xlink.rsc.org

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:09:a5:bb:15:65:42:b2:0e:99:b5:bf:d7:f8:05:2c was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xlink.rsc.org

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:09:a5:bb:15:65:42:b2:0e:99:b5:bf:d7:f8:05:2c
Serial Number (int): 5367004074739071308112794327549740332
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 95:90:bf:62:ac:91:55:9a:8d:29:f9:14:45:3b:ae:71:05:59:9a:77
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 46:dc:bc:7f:15:5e:8b:74:a2:31:88:43:66:94:b6:25:35:15:4a:31
Fingerprint (sha256): 00:26:6c:3a:96:a0:73:06:ef:c1:ab:68:ef:cf:17:c9:cf:33:64:f0:14:d1:d9:bb:46:e5:c0:6c:44:6c:89:f0

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate xlink.rsc.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xlink.rsc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xlink.rsc.org

Other certificates including the domain name rsc.org

(limited to 100 certificates)
www.pugpig.com
support10.cdnetworks.net
xlink.rsc.org
dns-vetting1j.map.fastly.net
ssl.cdngc.net
support10.cdnetworks.net
support10.cdnetworks.net
www.rsc.org
www.pugpig.com
au.credential.getsmarter.com
www.pugpig.com
support10.cdnetworks.net
dns-vetting1j.map.fastly.net
wvrsc.webvisioncloud.com
5654100301578240-fe4.pantheonsite.io
ssl.cdngc.net
5759826290278400-fe3.pantheonsite.io
dns-vetting1j.map.fastly.net
api.rsc.org
ssl.cdngc.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
ssl.cdngc.net
www.pugpig.com
adnoncentaur5.abasoft.co.uk
ssl.cdngc.net
aonhrlearningcenter.credentials.aon.com
incapsula.com
support10.cdnetworks.net
support10.cdnetworks.net
ssl.cdngc.net
support10.cdnetworks.net
brand.rsc.org
spectraschool.rsc.org
wvfe2.webvisioncloud.com
ssl.cdngc.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
5654100301578240-fe4.pantheonsite.io
incapsula.com
support10.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
5654100301578240-fe4.pantheonsite.io
dns-vetting1j.map.fastly.net
adnoncentaur5.abasoft.co.uk
www.pugpig.com
support10.cdnetworks.net
support10.cdnetworks.net
www.pugpig.com
dns-vetting1j.map.fastly.net
ssl.cdngc.net
jobs.chemistryworld.com
www.rsc.org
5759826290278400-fe3.pantheonsite.io
support10.cdnetworks.net
merckindex.rsc.org
support10.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
affinitydevelopment.rsc.org
ssl.cdngc.net
ssl.cdngc.net
5759826290278400-fe3.pantheonsite.io
dns-vetting1j.map.fastly.net
support10.cdnetworks.net
rscweb.org
incapsula.com
dns-vetting1j.map.fastly.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
api.rsc.org
5654100301578240-fe4.pantheonsite.io
support10.cdnetworks.net
www.pugpig.com
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
support10.cdnetworks.net
ssl.cdngc.net
ssl.cdngc.net
brand.rsc.org
www.pugpig.com
adnoncentaur4-5.abasoft.co.uk
incapsula.com
5759826290278400-fe3.pantheonsite.io
5759826290278400-fe3.pantheonsite.io
support10.cdnetworks.net
ssl.cdngc.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
support10.cdnetworks.net
adnoncentaur4-5.abasoft.co.uk
*.content.pugpig-dev.com
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
events.rsc.org
wvfe1.webvisioncloud.com
dns-vetting1.map.fastly.net

Certificate

The complete raw certificate details for xlink.rsc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAOC7JT6YB5/CBjFyQkH
AxxwL/6xM4xx7cdYrOYekh4FrzsCT+AnNnjO853FUeVqWm6rrivx4qKWW6mudMd8
gRh04keOyfU3v8FNEWX5MhK9Xn7VOmMEfefZQa6P4lbMeq9dhc2ydq6tByoQ0bL7
Fd1ZsY2Pe0VOhZeRwJXQqLRiC1Tz+jj8MGYNPZa6q1cRyUeNcugxQzlHnNSnt8eD
QRR8xyHMKltKzWx8QEwlEWyFfe8bpbS5O5tXQAWaWEoHZtcg5SWlpG7KntCfiDYT
U2b8To/JcsE4es0MB9XDYo/QeK2nzssgWpCoeYKDWibl3kgXK8Ra5lEph3ZYxBzI
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5367004074739071308112794327549740332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xlink.rsc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25754345760023665492365226221341915257876327628744278973291818348889057517064700688653213557724032861636045576964792387232557230768434122863228600669407813136395120128349009217774261985135466354310397026506172640798904951509738093440166351251312446600813325632321198643723030830432078790769432328673848592998358482505930395025401739100847412384824652163119246120776289773488934027037035603748165747911079414936300597314774366657620833156790437265312782486968121963864526147510357683254334866560588348475052798503069900171358738176242450705977809073081736415025837001931720987768821307822891877336762573483690579249259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9590bf62ac91559a8d29f914453bae7105599a77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlink.rsc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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