apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:3d:45:33:a8:7b:b4:e8:c8:46:d7:d5:e4:69:d5:b9 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:3d:45:33:a8:7b:b4:e8:c8:46:d7:d5:e4:69:d5:b9
Serial Number (int): 20256553624186336617479507751989794233
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:68:87:00:e4:c1:ec:6c:98:e2:fb:56:55:7c:94:10:91:2d:d7:30
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 11:53:45:07:af:d7:c0:0b:a9:07:92:21:72:e2:1a:ff:5a:9e:f8:54
Fingerprint (sha256): 00:b1:62:e4:3a:7c:50:a1:49:da:ff:fc:97:d8:f6:67:22:a8:5f:d4:46:5e:bb:54:4a:e1:70:c3:d2:34:a9:c2

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au

Other certificates including the domain name nsw.gov.au

(limited to 100 certificates)
glc-lyncfe.glc-dom.greatlakes.nsw.gov.au
wnswlhd.health.nsw.gov.au
virtela.simpplr.com
sni192047.cloudflaressl.com
helpdesk.regionalhousing.org.au
webpac.sutherlandshire.nsw.gov.au
*.sopa.nsw.gov.au
rsc.cdn77.org
test.cadastre.nsw.gov.au
support.licence.nsw.gov.au
incapsula.com
incapsula.com
search.det.nsw.edu.au
vsp.schn.health.nsw.gov.au
www.goulburn.nsw.gov.au
live.artgallery.nsw.gov.au
citrix.service.nsw.gov.au
ehub.enrol.education.nsw.gov.au
www.heti.nsw.gov.au
incapsula.com
archivemanager.health.nsw.gov.au
vpn.hawkesbury.nsw.gov.au
*.finance.nsw.gov.au
www.careforacarer.nsw.gov.au
ictsd.sureservegroup.co.uk
www.kogarah.nsw.gov.au
ictsd.sureservegroup.co.uk
pra.community.nsw.gov.au
PCS-PDS263.tmc.rta.nsw.gov.au
vmoirs.health.nsw.gov.au
objective-dev.transport.nsw.gov.au
employment.midwestern.nsw.gov.au
*.audit.nsw.gov.au
mpa.nsw.gov.au
mailsync.narrandera.nsw.gov.au
incapsula.com
*.int.smprimavera.aws.hosting.transport.nsw.gov.au
skypool1.det.nsw.edu.au
ssl758952.cloudflaressl.com
mhrt.nsw.gov.au
intranet.transport.nsw.gov.au
m.artgallery.nsw.gov.au
policingactivity.bocsar.nsw.gov.au
eventshub.nsw.gov.au
pointtopoint.nsw.gov.au
macroc.nsw.gov.au
oacciwtrn.oci.dcj.nsw.gov.au
ssl758953.cloudflaressl.com
www.energy.nsw.gov.au
cims-sit.hbcf.nsw.gov.au
fncw.nsw.gov.au
wollongong.nsw.gov.au
accessedge1.nswgov.ucfx.com
crl.nsw.gov.au
gitlab.service.nsw.gov.au
ssl375654.cloudflaressl.com
alpha.portal.data.nsw.gov.au
www.victimsservices.justice.nsw.gov.au
sni203116.cloudflaressl.com
www.pexa.osr.nsw.gov.au
msa.dev.education.nsw.gov.au
sni183646.cloudflaressl.com
5676582576324608-fe3.pantheonsite.io
sni183646.cloudflaressl.com
citrix.lb.rta.nsw.gov.au
sni192047.cloudflaressl.com
*.icac.nsw.gov.au
imperva.com
failover.graftongallery.nsw.gov.au
whatsonhelp.cityofsydney.nsw.gov.au
5638916786880512-fe1.pantheonsite.io
tmf-dashboard.icare.nsw.gov.au
uat.emos.nsw.gov.au
www.otsi.nsw.gov.au
events.energysaver.nsw.gov.au
*.unify.service.nsw.gov.au
www.kyogle.nsw.gov.au
web-workflow.sl.nsw.gov.au
camden.nsw.gov.au
cloud.comms.service.nsw.gov.au
sni192050.cloudflaressl.com
governor.nsw.gov.au
*.wls.dpi.nsw.gov.au
tools.dev.justconnect.justice.nsw.gov.au
api.uat01.onlineregistry.justice.nsw.gov.au
incapsula.com
locale-distro.morpht.com
apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au
imperva.com
eservices.byron.nsw.gov.au
snswlhd.health.nsw.gov.au
maritimemanagement.transport.nsw.gov.au
tst.smartandskilled.nsw.gov.au
www.hay.nsw.gov.au
*.audit.nsw.gov.au
incapsula.com
*.upperhunter.nsw.gov.au
sni.cloudflaressl.com
mail.yass.nsw.gov.au
archives.nsw.gov.au

Certificate

The complete raw certificate details for apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGK4j4lk0WCH+LAxrZTg
wKsICjKRP+U6VGeAXQASbHLAvxAJeYZ5uxzjeoXj84pP9fJkodHEvRvMFbwcrdLV
ghDYQ8tL9CCCaoIAH+hnsjzT7OAg3aNScNfYy3aAGpTCT8RrTpjMmqQrlcTfp5c4
aq6mlyXq4p4/BlOHMLeU6s+fm5HksC/TeesptE9rtBFp6AsCHCr+74MJrN/mwZoM
dK2L0c/wEPMHcSCFTXBVlvNfhhF/zt0mh/OvKSRYF1IcfpAYSnILuXpMybGrjf0V
dv6q31Tgcx/RJ5xK9d/V5AZC9XI3/32xj79crezW1lU72b4DE5NCBTPbGYDgQmlv
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20256553624186336617479507751989794233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22266622784006853003568171111616970751124255572644338239488173327322058336996318735982939239003914434125062909705859476011386398791178908373856012502203154990396652088153123875190088110345273592376444917117466004597354408466595081441490612394596347043229412024042244960811541093896139171409602504126144307408798123893677194340547299944159673007702047697591884047264675084237909021854762705935818919459212349989791712260992259844411998620334316746305993023904247044662408470127482197478389610747022353407139958114065236098157579253296360058291658964440658460375046932061423392158073986429700164627587362667212055343071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3688700e4c1ec6c98e2fb56557c9410912dd730
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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