inc-coverag-local.regional-stats.horizondev.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:87:37:3f:51:0c:92:5f:87:f9:f7:6b:44:fb:03:02 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=inc-coverag-local.regional-stats.horizondev.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:87:37:3f:51:0c:92:5f:87:f9:f7:6b:44:fb:03:02
Serial Number (int): 19311272565876947324141147932283568898
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9f:2d:be:e5:b6:b5:68:a5:ab:a8:7d:9c:d8:bc:69:36:db:2c:e3:2e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 26:26:dc:8f:7f:d6:e8:e9:cc:a4:0e:0a:9b:8b:76:2f:6c:d1:9f:cd
Fingerprint (sha256): 00:1a:d2:b5:97:96:13:c4:94:46:93:70:8d:8e:e3:8c:f6:8f:54:bf:23:a6:40:1f:b8:0f:e2:4c:8b:a4:21:8e

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate inc-coverag-local.regional-stats.horizondev.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inc-coverag-local.regional-stats.horizondev.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inc-coverag-local.regional-stats.horizondev.cloud

Other certificates including the domain name horizondev.cloud

(limited to 100 certificates)
inc-coverag-local.regional-stats.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
ref-bucket-local-dwg-asset-extractor.cerberus.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
local-chore-tf-autoremove-statefile-sb.point.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
rzko0m.aods.horizondev.cloud
feat-update-exp.aods.horizondev.cloud
prom.dev-v1-0-2.qa.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
z003zmzv-local-om.boic.horizondev.cloud
hedge.horizondev.cloud
feat-new-po-local-om.boic.horizondev.cloud
prom-dev-chore-aws-lb.qa.horizondev.cloud
regional-stats.horizondev.cloud
z004np6z-ingest.point.horizondev.cloud
v3-2-5rc.aods.horizondev.cloud
local-fix-2401007-no-version-increme-sb.point.horizondev.cloud
test-defect.regional-stats.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
feat-224222-local-om.boic.horizondev.cloud
m0h8pw.aods.horizondev.cloud
local-api-fix-paginationcursor.experience.horizondev.cloud
prom-dev-anuj08-local.qa.horizondev.cloud
prom-dev-chore-non-fargat.qa.horizondev.cloud
device.horizondev.cloud
j7wj6e.aods.horizondev.cloud
fix-sonar-issues-ws-om.boic.horizondev.cloud
one-local.aods.horizondev.cloud
feat--view--local-om.boic.horizondev.cloud
z004tbxr-local.regional-stats.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
rbilbb.aods.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
markuswsl-local.aods.horizondev.cloud
inc-coverag-local.regional-stats.horizondev.cloud
nb-cetapi.cerberus.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
device.horizondev.cloud
test-csc-local.aods.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
*.device.horizondev.cloud
*.local-app-reference.apps.horizondev.cloud
prom.dev-local1.qa.horizondev.cloud
*.dummytest.apps.horizondev.cloud
local-fix-2401007-add-more-logs-sb.point.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
*.alarm.apps.horizondev.cloud
fix-deploy--local-om.boic.horizondev.cloud
qadzzr.aods.horizondev.cloud
*.dummytest.apps.horizondev.cloud
v3-0-13.aods.horizondev.cloud
local-api-fix-paginationcursor.experience.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
prom-dev-v3-1-0-rc5.qa.horizondev.cloud
9qxco0.aods.horizondev.cloud
prom-dev-cr-126-local.qa.horizondev.cloud
supress.aods.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
arag5b.aods.horizondev.cloud
ita48361-local-om.boic.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
chore-logging-improvements-local.aods.horizondev.cloud
fix-sec-headers-local.aods.horizondev.cloud
feat-testtw-local-dwg-asset-extractor.cerberus.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
feat-csc-migration-local.aods.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
prom-dev-chore-non-fargat.qa.horizondev.cloud
feat-csc-kms-policy-local.aods.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
feat-csc-migration.aods.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
prom.dev-feat-upstream-ek.qa.horizondev.cloud
dwg-asset-extractor.cerberus.horizondev.cloud
2mhjhy.aods.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
engineering.horizondev.cloud
feat-testtw-local-dwg-asset-extractor.cerberus.horizondev.cloud
feat-testtwo-dwg-asset-extractor.cerberus.horizondev.cloud
prom-dev-chore-docs-and-a.qa.horizondev.cloud
user.horizondev.cloud
prom.dev-local.qa.horizondev.cloud
z004np6z-ingest.point.horizondev.cloud
v3-2-5rc.aods.horizondev.cloud
feat-2392121-rgs.aods.horizondev.cloud
local-feat-2383077-2.onboarding.horizondev.cloud
chore-ind-deploy-local.aods.horizondev.cloud
aods.geometry.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
main-local.regional-stats.horizondev.cloud
vivek-local.aods.horizondev.cloud
ita48361-local-ws-om.boic.horizondev.cloud
z004xj4j-local.subscription.horizondev.cloud
efj01i.aods.horizondev.cloud
local-feat-2379289.datasetup.horizondev.cloud
prom.dev-local.qa.horizondev.cloud

Certificate

The complete raw certificate details for inc-coverag-local.regional-stats.horizondev.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcSFbrXaBt1hOxb5eYkT
8fopEuG+E7SBrzpfviC2UENxFmOkKx0OTBYQkC8Ia2XigvU+ibTC0QmH8S/UifiZ
4KbWim+PkjqKz/V0eJOwKcGdiCtKUZR2UfseqM1zLDcBZESHXqUo64W+EXmdHeJO
quSYgRoP8oms5u+5Kkoec552e0RfIC/TRN/9PTDGW9FpFbhj39ezthgAM9AYC+IL
eDE4/6QAtxYfGwQCHJY1iI4T46C8XmkA539cZlYh8ohQds0XjKySUukYcS2UDomz
CuMuqMCWYn/hYxjRBBIrTp8lU4T2dqXZP2BQGRaj3IGoPbIHsisz22/AHiMEes0B
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19311272565876947324141147932283568898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'inc-coverag-local.regional-stats.horizondev.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22946041424531807937655354519063995728573656637097224280743102864994243799519484462966851044700334028790186579393092615978125375155524984832758773110768627590436309842889578578566322681168007157552730656464900672582530300272990383750132302203509453645639462078429116913608690354397760969508040781464757444468346175844277218421600560590517979615275732743998346611376555749208549794429998650864317829809242624164608340544952674032829575732653597397490523273158190903746960635760444273899583792824042650020502062327324754460862900992623479994189246442081527163920651355832244725237041205403875779647856392924896160448851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f2dbee5b6b568a5aba87d9cd8bc6936db2ce32e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inc-coverag-local.regional-stats.horizondev.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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