729226297235078601620352189710123642589499231738979064065459324579696378932525980972882258554361775665936551467120945496936353908934947038157981055328825764396597107330662333307500494450591202081908855148000154518151380385967754320291556431187865225312916539285821058182665863592768345605321619735994722524244667249010275485683429742858159595677062301570616131925272157942377726671169768253494958281073477836162539235877927439809266732221975767643819608602410561769903969637799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c458ab9ef23f7753b405abf98baa56c81012e39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web-flags.dev.greetz-nl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.web-flags.dev.greetz-nl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051734bcdd22b35bccd75035a51491c8e22aae5d99ba85a17c47f339ac905d739186ca2c937c6000678158b5eea0cbb842edff013fa4a5382e6f7a7f50d5217e26201f7e3fb0a1d5065636629bcac08990574416cacc0f40bad0954fe854f4616ce5bf5672b96e2e368939f762ddad8c5b0681011e11da0aeb7814651bac674586467b10d8597d59a4c17a5b6e88a773838478908d2699c17dba2c67e6a139ecd56ec50a4efe4d5eebdca3cad6120d541e43d6cbd0a3c03816a95f1609f5107b51ac90443dd37af8e0c5764e63e4f5e5cf0e456974b011e11ee8e88e1a423b9acfc28e36c561b75038ca931641a27ad3c6a19af768c131f1baec541b9add832f3