atr-test-ios-rerun2.qa.teladoc.io

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:03:36:79:6d:d7:2a:e9:9f:8b:3f:14:92:a3:3c:d7 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=atr-test-ios-rerun2.qa.teladoc.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:03:36:79:6d:d7:2a:e9:9f:8b:3f:14:92:a3:3c:d7
Serial Number (int): 4004365748650601288508513934588984535
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 52:78:97:a2:5c:db:c1:f7:5e:3b:93:ed:0f:e1:cf:db:25:be:6b:ba
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 68:1b:22:7e:03:49:5b:fe:cf:c8:9b:47:b6:19:95:2c:29:56:45:47
Fingerprint (sha256): 01:ad:ba:ad:84:fb:06:29:e7:ba:dd:8f:a4:41:30:e8:80:de:c9:92:48:f2:4b:90:6e:23:ab:0a:46:f3:1a:cf

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate atr-test-ios-rerun2.qa.teladoc.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atr-test-ios-rerun2.qa.teladoc.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atr-test-ios-rerun2.qa.teladoc.io
*.atr-test-ios-rerun2.qa.teladoc.io

Other certificates including the domain name teladoc.io

(limited to 100 certificates)
erx-release-sangria-2-builder.qa.teladoc.io
softserve.teladoc.io
qa.teladoc.io
softserve.teladoc.io
pod4-june-8-offcycle-3.qa.teladoc.io
softserve.teladoc.io
cms-demo-usa.dev.teladoc.io
os-email2.qa.teladoc.io
qa.teladoc.io
lmex-277-2112-01.qa.teladoc.io
lmex-bp-393-1212-01.qa.teladoc.io
feature-mhs-561-001.qa.teladoc.io
master.qa.teladoc.io
manual-reg01.dev.teladoc.io
dev.teladoc.io
test-prem-web2.qa.teladoc.io
redesign-cxp-backup.qa.teladoc.io
astea.teladoc.io
pcdi-1820.qa.teladoc.io
cc-toggleon-run.qa.teladoc.io
nm-mes-11.uat.teladoc.io
vpc-9357-rerun-red.qa.teladoc.io
mvp-8176.integration.teladoc.io
dev.teladoc.io
dev.teladoc.io
qa.teladoc.io
rel7837.qa.teladoc.io
mester-vas.uat.teladoc.io
pcdi-test.uat.teladoc.io
qa.teladoc.io
integration.teladoc.io
q14-web.dev.teladoc.io
op.qa.teladoc.io
champs-156.qa.teladoc.io
kustomize-5383-legacy.corek8s.teladoc.io
rfv-int.dev.teladoc.io
vpc-3376-one.qa.teladoc.io
chg745-2.uat.teladoc.io
titans-pclm-pre-integration-010.qa.teladoc.io
omni-dec14-rel-1.uat.teladoc.io
qa.qa.teladoc.io
uat-spe-stag11.uat.teladoc.io
master-gmc2.qa.teladoc.io
release-7392-android.uat.teladoc.io
hln1.qa.teladoc.io
dec11-atr-oneapp-web.qa.teladoc.io
cxp-master-4.qa.teladoc.io
qa.teladoc.io
redesign-master-06-12-2023.qa.teladoc.io
canada-tuna4.uat.teladoc.io
mgbrav-105-monday-maya.uat.teladoc.io
astea.testclustercapacity.teladoc.io
omni-release.uat.teladoc.io
astea.teladoc.io
queue-2023-05-25.qa.teladoc.io
qa.teladoc.io
amh551.qa.teladoc.io
rel-9358.qa.teladoc.io
dev.teladoc.io
softserve.teladoc.io
astea.teladoc.io
astea.teladoc.io
dei-853.dev.teladoc.io
titans-pre-int-02.dev.teladoc.io
june-8-omnibus.omnibus.teladoc.io
full-calims-at-rerun07-qa.qa.teladoc.io
cqsrv-can.qa.teladoc.io
chg-1030-leg3.uat.teladoc.io
atr-test-ios-rerun2.qa.teladoc.io
omni-oneapp.omnibus.teladoc.io
release-7440-websdk-atr2.qa.teladoc.io
qa.teladoc.io
softserve.teladoc.io
release8009benko3.qa.teladoc.io
mgbrav-827.dev.teladoc.io
helm-5379-ios-member.qa.teladoc.io
integration.teladoc.io
lab-network-selection-demo-0206-01.qa.teladoc.io
dev-provider-mysql-3.dev.teladoc.io
rte-3101.uat.teladoc.io
rerun-8726.qa.teladoc.io
cqsikv-cqs15.qa.teladoc.io
pli-4539.qa.teladoc.io
hhs-can-group.dev.teladoc.io
websdk-cxp-integration.qa.teladoc.io
vb-exp22.qa.teladoc.io
cxp25.dev.teladoc.io
qa.teladoc.io
nononeapp9.omnibus.teladoc.io
dev-new-re-run-omni.dev.teladoc.io
stab-233-legacy-3-5.uat.teladoc.io
health-record-revert-to-english.dev.teladoc.io
master-can.qa.teladoc.io
omni-qa.qa.teladoc.io
acc-test-careplan.dev.teladoc.io
vpcni.teladoc.io
astea.teladoc.io
master-pwpi-9.qa.teladoc.io
vpprivate.teladoc.io
engaged-member-improv-copy.dev.teladoc.io

Certificate

The complete raw certificate details for atr-test-ios-rerun2.qa.teladoc.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFTY/EaqoSo4aHGmyC4q
/tPhTndmvrDeGjUYJoIQYKQPL20OH5sHeBtnojFGPDlT/QyGdqbxVz0X7bSCRskL
yycnQRv0eK14W3/1zW6/x3yVPF7PiDtKnu46ztltTLk5QzOHp10+ImGg9TXPdGPi
u2LHBTKNiqdsv0jeaIKK1J/IEpfjxfFuN8EbeKBel4W0jzoyQwLCYbHSIewSMFNl
1/8xI9mKiXh9Bua10eH5FlAnnzuqw2rXzvMF35nuXsEXHxmo3VkHkbp1Kb47fNmm
DQIkY0gHfvXa4l2/3oNlbLdbaC50xKxsFwSMOi1eO4DjTyQwojd4vr+mXY97HLXc
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4004365748650601288508513934588984535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atr-test-ios-rerun2.qa.teladoc.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23774641244291249747809610416874955097078229915482893285827976446908535653173256347930892537430232049400738736506052074839731169462483651602962440010475772085458955980743628850373246604140854025391290790576098932796191478008217538231550239653016603873848623574050470494028027464439804742339649661769201346040392958689687057063734271748500078293396186970211349558444841845101394151225539670451124166345035520692892903568782912615795539127352446438648235386027605348593312606714025667349725475958509194872821236616546225199542425219089568161875362714094067301267778573809652973682122016307610948947941060347668572003389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							527897a25cdbc1f75e3b93ed0fe1cfdb25be6bba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atr-test-ios-rerun2.qa.teladoc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atr-test-ios-rerun2.qa.teladoc.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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