dashboard.app-protect.trendmicro.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:cf:ea:c0:69:fa:45:4f:7f:41:37:7f:44:6c:d4:5e was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dashboard.app-protect.trendmicro.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:cf:ea:c0:69:fa:45:4f:7f:41:37:7f:44:6c:d4:5e
Serial Number (int): 14371846736018810073670565634595673182
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:0f:27:19:5e:af:6e:91:65:d5:3e:91:6b:86:d3:18:cf:d7:cc:85
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bc:b7:e4:8d:ce:03:2e:69:ed:df:63:30:ba:4b:0f:29:6a:a7:de:e5
Fingerprint (sha256): 01:aa:b0:c1:fa:df:dd:df:e3:b2:43:cf:7e:27:ef:77:a8:be:8e:ce:8a:9a:0a:34:b4:94:ac:b9:92:1c:3b:0f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate dashboard.app-protect.trendmicro.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dashboard.app-protect.trendmicro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dashboard.app-protect.trendmicro.com

Other certificates including the domain name trendmicro.com

(limited to 100 certificates)
sec-adv.trendmicro.com
sls-xdrrxrs131test.dev-us-east-2.parsley.trendmicro.com
*.storage.trendmicro.com
*.trendmicro.com
tmx.trendmicro.com
int.sspm.trendmicro.com
prdu-selectsupportemea.trendmicro.com
vanity3.lithium.com
sam.trendmicro.com
contacts.gb-1.cloudone.trendmicro.com
europeb2bstg.trendmicro.com
*.trendmicro.com
*.etdl.trendmicro.com
xdr.nacloud.trendmicro.com
filestorage.sg-1.dev-cloudone.trendmicro.com
*.eks.trendmicro.com
file-uk.trendmicro.com
sec-adv-admin.trendmicro.com
twcommercial01.jenkinsci.trendmicro.com
network.in-1.cloudone.trendmicro.com
vanity7.jiveon.com
*.p1rd1.sps-endpoint-beta.trendmicro.com
newsletters.trendmicro.com
p225b2.dev-us-east-2.parsley.trendmicro.com
renewonlinestg.trendmicro.com
audit.trend-us-1.cloudone.trendmicro.com
devops-jenkins-pci.luwak.trendmicro.com
doctorlevel.trendmicro.com
www.trendmicro.com
misp.research.trendmicro.com
*.prod-eu-central-1.wfxdr.trendmicro.com
stg.fbbot.tmcc.csoc.trendmicro.com
vault-stg.trendmicro.com
liberalapi-tmp.sdi.trendnet.org
tableau-consumer.trendmicro.com
documents.trendmicro.com
*.trendmicro.com
iotserver-staging.trendmicro.com
newsroom.trendmicro.com
*.iws.trendmicro.com
*.osscan.trendmicro.com
*.alpha.consumervpn.trendmicro.com
tmpn.trendmicro.com
*.auth.trendmicro.com
intsearch.trendmicro.com
vanity4.lithium.com
ocm-it.br.secops.trendmicro.com
*.dc1.beta.storage.trendmicro.com
trendeorders-emea-staging.trendmicro.com
*.giss.trendmicro.com
doctorone.baplsstage.trendmicro.com
*.appletuner.trendmicro.com
cloudresources.jp-1.cloudone.trendmicro.com
gwctrlp179b19.us-1.c1-gravity-dev.trendmicro.com
dashboard.app-protect.trendmicro.com
*.giss.trendmicro.com
data.analytics.trendmicro.com
*.login-stg.trendmicro.com
projects.us-1.cloudone.trendmicro.com
tmcc.trendmicro.com
accounts.trend-us-1.dev-cloudone.trendmicro.com
licenseupdate2.trendmicro.com
sjc1-rdpgw1.trendmicro.com
cli.artifactscan.cloudone.trendmicro.com
sdl-int.visionone.trendmicro.com
au-phase.activeupdate.trendmicro.com
sls-xdrrp190b8.dev-us-east-1.parsley.trendmicro.com
premiumservices.trendmicro.com
*.manage.trendmicro.com
cloudaccounts-ui-us.xdr.trendmicro.com
api.securityportal-stg.trendmicro.com
*.beta.consumervpn.trendmicro.com
go2.trendmicro.com
gpt-playground-plugin-jp.trendmicro.com
*.jarvis.trendmicro.com
projects.au-1.dev-cloudone.trendmicro.com
*.consumervpn.trendmicro.com
*.trendmicro.com
*.fbt.trendmicro.com
conformity.us-1.staging-cloudone.trendmicro.com
sslauto.itdev.trendmicro.com
dispatch01.trendmicro.com
gateway.us-1.c1-gravity-dev.trendmicro.com
iamservice.trendmicro.com
event-forwarder.ca-1.cloudone.trendmicro.com
siteseal01.trendmicro.com
*.stag.mgcp.trendmicro.com
ctf.trendmicro.com
cloudaccounts.in-1.cloudone.trendmicro.com
*.ml-tool.trendmicro.com
nsva.network.us-1.dev-cloudone.trendmicro.com
us.imhs-ws.trendmicro.com
*.trendmicro.com
corpit-dispatch.trendmicro.com
deepsecurity.trendmicro.com
artifactscan.us-1.cloudone.trendmicro.com
*.trendmicro.com
*.p1qa2.sps-endpoint-beta.trendmicro.com
*.isday.trendmicro.com
*.devhw.sps-endpoint-beta.trendmicro.com

Certificate

The complete raw certificate details for dashboard.app-protect.trendmicro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSk2DeQS+MoF2uYWRYuI
S/TRAqXsQeKW7wrJWKOr3gMOTMgzRZ5/mONsUU4Kd7GHRoCd6S/a0rgqFw6SXOwp
PAAguRkJOwTu26/LlX+8zAQI9qKhpP8UEyLAMo1Cftlx6lydOZS8/rDnahfvYwSc
SA/suR9yJzgl6VIbOkyAr5y+HFu6cbCO7LFPU+uYkM+Ad4CzlKA/8UWI0SYM58KC
Zk7Eaeh/pSczPOmgDL6XD6/THJhxM6xqxsOaENLKIYo55WLQpW/HuPcK5VU4V7Cy
dU45GzjtJWBk9ibEw9WWggXt2fWPsCyz5x6h42LhGB2dPoA+7X/wn2oNtmeYT6yy
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14371846736018810073670565634595673182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dashboard.app-protect.trendmicro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24889268053521940159033380458651162885378545085558169100034778217118158858654255737598293485606967213477691586654497701340071338012755776505489931408073998597154449921103870092341613387001158124796080035220145383228332037768767642581333955582113290650892502771620936464029202808273247063192692427243770979623752216455433723941036938063009008278537740539526965482797624822105630585239183346705414258611609011830150223240130376635657409075443361519564376695956761288825601499603497555840046807539515913229885558430187640793803589629853102988590272859280219933398498940707215885462316615626966408965586421968753247695589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd0f27195eaf6e9165d53e916b86d318cfd7cc85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.app-protect.trendmicro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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