martin-ghost1.dev.area9lyceum.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:c7:b5:9a:74:df:7b:f7:31:24:70:e7:6b:55:26:cb was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=martin-ghost1.dev.area9lyceum.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:c7:b5:9a:74:df:7b:f7:31:24:70:e7:6b:55:26:cb
Serial Number (int): 7683090407218735219665676726082807499
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9d:5e:72:98:9e:ab:6e:b7:fa:30:c7:75:57:b0:8d:5d:8e:75:0c:86
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 40:a4:d0:f2:cc:f3:05:dc:b2:89:47:0a:f8:1b:97:65:11:7e:25:e5
Fingerprint (sha256): 03:49:a1:41:8a:e2:65:fc:be:59:b8:2d:a9:6e:f7:35:57:2b:e9:45:6b:39:ba:04:9e:7e:8d:a8:a8:e6:6f:05

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate martin-ghost1.dev.area9lyceum.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for martin-ghost1.dev.area9lyceum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

martin-ghost1.dev.area9lyceum.com
mks.martin-ghost1.dev.area9lyceum.com
ts.martin-ghost1.dev.area9lyceum.com
rmks.martin-ghost1.dev.area9lyceum.com
scorm.martin-ghost1.dev.area9lyceum.com

Other certificates including the domain name area9lyceum.com

(limited to 100 certificates)
slow-no-cdn.martin-ghost1.dev.area9lyceum.com
martin-ghost1.dev.area9lyceum.com
status.site24x7.jp
jenkins.area9lyceum.com
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
area9lyceum.com
offers.area9lyceum.com
area9lyceum.com
elb.rhapsode.area9lyceum.com
ar.area9lyceum.com
offers.area9lyceum.com
eu.area9lyceum.com
jenkins.area9lyceum.com
ar.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
rhapsode.covid.area9lyceum.com
slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com
area9lyceum.com
status.area9lyceum.com
eu.rhapsode.dev2.area9lyceum.com
slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
offers.area9lyceum.com
area9lyceum.com
usdev.area9innovation.com
rhapsode.qa.area9lyceum.com
blog.area9lyceum.com
amccinema-ksa.status.vistamanaged.services
ghostenv-yegor.dev.area9lyceum.com
git.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.covid.area9lyceum.com
rhapsode.dev.area9lyceum.com
usdev.area9innovation.com
git.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.covid.area9lyceum.com
slow-no-cdn.martin-ghost1.dev.area9lyceum.com
help.area9lyceum.com
blog.area9lyceum.com
area9lyceum.com
rhapsode.dev.area9lyceum.com
area9lyceum.com
eu.rhapsode.com
slow-no-cdn.martin-ghost.dev.area9lyceum.com
eu.rhapsode.qa.area9lyceum.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
area9lyceum.com
area9lyceum.com
rhapsode.dev.area9lyceum.com
patnl.status.app.vista.co
eu.rhapsode.com
area9lyceum.com
status.site24x7.jp
area9lyceum.com
usdev.area9innovation.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
status.site24x7.jp
blog.area9lyceum.com
blog.area9lyceum.com
blog.area9lyceum.com
help.area9lyceum.com
*.curator.rhapsode.com
offers.area9lyceum.com
ghostenv-yegor.dev.area9lyceum.com
area9lyceum.com
ar.area9lyceum.com
rhapsode.dev2.area9lyceum.com
usdev.area9innovation.com
martin-ghost.dev.area9lyceum.com
rhapsode.qa.area9lyceum.com
jenkins.area9lyceum.com
eu.rhapsode.dev.area9lyceum.com
martin-ghost.dev.area9lyceum.com
help.area9lyceum.com
git.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
area9lyceum.com
jenkins.area9lyceum.com
rhapsode.area9lyceum.com
blog.area9lyceum.com
rhapsode.area9lyceum.com
offers.area9lyceum.com
curator.rhapsode.com
ar.area9lyceum.com
ris.rhapsode.covid.area9lyceum.com

Certificate

The complete raw certificate details for martin-ghost1.dev.area9lyceum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEKtbXfo2PrblUVFJdU4
S6T4Efis11KsF9NiZXCbny3D1VIgqmY3o+TmQsCpXG3ACm6/whnJpcm6b4eczL4w
UduQpV5pwfyjFmKXbOOisd6mpf10ujnL3v9KUxJDpY4GJ4Dos+6nzx0vzSOf3Lox
gewmow251cHDCJlVRhZ+fSDuTNcIXaDpvq5Tz9hKz5WZOO6RQuDsRPMIg503mVrf
3U2k/ifkWPxlIID/yx/D2H7BrIS2w5CVlJzLllU/4rRY/6w4gM+x3GxMz0khTWH/
NPmoTTIF9oj0VZ2IHPCjIdZBz0bH78Wx4eKIgrbXnXu+4/hHsAbmpr1wEt7q9ljE
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7683090407218735219665676726082807499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'martin-ghost1.dev.area9lyceum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21745868330998386331631962390235193297353280690338227991710545756790498904591497280482773926143361558776386165719801561760469749421127903243873203929706317019755232753835640167921691654970194098267625541427480275615569700054318928615167953790420325195830850193951281816663421868481211641633812226786583887263912685914640441889560984416271977129125449090509518440702178823511515794601156569287562596891357207635073334797065231879530426822978360383479366917567283461732221542537576235788905275526520461334258956660673238173981166744925066503865734489175817414676703157858004891046482103429300446273441587755329076643037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d5e72989eab6eb7fa30c77557b08d5d8e750c86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martin-ghost1.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mks.martin-ghost1.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.martin-ghost1.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmks.martin-ghost1.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorm.martin-ghost1.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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