*.prod-eu-central-1.wfxdr.trendmicro.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:13:92:a7:fe:34:3e:1f:38:c4:1f:2b:3c:06:e3:62 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.prod-eu-central-1.wfxdr.trendmicro.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:13:92:a7:fe:34:3e:1f:38:c4:1f:2b:3c:06:e3:62
Serial Number (int): 12064680143954027607005658401594598242
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:0b:62:a2:3d:d6:37:ac:61:3d:c1:23:b0:3f:4a:d5:24:e0:81:9b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 07:25:06:5b:17:37:f1:42:1d:cb:81:4d:58:57:d0:08:f4:ac:f3:d0
Fingerprint (sha256): 00:d9:2e:55:93:01:ec:89:08:4c:3a:84:d9:36:07:1a:ce:ac:de:55:e9:b6:56:d5:b8:51:2c:73:b6:03:07:6a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.prod-eu-central-1.wfxdr.trendmicro.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prod-eu-central-1.wfxdr.trendmicro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prod-eu-central-1.wfxdr.trendmicro.com
sco-emea.trendmicro.com
wfbs-smpi-emea.trendmicro.com
tmrm-cs-emea.trendmicro.com
*.sco.trendmicro.com
kaseya-sco-emea.trendmicro.com
labtech-sco-emea.trendmicro.com
tmrm-report-emea.trendmicro.com

Other certificates including the domain name trendmicro.com

(limited to 100 certificates)
sec-adv.trendmicro.com
sls-xdrrxrs131test.dev-us-east-2.parsley.trendmicro.com
*.storage.trendmicro.com
*.trendmicro.com
tmx.trendmicro.com
int.sspm.trendmicro.com
prdu-selectsupportemea.trendmicro.com
vanity3.lithium.com
sam.trendmicro.com
*.trendmicro.com
*.etdl.trendmicro.com
xdr.nacloud.trendmicro.com
filestorage.sg-1.dev-cloudone.trendmicro.com
*.eks.trendmicro.com
file-uk.trendmicro.com
sec-adv-admin.trendmicro.com
twcommercial01.jenkinsci.trendmicro.com
vanity7.jiveon.com
*.p1rd1.sps-endpoint-beta.trendmicro.com
newsletters.trendmicro.com
p225b2.dev-us-east-2.parsley.trendmicro.com
renewonlinestg.trendmicro.com
audit.trend-us-1.cloudone.trendmicro.com
devops-jenkins-pci.luwak.trendmicro.com
doctorlevel.trendmicro.com
www.trendmicro.com
misp.research.trendmicro.com
*.prod-eu-central-1.wfxdr.trendmicro.com
stg.fbbot.tmcc.csoc.trendmicro.com
vault-stg.trendmicro.com
liberalapi-tmp.sdi.trendnet.org
tableau-consumer.trendmicro.com
documents.trendmicro.com
*.trendmicro.com
iotserver-staging.trendmicro.com
newsroom.trendmicro.com
*.iws.trendmicro.com
*.osscan.trendmicro.com
*.alpha.consumervpn.trendmicro.com
tmpn.trendmicro.com
*.auth.trendmicro.com
intsearch.trendmicro.com
vanity4.lithium.com
ocm-it.br.secops.trendmicro.com
*.dc1.beta.storage.trendmicro.com
trendeorders-emea-staging.trendmicro.com
*.giss.trendmicro.com
doctorone.baplsstage.trendmicro.com
*.appletuner.trendmicro.com
cloudresources.jp-1.cloudone.trendmicro.com
dashboard.app-protect.trendmicro.com
*.giss.trendmicro.com
*.login-stg.trendmicro.com
projects.us-1.cloudone.trendmicro.com
tmcc.trendmicro.com
accounts.trend-us-1.dev-cloudone.trendmicro.com
licenseupdate2.trendmicro.com
sdl-int.visionone.trendmicro.com
au-phase.activeupdate.trendmicro.com
sls-xdrrp190b8.dev-us-east-1.parsley.trendmicro.com
premiumservices.trendmicro.com
*.manage.trendmicro.com
cloudaccounts-ui-us.xdr.trendmicro.com
api.securityportal-stg.trendmicro.com
*.beta.consumervpn.trendmicro.com
go2.trendmicro.com
gpt-playground-plugin-jp.trendmicro.com
*.jarvis.trendmicro.com
projects.au-1.dev-cloudone.trendmicro.com
*.consumervpn.trendmicro.com
*.trendmicro.com
conformity.us-1.staging-cloudone.trendmicro.com
sslauto.itdev.trendmicro.com
dispatch01.trendmicro.com
iamservice.trendmicro.com
event-forwarder.ca-1.cloudone.trendmicro.com
siteseal01.trendmicro.com
cloudaccounts.in-1.cloudone.trendmicro.com
*.ml-tool.trendmicro.com
us.imhs-ws.trendmicro.com
*.trendmicro.com
corpit-dispatch.trendmicro.com
deepsecurity.trendmicro.com
artifactscan.us-1.cloudone.trendmicro.com
*.trendmicro.com
*.p1qa2.sps-endpoint-beta.trendmicro.com
*.isday.trendmicro.com
*.devhw.sps-endpoint-beta.trendmicro.com
drilsnr.trendmicro.com
workload.us-1.cloudone.trendmicro.com
jr.trendmicro.com
*.wfbs-svc.trendmicro.com
*.test.giss.trendmicro.com
rule.tip.trendmicro.com
*.giss.trendmicro.com
mcs.trendmicro.com
mktdatamart.trendmicro.com
filestorage.ca-1.cloudone.trendmicro.com
tsm.dev-cloudone.trendmicro.com
*.trendmicro.com

Certificate

The complete raw certificate details for *.prod-eu-central-1.wfxdr.trendmicro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvMXc+/m4hcWG/O9xnbw
KS7UHjmp7oCsu6ZMcOoVi0augLReD7WkPyjGGeTRnqDCQF0UNre4KuSTfgJt63d2
hTiSOGAe35fEM0PGTikCmrO9aBJWeXSfbQLRz5Si0dNLftqlsm/6rN80BSbzVSRe
swj/YM7ksz7Wc/dvP+XtTRnQcIIeI5ejW5hzu7kXKt30txEHsjv8Qff2mogxdR6Y
yoCUP1Zng3Kg+9WSQS+Zy/74HQNkxHhhI/J0stBlCEIbIoeIOCeMDJdPabLLiq/P
SkKq2xYl3iIgHJZCQtd+/SxL91R8v85NKiT3zq9Ue3tac4Rp3zl13LM+HlWmz1m+
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12064680143954027607005658401594598242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prod-eu-central-1.wfxdr.trendmicro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26124963765010423665740559350428547495024195767251262187560420618169433788804204586029970538318585376523072154340257530561884555677314221468298420447346732729402485768984494464543270157156046653756388511996243229746832469876626452608076273504440426474196982199819889533991449538546421954650976147810124602076107046965033054678731537328501115486059099356983066249124604780845836598572286417382086535838130618021968236693443945047458145152438731139456928812219636252494169947708465288853287254136615112270659838363449905036665725255954641174246331107785247182497783424120553189445945210339650100672185595118346862968491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							330b62a23dd637ac613dc123b03f4ad524e0819b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-eu-central-1.wfxdr.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sco-emea.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfbs-smpi-emea.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmrm-cs-emea.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sco.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaseya-sco-emea.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labtech-sco-emea.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmrm-report-emea.trendmicro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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