spi-tp.sp.f-secure.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:4b:66:f4:a4:34:b9:76:ff:28:57:2d:07:f9:3f:6a was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spi-tp.sp.f-secure.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:4b:66:f4:a4:34:b9:76:ff:28:57:2d:07:f9:3f:6a
Serial Number (int): 12354562414724862465377391111269072746
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:8c:18:cb:02:d2:ae:5b:dd:16:b1:7f:6a:e0:e4:de:4d:e2:ec:ff
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e4:91:80:9e:8b:c6:f1:7a:06:5e:e5:72:ed:52:2a:b9:25:06:51:10
Fingerprint (sha256): 00:6f:9d:01:b5:5e:7d:8f:83:d0:b8:49:0d:bf:2a:03:b8:19:26:a3:90:ea:37:7f:75:c1:2f:4b:83:3d:af:fe

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate spi-tp.sp.f-secure.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spi-tp.sp.f-secure.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spi-tp.sp.f-secure.com
*.spi-tp.sp.f-secure.com

Other certificates including the domain name f-secure.com

(limited to 100 certificates)
oneid.btinteg.ob.f-secure.com
fsio-d4eb-test.sp.f-secure.com
avain-tp.sp.f-secure.com
eu1.analytics.psb.f-secure.com
FSMSG0265.sp.f-secure.com
*.679.tp.cloud.f-secure.com
spi-tp.sp.f-secure.com
digital-life-test.f-secure.com
spi.f-secure.com
portal.radar.f-secure.com
internal-dev.connect.withsecure.com
services.sp.f-secure.com
ew1-rds-be-prd-rabbitmq-03.rds.f-secure.com
fsmsg0445.sp.f-secure.com
igbackup.ob.f-secure.com
guts.sp.f-secure.com
*.679.tp.cloud.f-secure.com
fsmsg0457.sp.f-secure.com
updates-api.radar.f-secure.com
frdm-stats.nc.f-secure.com
en.riws.status.ricoh.com
cgi.f-secure.com
helrdomaster02.fi.f-secure.com
fsmsg0757.sp.f-secure.com
se1gpgw01.f-secure.com
vivo.ob.f-secure.com
obus.sp.f-secure.com
scl.partners.f-secure.com
splunk.ci.infra-services.f-secure.com
fsmsg0071.sp.f-secure.com
*.safeavenue.f-secure.com
akamaisecure2.qualtrics.com
FSMSG0353.sp.f-secure.com
reliance-portal.sp.f-secure.com
secure05.stage.lithium.com
fsmsg0233.sp.f-secure.com
api.elements.f-secure.com
secure01.lithium.com
sebereports.sp.f-secure.com
fsmsg0031.sp.f-secure.com
freedome.f-secure.com
telia-portal.sp.f-secure.com
tsf-portal.sp.f-secure.com
beta.f-secure.com
uk.safeandsavvy.f-secure.com
*.smi.sp.f-secure.com
noms2.sp.f-secure.com
san-8-s51.tlsprovisioning.exacttarget.com
partnerportal.f-secure.com
FSMSG0259.sp.f-secure.com
www.backup.f-secureusa.com
fsmsg0121.sp.f-secure.com
movistar.pa.ob.f-secure.com
psb-live.sp.f-secure.com
test.www.europe.f-secure.com
ew1-rds-be-prd-rabbitmq-04.rds.f-secure.com
stg-download.f-secure.com
vip.f-secure.com
emea.psb.f-secure.com
msp-int.f-secure.com
researchblog.f-secure.com
mts.sp.f-secure.com
secure05.stage.lithium.com
labs.f-secure.com
mobile-dl.sp.f-secure.com
fsbwserver-pp.f-secure.com
secure01.lithium.com
f-secure.com
fsmsg0349.sp.f-secure.com
fsmsg0417.sp.f-secure.com
fsjira.f-secure.com
spi.f-secure.com
jenkins-staging.fi.f-secure.com
san-8-s51.tlsprovisioning.exacttarget.com
akamai-san18.exacttarget.com
cbeyond.sp.f-secure.com
fsmsg0275.sp.f-secure.com
guts2.sp.f-secure.com
*.business.f-secure.com
fsbwserver.f-secure.com
safeavenue-tp.sp.f-secure.com
en.riws.status.ricoh.com
fsbwserver.f-secure.com
doorman.sp.f-secure.com
FSMSG0123.sp.f-secure.com
iaps-tp.sp.f-secure.com
safeavenue.f-secure.com
oh-ci.fsxt.net
redirects.f-secure.com
cgi.f-secure.com
karhu2.nsense.net
smiws-internal.sp.f-secure.com
ticket.btstaging.ob.f-secure.com
fsmsg0267.sp.f-secure.com
clp-st-gw-nl.nc.f-secure.com
hibiki.f-secure.com
location-api.f-secure.com
partnersps.f-secure.com
cgi.f-secure.com
*.fusion.f-secure.com

Certificate

The complete raw certificate details for spi-tp.sp.f-secure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmGRGiuwRi8VpEDAVi0b
/2DJm4XiC8s1wRwzZaOZ7gJt0WhFEaDi0q26biNvDu9EcEbIZFEzV/RlsPo1iihy
nTdftoeVS21OSZ1Vfc2vv1N1HsjF/Np0PsxPSICTbKSBsAYNEgPdRCDZsrNMpbeI
SDguvcWVwkOFxudnzy8E67NNOj49gsCZ3uqgA+COHaO2zoBxdDQicT6YqoH0s48H
C/GGVn5laFV15dApgTEOlrpczxo9mkO20UX0WfnGzbuYYNqodCDTe08QUHNBYQWY
SM75/7GooOP16SO4DQyRyC4yqcYtnQsMxGxzfe0m+oFKwUV1ub+QPRhks3e7pmNh
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12354562414724862465377391111269072746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spi-tp.sp.f-secure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24033389928542134437444837722427445491241651321487268255401830446400260261486723600833020650817090825058360610849792182030099627128366459745042436880640676380497952399233090773342833594765443593095729704483945427469870394844209067683459759486870930068674400597761281943971373579319441364997565187031829862518156154072767263614737882955963499871755618138787561199886363808995238113238362663407563058084643780486154215192864916381468893697874285237899043467137475903270390145014249166513630032432045294754803574738146843430173317545542815646111769694237465376122051896111940096472422513625111149916289317105628331860289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							338c18cb02d2ae5bdd16b17f6ae0e4de4de2ecff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spi-tp.sp.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spi-tp.sp.f-secure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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