canopy.rent

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:01:69:17:89:09:59:d4:59:86:4e:96:22:1c:98:74 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canopy.rent

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:01:69:17:89:09:59:d4:59:86:4e:96:22:1c:98:74
Serial Number (int): 18616515755514229187434563478845429876
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:4f:01:81:81:82:b5:5f:e3:63:8b:bc:13:77:57:fb:30:46:18:fc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ca:d6:cf:11:dc:8a:c9:04:ba:14:6e:2f:05:2f:cd:f6:72:83:09:f0
Fingerprint (sha256): 01:5f:23:c5:9e:5b:c3:4b:a1:9a:25:12:95:d5:53:8f:81:52:ce:38:4b:01:54:fc:2b:13:6c:68:eb:7e:22:c8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate canopy.rent

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canopy.rent

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canopy.rent
www.canopy.rent

Other certificates including the domain name canopy.rent

(limited to 100 certificates)
comercializadoracentral.com
energy.canopy.rent
www.audiocay.com
canopy.rent
help.canopy.rent
mezzolladev.com
retool.canopy.rent
app-uat.canopy.rent
botdeploy.io
www.everestgreenayur.com
api.plutuslabs.ca
ssl380325.cloudflaressl.com
hatechs.com
www.djeliba.com
eemaxtours.com
dreamteam.staging.canopy.rent
*.canopy.rent
beta.funfastfit.co
casaferrao.com.br
ar-upopoy.jp
hq-uat.canopy.rent
backend-prod.canopy.rent
contacthub-dialer.alertacall.com
www.canopy.rent
hq-uat.canopy.rent
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
www.deli.land
go.selva.boron.canopy.rent
ssl380325.cloudflaressl.com
*.canopy.rent
hydcal.me
www.alexmanzana.com
ssl380323.cloudflaressl.com
dev-links.resident.love
marcialdiaz.com
ssl380324.cloudflaressl.com
thinkers.developwithmaw.com
hq.staging.canopy.rent
www.la-bouilloire-verte.fr
etu.auron.fi
phoenix.auren.com.pe
ssl380325.cloudflaressl.com
api-uat.canopy.rent
communications.chief.systems
www.canopy.rent
www.odiledegraeve.be
ssl380324.cloudflaressl.com
www.canopy.rent
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
ditalipizzaria.lupi.delivery
willyou.watch
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
beta.hq.canopy.rent
ssl380324.cloudflaressl.com
app-uat.canopy.rent
www.canopy.rent
ssl380325.cloudflaressl.com
etu.auron.fi
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
kibana.canopy.rent
www.canopy.rent
www.la-bouilloire-verte.fr
backend-staging.canopy.rent
to-do-map.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
www.pridemap.eu
app-uat.canopy.rent
www.pridemap.eu
ssl380324.cloudflaressl.com
www.mehmetkose.com.tr
rabbiyisraeli.com
www.canopy.rent
oudon.xyz
ssl380325.cloudflaressl.com
www.canopy.rent
hq-prod.canopy.rent
link.otospector.co.id
canopy.rent
ssl380325.cloudflaressl.com
servir.shanemaglangit.com
energy.canopy.rent
ssl380324.cloudflaressl.com
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
canopy.rent
ssl380323.cloudflaressl.com
comercializadoracentral.com
www.canopy.rent
development.admin.canopy.rent
crm.kokos.co.nz
vpn-staging.canopy.rent
app.canopy.rent
marmitanaestrada.com

Certificate

The complete raw certificate details for canopy.rent in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw7keypwH+OpH1dl0vDF
slmzDvqCfynrzZTf8/QW/WFuUERrLgjOTZ7ynSQKsjXn2IIpiYqV1dViuKG5FfB8
a+1rg1q29weP/32jfBMV8GzpxxyAFwBwXP0yeksvmdxEKxYMbu6zCNw34Sbo354Z
/X7HxPnmtXEiAMxRS5np/SNyJMqeN/8JDghNc7fXk/Jlgs3PzPHGt1LsOHWiAGkx
zitZzGqIeitk5YMyxkBNgxL293P9v4NjMfOUUpnrTMbPqOZh5gTk8xDplfqgQDYc
/236T34YaJBKkUt27GvZzsLSzXGkQfDz9cNyh3Cqaw4FM/GiEJFpn/m8LyTVorob
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18616515755514229187434563478845429876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canopy.rent'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22099047136666415933501168257884442607612797726508443901866377922205029710531040957080472828864974195123177490427404545096542345519750261791251522931830209299725624662691909599409900184541782129188373516399871249979702253171466923240122438268643327211559487329023046451350245709258386504188199157138794313326589290335244676187231776509581865748799669834470648660074580023416598229395297766400427246106610544078013769579495422162778110788444741940660275325141517923921081028773626605659915125719059248288780340197017192384557617563501184167904192169082430086194461595879120007293026376579463430873628775748815583583229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd4f01818182b55fe3638bbc137757fb304618fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopy.rent'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canopy.rent'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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