timesspecials.timesgroup.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:d3:cf:b8:a9:6d:8f:bb:f2:07:d9:d8:e3:21:7c:f2 was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=timesspecials.timesgroup.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:d3:cf:b8:a9:6d:8f:bb:f2:07:d9:d8:e3:21:7c:f2
Serial Number (int): 14392067684205284218607530566416956658
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 77:52:d9:79:33:70:2a:62:54:e7:97:af:27:c0:0e:cd:38:4f:b5:01
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 50:82:8f:19:a3:74:7f:48:99:cb:96:98:6e:92:cb:8f:98:37:77:29
Fingerprint (sha256): 00:c0:a5:c9:83:5a:6b:03:68:95:97:bb:f3:8a:f3:af:57:06:d4:34:26:6e:a7:60:17:f5:be:d7:1d:57:11:d7

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate timesspecials.timesgroup.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for timesspecials.timesgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

timesspecials.timesgroup.com
timesspecials.in
www.timesspecials.com
toispecials.in
toispecials.com
www.timesspecials.timesgroup.com
timesspecial.com
www.toispecials.in
www.timesspecial.com
www.toispecials.com
www.toispecials.timesgroup.com
timesspecials.com

Other certificates including the domain name timesgroup.com

(limited to 100 certificates)
timesspecials.timesgroup.com
*.Timesgroup.com
servicedesk.gainsight.com
itsm.clinnex.com
*.Timesgroup.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
*.timesgroup.com
ig.infogain.com
epapers.timesgroup.com
epaper.timesgroup.com
www.torqus.com
endpoint.manageengine.live
servicedesk.vsoftconsulting.com
*.timesgroup.com
careers.timesgroup.com
servicedesk.decisionfoundry.com
care.spacematrix.com
ig.infogain.com
humanresource.thepawscuers.life
rms.timesgroup.com
itservicedesk.timesgroup.com
onedesk.tataplay.com
access.timesgroup.com
rms.timesgroup.com
timesofabetterindia.com
servicedesk.celestialsys.com
timesspecial.com
*.Timesgroup.com
onedesk.tataplay.com
epaper.timesgroup.com
servicedesk.celestialsys.com
servicedesk.gainsight.com
taops.fractal.ai
www.torqus.com
timesofabetterindia.com
*.Timesgroup.com
epapers.timesgroup.com
customer-sdpondemand.manageengine.in
mcadmin.timesgroup.com
servicedesk.celestialsys.com
itdesksupport.amphenol-omni.com
www.torqus.com
itservicedesk.timesgroup.com
care.spacematrix.com
timesofabetterindia.com
servicedesk.vsoftconsulting.com
*.olivesoftware.com
care.spacematrix.com
itdesksupport.amphenol-omni.com
access.timesgroup.com
onedesk.tataplay.com
eisamaygold.timesgroup.com
servicedesk.celestialsys.com
subscribe.timesgroup.com
*.timesgroup.com
cmsexternalapi.timesgroup.com
matagold.timesgroup.com
bestoftheworld.in
customer-sdpondemand.manageengine.in
itservicedesk.exeevo.com
itcare.theleela.com
customer-sdpondemand.manageengine.in
ithelpdesk.vadilalgroup.com
www.torqus.com
itsm.clinnex.com
itservicedesk.exeevo.com
mail.timesgroup.com
itservicedesk.timesgroup.com
mail.timesgroup.com
gtac.plintron.in
itdesksupport.amphenol-omni.com
helpdesk.allinoneservices.in.net
access.timesgroup.com
customer-sdpondemand.manageengine.in
care.spacematrix.com
hr.aletheiagroup.co.in
*.olivesoftware.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
timesnet.timesgroup.com
www.giftet.timesgroup.com
app.iambengaluru.epaper.timesgroup.com
*.Timesgroup.com
*.dam.timesgroup.com
itcare.hdfcfund.com
servicedesk.celestialsys.com
epaper.timesgroup.com
care.spacematrix.com
itservicedesk.timesgroup.com
itcare.theleela.com
iambengaluru.epaper.timesgroup.com
servicedesk.kbl.co.in
itsm.clinnex.com
timesofabetterindia.com
itcare.hdfcfund.com
mcadmin.timesgroup.com
itcare.hdfcfund.com
customer-sdpondemand.manageengine.in
servicedesk.gainsight.com

Certificate

The complete raw certificate details for timesspecials.timesgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvYNWw2pdbNCs9FVpg24
hNX8IRf5gV4YNiiy7lsQVgTGYyNmdjEv+XlYbGAnvLQxcF/4PQbCU+MQ8Bai6Q6L
GjGxXXqjRf1AegBBTUYaRXdNASwLmBoXihl97oXFj9oIODKwgj9wno6NC7B4deeu
ZC4Iyty7/oHgoaj3Dr5R0t1TOlSanzs+psF2dH1ikqanlV68skMK37aPzM+hFAO/
gnRaPbuqG+BEp4p96jkOwfp8KtBYcZ3f76lnDoeKGDs9sx0xsuZ6jlWuifQF+PEO
P2lJd9q2wOsLFvVmtSiHMS7FHi6OaQDz6yeS7H0vWLxO+SsXli++GcAA3GSaM3XJ
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14392067684205284218607530566416956658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'timesspecials.timesgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18552125372511535534114040477056618439434090002988238701047299691296703777684090133984337225543684270376223730674046585298855728081798907497900512143600293250311616248926516482042483645812334111434820780112612850404583347621564777865669329142140201536878112201516670444783316862799854119977810375563958070428125441647378934986792630544538399087183590274469428492457569724203712223451384479751544113503438066601355108058254853575084445696384975430832170336287407070051093312218402930673480480415844313930956373195774890180554576274883143946408845989230236565103135091504733240310049018132806607634120186222747692943707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7752d97933702a6254e797af27c00ecd384fb501
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toispecials.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toispecials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecials.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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