knowledge-base.inspire.ec.europa.eu

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:11:25:b8:f6:d5:b0:eb:45:f5:cf:f6:32:85:e9:ed was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=knowledge-base.inspire.ec.europa.eu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:11:25:b8:f6:d5:b0:eb:45:f5:cf:f6:32:85:e9:ed
Serial Number (int): 9393630120618390008611280433982073325
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 91:92:39:3a:f3:5c:ae:93:8e:72:8b:13:a2:66:54:0e:a8:ee:3a:63
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): bc:2b:21:0c:cb:59:ad:f3:ca:af:39:2a:d7:8b:98:c0:e4:ef:65:18
Fingerprint (sha256): 01:cd:7d:4e:86:59:26:dd:82:cf:35:6d:b6:f0:26:1f:da:65:be:d4:93:38:e4:9e:50:01:3e:39:af:fd:ad:74

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate knowledge-base.inspire.ec.europa.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knowledge-base.inspire.ec.europa.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

knowledge-base.inspire.ec.europa.eu
*.knowledge-base.inspire.ec.europa.eu

Other certificates including the domain name europa.eu

(limited to 100 certificates)
cpvoextranet.cpvo.europa.eu
www.cmfb.europa.eu
esubweb-xcomp.ema.europa.eu
*.frontex.europa.eu
nuclear.jrc.ec.europa.eu
acc.nsl.consilium.europa.eu
prd.frontex.europa.eu
www.easa.europa.eu
vaccination-info.eu
www-s.eige.europa.eu
cyclone.enisa.europa.eu
www-s.eige.europa.eu
ews.eeas.europa.eu
connect19.ca
portal.europol.europa.eu
staging.cedefop.europa.eu
5691420614590464-fe3.pantheonsite.io
clearinghouse-oef.jrc.ec.europa.eu
a-sdw-wsrest.ecb.europa.eu
dns-vetting1j.map.fastly.net
rvd.ema.europa.eu
a-procurement.ecb.europa.eu
fmapps.ema.europa.eu
monthlyanalysis.frontex.europa.eu
euctis-preprod.ema.europa.eu
bauth1.europarl.europa.eu
euctis-uat2.ema.europa.eu
mail.frontex.europa.eu
cbs.easo.europa.eu
nirvana.f4e.europa.eu
erc.europa.eu
sealingservice.grants.ec.europa.eu
a-talent.ecb.europa.eu
*.in.ep.europa.eu
r2.shared.global.fastly.net
odin.jrc.ec.europa.eu
idm.f4e.europa.eu
circulareconomy.europa.eu
opmd.publications.europa.eu
dev.edpsweb.edps.europa.eu
eulisa.europa.eu
eudravigilance-human-training.ema.europa.eu
sip.cepol.europa.eu
cyclone.enisa.europa.eu
test-eguides.osha.europa.eu
*.eeas.europa.eu
knowledge-base.inspire.ec.europa.eu
team-europe-partners.network.europa.eu
fch.cust.concepto.ch
*.euipo.europa.eu
cti-chat.enisa.europa.eu
webmail.eca.europa.eu
mobiledw.tech.ec.europa.eu
setis.ec.europa.eu
alumni.europa.eu
stsext.ema.europa.eu
*.stress.ec.europa.eu
biodiversity.europa.eu
us-server2.cedefop.europa.eu
mobile.tech.ec.europa.eu
r2.shared.global.fastly.net
edps.europa.eu
e3p.jrc.ec.europa.eu
eudragmdp.ema.europa.eu
bi.ema.europa.eu
nexus.cis.consilium.europa.eu
cbrne.jrc.ec.europa.eu
owa.ema.europa.eu
aula.frontex.europa.eu
*.fra.europa.eu
*.discomap.eea.europa.eu
a-cms2-ro.ecb.europa.eu
organised-crime-corruption-track-record.ec.europa.eu
sip.era.europa.eu
r2.shared.global.fastly.net
webanalytics.acc.fpfis.tech.ec.europa.eu
ssl861147.cloudflaressl.com
dns-vetting1j.map.fastly.net
webstats.eit.europa.eu
cewe1.eurojust.europa.eu
e3p.jrc.ec.europa.eu
a-www.ecb.europa.eu
5691420614590464-fe3.pantheonsite.io
enet.cepol.europa.eu
*.cedefop.europa.eu
SafeOnWeb.eurofound.europa.eu
www.eit.europa.eu
jt.ec.europa.eu
list.aasc.europa.eu
pgateway.ema.europa.eu
eit.europa.eu
restricted.eurojust.europa.eu
*.cooperation.enisa.europa.eu
esvac-test.ema.europa.eu
esm.europa.eu
epwa.europarl.europa.eu
*.frontex.europa.eu
isportal.berec.europa.eu
sip.eib.org
economic-policy-committee.europa.eu

Certificate

The complete raw certificate details for knowledge-base.inspire.ec.europa.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueHW4g1Vi4359DqEhpnZ
5dcMWaevly9+xOKbRHBRLM2U9isWbBjBfoI2Ej6FLRcj7Q5aHVN3sYljPdlsTY9t
0qu8TpVI+DDGbZ4NYhaetu4/t3FUwwd3tCnwONUJhVFJCz7bHjvGi08Z8PlLARMF
5rbPGuWVPxzryIkxdkF72q5HOzylZSW4sjTOYF7tk5AYhKrc5INNYOG/ZDLy9yJo
nGAMKlTLiZh+y1j7yZAHlapAm65tFkaGqrqUkaJdgfVAFH8PoO4NY3pxJb7CB2HM
R0H1CMO0o7FPIUWz2eh6+NvjG0gsge9D53KAvhq5GNqd2U3VwLe9TRqaLl6+JYSP
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9393630120618390008611280433982073325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knowledge-base.inspire.ec.europa.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23465451970993583135559198756270974691663242635860703463310138701096355695088862418944741624374476605920424305691920959829565327691926836324785298402514958375219332781017877112821104939214597112869186201337604749145185379665180949234248889173394908839298490035358214324940340031705297817693795132451896417565732662743925208365140771835693438491037043171637758301343816091875968913087829333673039296038645618318045488808459418125802269337097151785211844671278092593084740828752222887708716257507105838313196309889995906956711283308693772558445769856529774697974303331821261490201403368164643658676704606892272411512763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9192393af35cae938e728b13a266540ea8ee3a63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge-base.inspire.ec.europa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowledge-base.inspire.ec.europa.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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