txodds-stage.awsdev.feeds.skybet.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 01:78:64:f7:59:d2:32:17:74:92:ec:d7:16:9a:35:35 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=txodds-stage.awsdev.feeds.skybet.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:78:64:f7:59:d2:32:17:74:92:ec:d7:16:9a:35:35
Serial Number (int): 1954351456923878225879324034585998645
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 53:e2:fd:eb:37:f5:c6:38:7a:f0:41:c7:e1:11:ba:d6:cb:33:ba:08
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 29:0e:24:5b:a8:33:9c:cb:66:b0:82:ff:4a:15:db:e5:b6:fe:cf:fe
Fingerprint (sha256): 02:1c:e9:64:2a:1b:63:92:45:ab:6c:a6:f3:4b:df:0b:47:7f:33:fe:5e:d0:e5:87:8c:f3:c1:92:72:d6:0f:6f

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate txodds-stage.awsdev.feeds.skybet.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for txodds-stage.awsdev.feeds.skybet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

txodds-stage.awsdev.feeds.skybet.com

Other certificates including the domain name skybet.com

(limited to 100 certificates)
affiliatehub.skybet.com
*.awsdev.feeds.skybet.com
test-abelson-feed-api.awsdev.feeds.skybet.com
www.skybet.com
txodds-stage.awsdev.feeds.skybet.com
st3.skybet.com
test.skybet.com
txodds-dev-crowthed.awsdev.feeds.skybet.com
support.skybet.com

ebm01.cheetahmail.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
affiliatehub.skybet.com
m.skybet.com

players.runningball.aws.feeds.skybet.com
entity-management-test.awsdev.feeds.skybet.com

dsu01-dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
txodds-dev-lse01.awsdev.feeds.skybet.com
txodds-stage.awsdev.feeds.skybet.com
ebm01.cheetahmail.com
txodds-dev-crowthed.awsdev.feeds.skybet.com
f.chtah.com
txodds-dev-uiq01.awsdev.feeds.skybet.com
*.awsdev.feeds.skybet.com
txodds-dev-lse01.awsdev.feeds.skybet.com
f.chtah.com
reporting.skybet.com
affiliatehub.skybet.com
push.skybet.com
stage-football-api.awsdev.feeds.skybet.com
management.test-football-api.awsdev.feeds.skybet.com
www.skybet.com
mft.skybet.com
st1.skybet.com
clearpass.skybettingandgaming.com
txodds.aws.feeds.skybet.com
push.skybet.com
push.skybet.com
eds.skybet.com
www.skybet.com
dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
playerlinking-test.awsdev.feeds.skybet.com
perf-football-api.awsdev.feeds.skybet.com
st3.skybet.com
txodds-dev-jho04.awsdev.feeds.skybet.com
aga02-dev-football-api.awsdev.feeds.skybet.com
dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
st1.skybet.com
secure.skybet.com
management.inttst-football-api.awsdev.feeds.skybet.com

inttst-football-api.awsdev.feeds.skybet.com
www.skybet.com

managementacademy.skybet.com
txodds-test.awsdev.feeds.skybet.com

txodds-test.awsdev.feeds.skybet.com
playerlinking-test.awsdev.feeds.skybet.com
f.chtah.com
*.awsdev.feeds.skybet.com
f.chtah.com
staging-abelson-feed-api.awsdev.feeds.skybet.com
txodds-stage.awsdev.feeds.skybet.com
skybetgroups.skybet.com
management.perf-football-api.awsdev.feeds.skybet.com
services.skybet.com
ebm01.cheetahmail.com
promocode.skybet.com
staging-abelson-feed-api.awsdev.feeds.skybet.com
txodds-dev-esp01.awsdev.feeds.skybet.com
f.chtah.com
txodds.aws.feeds.skybet.com
ccc.betfair.com
txodds-test.awsdev.feeds.skybet.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
entity-management-test.awsdev.feeds.skybet.com
skybet.com
txodds-test.awsdev.feeds.skybet.com
txodds-dev-esp01.awsdev.feeds.skybet.com
txodds-test.awsdev.feeds.skybet.com
services.skybet.com
*.staging.sbgservices.com
secure.skybet.com
www.skybet.com
skybetgroups.skybet.com
test-abelson-feed-api.awsdev.feeds.skybet.com
skybet.com

f.chtah.com
nxa.skybet.com
opta.aws.feeds.skybet.com
ebm01.cheetahmail.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
dev-abelson-feed-api.awsdev.feeds.skybet.com

Certificate

The complete raw certificate details for txodds-stage.awsdev.feeds.skybet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvSjbZf9yZwf/yVkG6EU
XQuSW3PlUh4Bd0zYOj3FZha0TFcu5Z4HQjPrwFX3S7Ya88H64wEYLljoRRnV15Kf
aALA8hAx7+nv/xjPIYjE9RZHEZ2OGvmZxkCFYgbNajz4KHXfAUa7LoFjqFpng5cb
pxlbHsWDYvLycwTmVcmQZrGI82Uoz00t4AQYg/3kQ4KC7bm5nKkLIdWA5NkxxDHb
1v/Dp92gwjBJg4SONXdAm/u0Vt3vxuAdGurZ70yuNWr7d4MUc3nTo9Jv4LzgZ5u4
U1ddiXrzVV0U7nspFPtYGeM24525BfKdiod0qvWv0UefDe6F0e8Msf8oKVeKxbLg
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1954351456923878225879324034585998645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'txodds-stage.awsdev.feeds.skybet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24105913630315436168649428806550014276585201662330498754540151826451639708897680946301778158844370094735382357965532309137859612913882519267072020188688905013617760902967629542199359848099702262204126511601232262106543914460801180876661398419953530525085644347022208818367298460954337900323453898685582965008781524923844112761253409781886718052691731577193238737403082310121058122715253312271857657905995912433732687164832051840527593331768614822170435379820918804992547209378652651803774400925170327446496009335907611686675838651972601814178371576906160635944646599962722577763174079228133125432784918125947510775931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53e2fdeb37f5c6387af041c7e111bad6cb33ba08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txodds-stage.awsdev.feeds.skybet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018e9c553beb0000040300473045022100c8a3d61779d29b92505e0a97c5e8790de6578664ec049e4888c3ec7f0499319f02207d758ef1832c9bd0f45659b941f438f5e5107461eddcd40bbb27bc5fc2368dd90077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e9c553bea0000040300483046022100d41b70142aa1662c5675e47677c5443b152d14f6dc69519b5e1533a074bd1596022100da2b78d495f555bc98df17057a75d50af13d30c28bf7518932469dc4b0db3cd7007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e9c553c0e000004030046304402206a587b56c6f00abd9bd1aedeb7080dd2b3de864c6a7a439f3a035a12e256174702206743dd3da67c23c84496d1c9ed8ed6b620925fcb01dbdf620bb8b36058e671f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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