*.product-aws-prod.nl.lexis.com

- RELX INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 55:0b:b5:85:55:23:a2:f5:49:07:50:e2 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

RELX INC.

Organization: RELX INC.
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 55:0b:b5:85:55:23:a2:f5:49:07:50:e2
Serial Number (int): 26320381226715379263466852578
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 29:e3:71:30:ac:f0:86:0d:36:7e:87:d0:7b:2f:01:6b:2d:bd:fc:05
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 56:b0:d5:c8:d8:e6:1b:17:22:19:84:1e:24:25:b5:34:55:62:c4:f7
Fingerprint (sha256): 03:0e:ea:3b:66:ea:1b:6c:bc:48:9a:f6:51:58:18:5d:8e:04:1a:28:89:c3:a7:0d:dc:94:d3:94:69:d4:89:01

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.product-aws-prod.nl.lexis.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.product-aws-prod.nl.lexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.product-aws-prod.nl.lexis.com
*.lexis.com
*.lexisnexis.com
*.nl.lexis.com
product-aws-prod.nl.lexis.com

Other certificates including the domain name lexis.com

(limited to 100 certificates)
risk.lexis.com
*.product-aws-prod.nl.lexis.com
risk.lexis.com
*.business.aws.lexis.com
*.content.aws.lexis.com
*.product-aws-prod.nl.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.content.aws.lexis.com
*.lexis.com
*.ndp.use1-prod1.searchplatform.nl.lexis.com
*.search.fos3.nl.lexis.com
*.prod3-searchplatform.nl.lexis.com
*.lexis.com
analytics.plus.lexis.com
r3.lexisnexis.com
*.lexisai.aws.lexis.com
test.stage.analytics.plus.lexis.com
*.route53.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.globalplatform-nonprod.route53.lexis.com
*.nl.lexis.com
*.monitoring-dev.nl.lexis.com
www.lexis.com
*.monitoring-tr-dev.nl.lexis.com
test.litelytics.analytics.plus.lexis.com
*.content.aws.lexis.com
*.business.aws.lexis.com
*.content.lexis.com
*.monitoring-dev.nl.lexis.com
*.recentactivity.route53.lexis.com
*.route53.lexis.com
r3.lexisnexis.com
*.content.aws.lexis.com
*.lexis.com
*.product-aws-dev.nl.lexis.com
lexmachina.advance.lexis.com
*.messsenger.route53.lexis.com
*.product-aws-prod.nl.lexis.com
*.route53.lexis.com
*.lexisai.aws.lexis.com
lexisnexis.com
*.content.aws.lexis.com
*.fos.nl.lexis.com
*.tools.aws.lexis.com
*.cert.nucleus.lexis.com
analytics.plus.lexis.com
*.ndp.use1.dev-searchplatform.nl.lexis.com
*.lexisnexis.com
r3.lexisnexis.com
nucleus.lexis.com
*.cdc1c-uk-hotdocs-advance.route53.lexis.com
analytics.plus.lexis.com
*.content.aws.lexis.com
test.stage.analytics.plus.lexis.com
lexmachina.advance.lexis.com
*.globalplatform.route53.lexis.com
guidance.lexis.com
*.content.aws.lexis.com
r3.lexisnexis.com
az-prawebcert.r3.lexis.com
*.content.aws.lexis.com
test.litelytics.analytics.plus.lexis.com
*.business.aws.lexis.com
r3.lexisnexis.com
*.api-dev.route53.lexis.com
*.cdc1c-hotdocs-advance.route53.lexis.com
*.lexis.com
*.ndp.use1-prod2.searchplatform.nl.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.content.aws.lexis.com
nucleus.lexis.com
*.lexisai.aws.lexis.com
*.content.aws.lexis.com
r3.lexisnexis.com
test.stage.analytics.plus.lexis.com
guidance.lexis.com
*.jcite.route53.lexis.com
*.lexisai.aws.lexis.com
*.content.aws.lexis.com
risk.lexis.com
api-prod.route53.lexis.com
origin.lexis.production.ln-production.brightspot.cloud
*.lexisai.aws.lexis.com
*.content.aws.lexis.com
*.business.aws.lexis.com
*.nl.lexis.com
*.business.aws.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.product-aws-prod.nl.lexis.com
test.stage.analytics.plus.lexis.com
*.search.use1-prod3.fos3.nl.lexis.com
*.courier-deliveryor.route53.lexis.com
*.content.aws.lexis.com
*.search.fos.nl.lexis.com
*.rtis.aws.lexis.com
liamattersdev.lexis.com
*.content.aws.lexis.com
*.route53.lexis.com
*.content.aws.lexis.com
risk.lexis.com

Certificate

The complete raw certificate details for *.product-aws-prod.nl.lexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUunND0t5+MSldYdUwbU
JDajK557RO+wiIY7yzh/zwwrqzhbhW5dKIXZJxaIzFkxOUC4jJyAF478M1ov3dPF
U6KEgxXHnvmWzaKc3iiei6NGUNb1lXb0oNlTvoMvvUjNiG58AzbhRfchD4mcppsI
Ikse/oIwr89ySy75oFBukv1SMEgznTxze3QVmEI/l8FLvY3oaEnBh6i06m9RAEwV
Tu8LZiF+/zVV/sDfH4W8t9xY4vji5YjHEiTGOG3hwvSRkV/zoEJ6+IY/g01kEuPB
ZyDcVCgSB84lodKJpqcYQMjWH8AOgtojzgOhhTv8jyYPxwWaP5HxFgOZ5esqovxL
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26320381226715379263466852578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 16:11:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-19 16:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RELX INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.product-aws-prod.nl.lexis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25411205252344647554047605511616059171586417760690299536487450563369085364028510102730673146260242352712684674575233613473210205672377800139629785584997459130344475607820722588508635879636648936972160227662348356863590832857034269892495505635983987981647399926952771609885932860619380888709685733040340242513016756039624175267410670121088478376942334477273021615557243462542243762167585590999170402238706897757861789734222617720161941582330106498437497659951753438264772501636642127107141723378615033187668721477203711270827347532105829058309690703896078948291900337906377217712256010624853424997184038034901584071547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.product-aws-prod.nl.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nl.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product-aws-prod.nl.lexis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29e37130acf0860d367e87d07b2f016b2dbdfc05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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