9awwbb.ene-dev.aws.pmicloud.biz

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:ff:6b:33:37:15:14:39:4c:98:d3:7c:6d:16:d1:6e was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=9awwbb.ene-dev.aws.pmicloud.biz

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:ff:6b:33:37:15:14:39:4c:98:d3:7c:6d:16:d1:6e
Serial Number (int): 15947717928071493090133083315246649710
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6e:4c:23:71:71:0a:45:f8:0c:61:27:29:45:17:d6:2b:25:d0:4c:e1
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): fd:df:c9:5e:1f:5f:f5:2c:23:5e:59:7c:c7:db:a1:85:f0:4b:0c:82
Fingerprint (sha256): 00:eb:d2:b6:7b:b5:fa:36:8f:19:1a:67:45:b7:37:2e:25:85:84:f3:ac:72:91:c7:6f:aa:31:8d:d7:0f:f2:f8

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate 9awwbb.ene-dev.aws.pmicloud.biz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 9awwbb.ene-dev.aws.pmicloud.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

9awwbb.ene-dev.aws.pmicloud.biz

Other certificates including the domain name pmicloud.biz

(limited to 100 certificates)
oqzpda.ene-dev.aws.pmicloud.biz
vnkfzj.ene-dev.aws.pmicloud.biz
ambari-qa.ocean.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
*.cdt.pmicloud.biz
wex5kq.ene-dev.aws.pmicloud.biz
omicspmrd-prd.eu-west-1.aws.pmicloud.biz
9awwbb.ene-dev.aws.pmicloud.biz
ene-dev.aws.pmicloud.biz
ismsza-dev.eu-west-1.aws.pmicloud.biz
dev.elasticsearch.chatbot.pmicloud.biz
tngames.pmicloud.biz
ccia1-qa.aws.pmicloud.biz
iepm-qa.eu-west-1.aws.pmicloud.biz
*.java-api.chatbot.pmicloud.biz
egwafpm-qa.aws.pmicloud.biz
deep.vault-dev-dev.shared-services.eu-west-1.aws.pmicloud.biz
matillion-dev.pmicloud.biz
adzik-site.ene-dev.aws.pmicloud.biz
whfc-dev.eu-west-1.aws.pmicloud.biz
6ucyoj.ene-dev.aws.pmicloud.biz
dsvct-prd.eu-west-1.aws.pmicloud.biz
pse-dev.eu-west-1.aws.pmicloud.biz
rbvcyu.ene-dev.aws.pmicloud.biz
batchevents.dte.pmicloud.biz
casipadev.pmicloud.biz
websitefactory.pmicloud.biz
ismsre-prd.eu-west-1.aws.pmicloud.biz
gts.pmicloud.biz
qa.crm-sms.pmicloud.biz
xsczcr.ene-dev.aws.pmicloud.biz
y8kqcn.ene-dev.aws.pmicloud.biz
vpnprd.philipmorrisph.pmicloud.biz
ismsbr-prd.eu-west-1.aws.pmicloud.biz
cdra-qa.eu-west-1.aws.pmicloud.biz
rjuhim.ene-dev.aws.pmicloud.biz
vpnprd2.id-da.pmicloud.biz
webadmin.chatbot.pmicloud.biz
task.dte.pmicloud.biz
c2cbzq.ene-dev.aws.pmicloud.biz
*.ocean.pmicloud.biz
vits7u.deepatlapi-dev.eu-west-1.aws.pmicloud.biz
o9yzuv.ene-dev.aws.pmicloud.biz
fbsp2p-prd.eu-west-1.aws.pmicloud.biz
bde-ble.bbf-qa.aws.pmicloud.biz
matillion-dev.pmicloud.biz
www.cdt-dev.pmicloud.biz
pmftcc-dev.eu-west-1.aws.pmicloud.biz
tip.pmicloud.biz
svm57x.ene-dev.aws.pmicloud.biz
cjm.pmicloud.biz
wgkdci.ene-dev.aws.pmicloud.biz
dcxd-dev.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
qa.viber.dte.pmicloud.biz
gykenf.ene-dev.aws.pmicloud.biz
fbi-qa.eu-west-1.aws.pmicloud.biz
ssrs-dev.eu-west-1.aws.pmicloud.biz
saa-dev.eu-west-1.aws.pmicloud.biz
api.pfd-qa.eu-west-1.aws.pmicloud.biz
ene-dev.aws.pmicloud.biz
*.services.ocean.pmicloud.biz
ismshk-dev.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
vpnprd.nexthink.pmicloud.biz
pmjpisbi.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
csa.cyber.pmicloud.biz
marbph-dev.ap-southeast-1.aws.pmicloud.biz
elastics.chatbot.pmicloud.biz
mirrorpl.pmicloud.biz
*.services.ocean.pmicloud.biz
ow8fhw.ene-dev.aws.pmicloud.biz
juvo6k.ene-dev.aws.pmicloud.biz
mysite.pmicloud.biz
*.ua-ls.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
api-test.mozart-dev.aws.pmicloud.biz
wfiws-dev.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
csa-qa.eu-west-1.aws.pmicloud.biz
vpnqa.dwa.pmicloud.biz
adzik-site-terratest.ene-dev.aws.pmicloud.biz
oqoek6.deepatlapi-dev.eu-west-1.aws.pmicloud.biz
bensrq-qa.eu-west-1.aws.pmicloud.biz
chatui2.chatbot.pmicloud.biz
dev.batchevents.dte.pmicloud.biz
ihhvui.ene-dev.aws.pmicloud.biz
app.bbf.aws.pmicloud.biz
clipp-prd.eu-west-1.aws.pmicloud.biz
eipos.pmicloud.biz
pmplrose-qa.aws.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
7fihti.ene-dev.aws.pmicloud.biz
yeevzt.ene-dev.aws.pmicloud.biz
dyo.pmicloud.biz
kibana.chatbot.pmicloud.biz
ismsph-dev.eu-west-1.aws.pmicloud.biz

Certificate

The complete raw certificate details for 9awwbb.ene-dev.aws.pmicloud.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpfsRKoGYGk/oxnqDC0y
p/rw2Q7SoLD3Pg1Ezbx2K6YgvfP6jn03fUpmBNQ+59E4rA78Ja54rvfZ/tI1fT0i
ILGBBbt1pX2ewecf5NmvQbsq8OZFsTuzx6aRxO97FcJls95ArDkmzca2r3p5O7ld
pBfpbMUXnZtgjIgSGO5TMdNg8MI1Vpuk/z+Axq1DSx6ONeS/BELc3Sb15vhsBKPz
ffHxQEZIp1Ac4ge6oEVL7qBgY4tKqEIINY81APn7iR6bSFt55uCawjNEOOgNKhwp
7pQpR7p/XnXHxjiQlRxxH0JvGyNT3BE4pBuO5eYXeZQWG/MX6Nc90cv1LLQmijcY
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15947717928071493090133083315246649710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9awwbb.ene-dev.aws.pmicloud.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19515614950129154416507154189291639575524500927032711994059913173026809125487399067485949655314248696331822460395697964689757503102000040194465024185201539998130848669368287761738074503321031932015344914934187685704978606480991049906712457251666798220120016199431065429375798744725142618268526493384854191360902182176675351234241782600433550285787911859785421532734404115152577715007799990238010056065129684228249455304163394420749096080642537181466648250822402152316220493123228403403027871858501548451549230634358153998928715792893416110395576658653381903451825451726874500857869007108794717502803166134288998930659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e4c2371710a45f80c6127294517d62b25d04ce1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9awwbb.ene-dev.aws.pmicloud.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001643489942e7ee3ea9884326bb32a114b0671d90612ec82429ec00ae827cb260e43feb8dd51a5bc26aefaf7fae5b18b94180ddd7561f7896560aa2beacf2efdff2bb541291d2e586725164ec00ce0897eccf4a151d2b4035316347789c7032e84d4db0c08bf965a7082724eaf570f4716d56e93be795a024a5e77af6d939f70dbef0a445905b1208e95708f55ea39e197aa528c75eea9630ff3c80b5171b386e1475de4dea21afb6707902d227e5d482a8619487049071882bcb326294cd161a68c50e40210eace37743cb94874b56827dc432dda8fb9790e536bc81213ae1d5988dd80379ab82edf974fe0287bba96b7ab3219dbf34a90efed958538614764d