reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:14:89:74:e9:00:4d:1c:a3:31:5b:62:0c:28:85:ca was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:14:89:74:e9:00:4d:1c:a3:31:5b:62:0c:28:85:ca
Serial Number (int): 18715825830852442145595847013166515658
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:54:4b:cf:67:a7:1a:c8:d8:18:bb:db:03:81:57:c2:67:95:97:d9
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): d4:a2:bc:22:8a:7c:6c:01:02:ee:33:6c:39:6a:54:67:4b:25:54:c6
Fingerprint (sha256): 02:a4:08:32:22:ff:c5:4d:dd:1e:96:74:5b:58:6c:28:a1:99:12:85:21:88:db:2e:8f:ed:63:b1:4b:60:31:90

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com

Other certificates including the domain name aveva.com

(limited to 100 certificates)
dev4.dashboard.dev-av.dev-connect.aveva.com
cdojam.import.dev-av.capdev-connect.aveva.com
aimprim.import.preprod-av.connect.aveva.com
ots.int-cep.connect.aveva.com
sjvcvxtr.alb.tr-av.connect.aveva.com
dev2.import.dev-av.capdev-connect.aveva.com
portal.services.test-connect.aveva.com
testrc.import.dev-av.dev-connect.aveva.com
techsale3.alb.demo-av.connect.aveva.com
internal.integrationstudio.capdev-connect.aveva.com
dev2.import.dev-av.dev-connect.aveva.com
mahtest.import.dev-av.capdev-connect.aveva.com
management.test-experience.test-connect.aveva.com
aimsec.api.report.preprod-av.connect.aveva.com
test.tpskc.r53.aveva.com
91287234589239034672357235790.dev-dbc.capdev-connect.aveva.com
demo.dev-connect.aveva.com
tpsknowledgecentre.aveva.com
gcsresource.AVEVA.COM
testrc.import.dev-av.capdev-connect.aveva.com
dynamicsimulation.int-cep.connect.aveva.com
appservice-sanity-vek33.dev-ue.capdev-connect.aveva.com
*.chp.capdev-connect.aveva.com
urs.aveva.com
sw.aveva.com
aav4812.dashboard.dev-av.capdev-connect.aveva.com
test-license.capdev-connect.aveva.com
ssl508503.cloudflaressl.com
dbc.connect.aveva.com
rdspre.api.import.imav.connect.aveva.com
evalema3.dashboard.salesdemo-pv.connect.aveva.com
*.statusdashboard.com
alpha-datahub-cdn.dev-datahub.capdev-connect.aveva.com
thacvxp.dashboard.preprod-av.connect.aveva.com
cdo2a.api.report.dev-av.capdev-connect.aveva.com
reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com
dp-capability.sg.dp.aim.capdev-connect.aveva.com
sw.aveva.com
processengineering.test-connect.aveva.com
rdssh2.dashboard.imav.connect.aveva.com
gateway.aveva.com
int-datahub-pbi-cdn.int-datahub.capdev-connect.aveva.com
dev8.import.dev-av.capdev-connect.aveva.com
ssl322849.cloudflaressl.com
bukoshe.import.salesdemo-pv.connect.aveva.com
cdn.int-datahub.capdev-connect.aveva.com
identity.aveva.com
jsnaima.api.import.dev-av.capdev-connect.aveva.com
ram-api.filetransfer.dev-ue.capdev-connect.aveva.com
prev.liveview.dev-insight.capdev-connect.aveva.com
dynamicsimulation.connect.aveva.com
online.wonderware.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
democvx.elb.tr-av.connect.aveva.com
pvtemp2.api.report.dev-av.capdev-connect.aveva.com
api.3d.pt.dev-fabtrol.capdev-connect.aveva.com
testop7.api.import.dev-av.capdev-connect.aveva.com
dev21.import.dev-av.capdev-connect.aveva.com
testop9.dashboard.dev-av.capdev-connect.aveva.com
dev-systemplatform.exchange.aveva.com
help.exchange.aveva.com
help.exchange.aveva.com
laxman-laas.dev-license.capdev-connect.aveva.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
*.avs.dev-aim.test-connect.aveva.com
capdev.connect.r53.aveva.com
infra-pbi-cdn.dev-datahub.capdev-connect.aveva.com
rdspre.api.report.imav.connect.aveva.com
ingestionapi-dpdemo.demo-av.connect.aveva.com
dev13.elb.dev-av.dev-connect.aveva.com
sni.cloudflaressl.com
access02.aveva.com
result-service.test-wse.test-connect.aveva.com
alpha-pbi-cdn.dev-datahub.capdev-connect.aveva.com
testavir.api.report.dev-aim.test-connect.aveva.com
babwas.dashboard.imav.connect.aveva.com
dev14.import.dev-av.capdev-connect.aveva.com
demorc.dashboard.dev-av.dev-connect.aveva.com
*.avs.tr-av.connect.aveva.com
testdev.import.dev-av.dev-connect.aveva.com
*.preprod-avs.capdev-connect.aveva.com
cdn.datahub.connect.aveva.com
avevaworld.aveva.com
mcbucvxtr.api.report.tr-av.connect.aveva.com
sni47348.cloudflaressl.com
ceros4.map.fastly.net
perf.dashboard.dev-av.dev-connect.aveva.com
*.aveva.com
mahtest.api.import.dev-av.capdev-connect.aveva.com
*.int-cep.connect.aveva.com
portal.services.connect.aveva.com
test-datahub-pbi-cdn.datahub.test-connect.aveva.com
dev3.alb.dev-av.dev-connect.aveva.com
mfg1cvx.import.imav.connect.aveva.com
design.aveva.com
dev9.dashboard.dev-av.dev-connect.aveva.com
bukoshe.alb.salesdemo-pv.connect.aveva.com
ceros4.map.fastly.net
*.statusdashboard.com
urs.aveva.com

Certificate

The complete raw certificate details for reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGTN6bOF8rkfau/MUfkf
1CFUf2dgXfAlNxwJ/fHuzRtCbO5s+DDPb3imSdN5tpvYvf9wkOtU7eXRcRRylVU0
P42rh258jxpY6qQN7X/DfVZ8KK5grnhN3yp65VquEe4+iWVV5g5f3sAagMtFU2pn
hGRlf4Q2Kc34/fY46WtF0ozjCOxRP3/zZKOQQGBr/C18Sw0nOEqIRdfm3r9k6IBW
DGuk2RFJzz9GuR4m8Xov84upy1XL5RvCPJjOLzxsMNFksx8so/NIlrs2k6K3m43g
49HozBGEn1YEf9LmkuLvGoVi8kHGsA+C+xr90/77RTwn/ozQ/GMjzSRBxsLQrUh5
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18715825830852442145595847013166515658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24287463029771660189800620312519132671747689273622598357373634023292928314445735770767542006590910505249444804988825867947487900076063708659058075893504173492374984588721858639832745960465908636862566097523579979375867217126839491507225782292532668811737224390297482304656684969788605528541757996288568082225404052194212692275333095848021251382856377828914393492281485428544692007852274673902486263170025648261088615310030289451894134536582346262800972416120087487439260077791712214218454310649932022422847344638779363242003136265128390418940895245534580359229354778822493180462550663352499493648444780030560924367113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61544bcf67a71ac8d818bbdb038157c2679597d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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