feat-filter-local.pa-service.horizondev.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:e1:46:d3:db:63:f2:b4:ea:5a:85:7f:5e:64:aa:30 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=feat-filter-local.pa-service.horizondev.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:e1:46:d3:db:63:f2:b4:ea:5a:85:7f:5e:64:aa:30
Serial Number (int): 21108123283656667393687538719397292592
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a1:6c:09:24:d6:c5:13:af:40:29:36:06:7a:4d:60:ca:fc:69:38:9e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): c9:90:dc:b4:c5:6f:98:23:6a:e8:c2:23:99:fe:41:c8:11:f9:e1:e9
Fingerprint (sha256): 00:55:eb:62:41:e9:73:e6:f6:4f:f7:1c:38:91:8d:23:9b:00:8a:7e:ab:c1:d3:5c:63:1d:5f:be:63:8c:46:4d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate feat-filter-local.pa-service.horizondev.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for feat-filter-local.pa-service.horizondev.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

feat-filter-local.pa-service.horizondev.cloud

Other certificates including the domain name horizondev.cloud

(limited to 100 certificates)
inc-coverag-local.regional-stats.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
ref-bucket-local-dwg-asset-extractor.cerberus.horizondev.cloud
feat-filter-local.pa-service.horizondev.cloud
feat--view--local-ws-om.boic.horizondev.cloud
*.playground.apps.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
aods.cerberus.horizondev.cloud
main-local.regional-stats.horizondev.cloud
refact-deploy-non-ecosystem-acc-local.aods.horizondev.cloud
local-chore-tf-autoremove-statefile-sb.point.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
rzko0m.aods.horizondev.cloud
prom.dev-main-upstream.qa.horizondev.cloud
fix-handover-local.aods.horizondev.cloud
defect-2465418-local.aods.horizondev.cloud
feat-update-exp.aods.horizondev.cloud
prom.dev-v1-0-2.qa.horizondev.cloud
local-chore-reduce-instances-sb.point.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
z003zmzv-local-om.boic.horizondev.cloud
hedge.horizondev.cloud
feat-new-po-local-om.boic.horizondev.cloud
pip-duplicati-data-package.point.horizondev.cloud
prom-dev-chore-aws-lb.qa.horizondev.cloud
regional-stats.horizondev.cloud
pip-inprocess-ingest.point.horizondev.cloud
z004np6z-ingest.point.horizondev.cloud
local-api-feat-83.sustainability.horizondev.cloud
*.nb.schedule-service.horizondev.cloud
v3-2-5rc.aods.horizondev.cloud
refact-deploy-non-ecosystem-acc-local.aods.horizondev.cloud
local-fix-2401007-no-version-increme-sb.point.horizondev.cloud
v3-0-15.aods.horizondev.cloud
locations.horizondev.cloud
local-api-feat-workbook-lock.experience.horizondev.cloud
test-defect.regional-stats.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
feat-224222-local-om.boic.horizondev.cloud
local-api-fix-deltags.desigocc.horizondev.cloud
m0h8pw.aods.horizondev.cloud
local-api-fix-paginationcursor.experience.horizondev.cloud
*.app-dev-test.apps.horizondev.cloud
prom-dev-anuj08-local.qa.horizondev.cloud
z00466za-ingest.point.horizondev.cloud
local-feature-2446230.onboarding.horizondev.cloud
prom-dev-chore-non-fargat.qa.horizondev.cloud
device.horizondev.cloud
feat-dashbo-local.pa-service.horizondev.cloud
j7wj6e.aods.horizondev.cloud
fix-sonar-issues-ws-om.boic.horizondev.cloud
bd5zo0.aods.horizondev.cloud
one-local.aods.horizondev.cloud
feat--view--local-ws-om.boic.horizondev.cloud
z00466za-ingest.point.horizondev.cloud
feat--view--local-om.boic.horizondev.cloud
fix-handover.aods.horizondev.cloud
z004tbxr-local.regional-stats.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
rbilbb.aods.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
markuswsl-local.aods.horizondev.cloud
inc-coverag-local.regional-stats.horizondev.cloud
wugyo5.aods.horizondev.cloud
nb-cetapi.cerberus.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
handover-local.aods.horizondev.cloud
tra-pooling-fix.regional-stats.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
device.horizondev.cloud
test-csc-local.aods.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
chore-reg-deploy.aods.horizondev.cloud
*.device.horizondev.cloud
feat-permis-local.widget-service.horizondev.cloud
*.app-dev-test.apps.horizondev.cloud
*.local-app-reference.apps.horizondev.cloud
prom.dev-local1.qa.horizondev.cloud
feat-bff-re-local-om.boic.horizondev.cloud
*.dummytest.apps.horizondev.cloud
*.playground.apps.horizondev.cloud
refactor-cl-local-om.boic.horizondev.cloud
local-fix-2401007-add-more-logs-sb.point.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
*.alarm.apps.horizondev.cloud
local-fix-def-2517834.onboarding.horizondev.cloud
fix-deploy--local-om.boic.horizondev.cloud
qadzzr.aods.horizondev.cloud
*.dummytest.apps.horizondev.cloud
india-feat-update-exp.aods.horizondev.cloud
chore-prod--local.regional-stats.horizondev.cloud
feat-rtc-2247118-perf-om.boic.horizondev.cloud
ff1swq.aods.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
chore-prod--local.regional-stats.horizondev.cloud
feat-testtw-local-dwg-asset-extractor.cerberus.horizondev.cloud
v3-0-13.aods.horizondev.cloud

Certificate

The complete raw certificate details for feat-filter-local.pa-service.horizondev.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cXRGv9TfkFZRHkhTDlu
QM8+aWbLzYn6V4rMK+p02MEewGHMzkQ8DEhhuRD1nwQB/bupFq6sxNgIFeNthF1q
isDyYboIcCR7ZphmJ5mBu8ZWpJ8Wai0ZzhNehxntsc86ilXytJAaFv8l4fwcbdWK
++1gbOnvfOH2uW/AiQMLA8vfob8aPtTL2fyqobQfewKsITwXftVNba0A4ef0KEH3
SxfNVP1bX3yjJKJY57xpaulGUbHKhtPyKCYowH62ZQrn0bXXpWieELQY9sNHbXNn
+F94oQo5o9WU5f7fBjz5blD3xHxX5h+5cIhgWSHWSckAPyWV5Hh9zhJy7s+M8kDV
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21108123283656667393687538719397292592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'feat-filter-local.pa-service.horizondev.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30016025385639432191289853566026575359866916941307917901999906091290091053306657244520046926452053255712049368069362996669922605485216005793997782649096688763143840852993254352022470673485869416557570235608944512217371494839978536971216796043068829363099915123949132196832299545265100781443791793747592090774017371952224261368523363225454275182960837478312888861697297132266641614998874727375821262844081297473003082779236949825044518067180238107689977099301499874245850452641645897646472935713447585633490732759749889165425205264835440003323336459382775322536403870349135547498762881424102619292575801079404249011619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a16c0924d6c513af402936067a4d60cafc69389e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feat-filter-local.pa-service.horizondev.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a65ae2d0cc35a0bdcd7f019c4a59c9d40e7a4049a6ef53ed7dd1d6ef728c0775656439d2a37c324e1137e1c53d61e4bd844b5006765f3e6f072555769f6b82de4e16b6e89831b04cfc9eb38f7c45d8f40a6715e5ba253f20f703c819ed99e16877059ed399bcc097da517ec9f62a356d092d46a676dbda13a4cd56fa70ee81ffc3431d8d9726310b089934bcb6782c24001e43cc3aa9d08163fb5b5cd2101eed21bdafa7dbe866e0017f026510509c51c63b4709c18da79079a66ce1672517b008a55d1c0be42200d0d28780699e9cf1344b74189aeb5137f86d38719567c1d77a689f85e186a2f6e51c0ce1d632a4d64de3aa0f5ab7e1ff7bd74ba83c5420ec