test4.dataops-marketing-preprod.aws.anwb.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:3f:c9:f8:51:83:33:19:32:e4:81:05:9a:11:f2:80 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test4.dataops-marketing-preprod.aws.anwb.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:3f:c9:f8:51:83:33:19:32:e4:81:05:9a:11:f2:80
Serial Number (int): 9635807110723639157659900327996027520
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:13:bf:11:c7:01:c6:9a:e0:c9:17:e1:44:85:d2:70:89:ce:0c:14
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 92:92:25:cd:9b:a1:24:66:81:5e:63:71:66:78:41:f7:e0:90:a6:2f
Fingerprint (sha256): 02:9a:77:69:33:a5:40:12:8e:cb:35:8b:97:76:e5:2d:ec:c5:01:51:85:d1:14:fe:8d:f2:c4:a2:70:a0:a5:6a

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate test4.dataops-marketing-preprod.aws.anwb.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test4.dataops-marketing-preprod.aws.anwb.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test4.dataops-marketing-preprod.aws.anwb.cloud

Other certificates including the domain name anwb.cloud

(limited to 100 certificates)
test-offerapi3.dataops-marketing-test.aws.anwb.cloud
v25.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
apps.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
test4.dataops-marketing-preprod.aws.anwb.cloud
vdd.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
test3.dataops-marketing-test.aws.anwb.cloud
test3.dataops-marketing-test.aws.anwb.cloud
*.int.istio.playground.online.anwb.cloud
test3.dataops-marketing-preprod.aws.anwb.cloud
v48.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
yormenisbriljant.internet-shared.aws.anwb.cloud
istio.playground.online.anwb.cloud
*.c1.playground.online.anwb.cloud
test-offerapi6.dataops-marketing-test.aws.anwb.cloud
*.int.c1.playground.online.anwb.cloud
api.hv-verkeerseducatie-dev.aws-public.anwb.cloud
partspoint-dev.hv-wegenwacht-dev.aws-public.anwb.cloud
author-api.hv-verkeerseducatie-dev.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
test3.dataops-marketing-preprod.aws.anwb.cloud
*.hv-tools.aws.anwb.cloud
apim-kong-dev.internet-shared.aws.anwb.cloud
*.int.istio.playground.online.anwb.cloud
v6324f8ba.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.runners.tooling.online.anwb.cloud
v5b.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps.main.dev.online.anwb.cloud
cname-testing.finance-dev.aws.anwb.cloud
test-sparx-webhook.hv-alarmcentrale-test.aws.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.hv-tools-dev.aws.anwb.cloud
apps.c1.playground.online.anwb.cloud
test3.dataops-marketing-preprod.aws.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
author.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.eks.tooling.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
istio.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
test3.dataops-marketing-test.aws.anwb.cloud
*.int.runners.tooling.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
apps.main.tooling.online.anwb.cloud
apps.main.playground.online.anwb.cloud
apps-ws.monitoring.tooling.online.anwb.cloud
v4e.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
istio.playground.online.anwb.cloud
v5a9e6da1.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
cname-testing.finance-dev.aws.anwb.cloud
test4.dataops-marketing-preprod.aws.anwb.cloud
*.c1.playground.online.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
apps.monitoring.tooling.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
ve7.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
istio.playground.online.anwb.cloud
apps-ws.main.dev.online.anwb.cloud
*.hv-alarmcentrale-test.aws.anwb.cloud
*.datascience-external-preprod.aws-public.anwb.cloud
*.int.eks.dev.online.anwb.cloud
apps-ws.main.tooling.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
v0754688457.author.hv-verkeerseducatie-dev.aws-public.anwb.cloud
vehicle-data-ft-0.hv-cardata-dev.aws-public.anwb.cloud
test4.dataops-marketing-test.aws.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps.main.tooling.online.anwb.cloud
apps-ws.main.dev.online.anwb.cloud
*.int.eks.dev.online.anwb.cloud
apps-ws.eks.dev.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
cname-testing.finance-dev.aws.anwb.cloud
ve3.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.c1.playground.online.anwb.cloud
author.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.int.eks.dev.online.anwb.cloud
*.c1.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
event-platformpjm.datahub-test.aws.anwb.cloud
istio.playground.online.anwb.cloud
test-offerapi.dataops-marketing-test.aws.anwb.cloud
*.int.istio.playground.online.anwb.cloud
intgrtn-tst-epl.datahub-test.aws.anwb.cloud
va6.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
atcar-affiliate-bucket-bb.datahub-pub-test.aws-public.anwb.cloud
apps.c1.playground.online.anwb.cloud
partspoint-sko.hv-wegenwacht-dev.aws-public.anwb.cloud
*.k8s.dev.online.anwb.cloud

Certificate

The complete raw certificate details for test4.dataops-marketing-preprod.aws.anwb.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwoJ44TyONQktAu3IGhk
Q9KHcT11WbYUyFPZxLgasoLijtsdsZ/bK+NkCGYiePGjw/ocTKKKYgHxp0cx9cF7
hJekJXsFsdcU/nMGAmRLK30NoQSecyFKip8haKYOgeGKLYNZMSHyq30DQ0SkqEKF
Tb9ZeSO2mt3Sg9wTNE87T1OlTtwMJb8TklTWeAcFbh8tIp4GaqeTJz/tPJZwWMlV
np6wJAA82gka1+8k3hhATloSDQ1sxjCAmE45Bv1n43VZxiZ7RhJyfuuWKCS6Dke9
uDn5TPBpM/bHCPPbvoqavlX6RvPzLdpI92RobPRno9G2oUEUnqXEkpQ0o8QBx1Sr
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9635807110723639157659900327996027520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test4.dataops-marketing-preprod.aws.anwb.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18057027842071073579043288587070990330025316231097099142124368078318709305941505014244094174431410038357835156152439557972833356289457703386463680324415151087529399853862441381592168861727995057242517070808624240996310404506112454504735738308949190508844755944071870383387317812216382813720501457862763762076675397720154182967524800401292551556070877739662619874924143151006986289326998408134391485072967628146745919710390175851556051049003331164721017296222755059480026094664356789317923342833827773509251844298511854868999240819293064058099791966586411165694636362438856651582527952875816810257564452049658007825249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7213bf11c701c69ae0c917e14485d27089ce0c14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.dataops-marketing-preprod.aws.anwb.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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