victims-rights.campaign.europa.eu

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:66:1f:06:c6:74:36:ba:16:58:b8:40:96:62:c4:32 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=victims-rights.campaign.europa.eu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:66:1f:06:c6:74:36:ba:16:58:b8:40:96:62:c4:32
Serial Number (int): 9834839541550177596002260690512561202
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 66:ae:51:0b:f6:c8:10:9b:2e:36:ca:19:5c:9a:50:cc:35:c9:b1:23
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 21:4e:a7:21:02:56:24:46:c9:f8:6d:af:e6:26:08:5a:c2:85:ec:d6
Fingerprint (sha256): 03:7f:f6:bc:14:de:3f:06:85:51:c2:0f:f1:c6:c2:9b:03:0b:ab:98:b6:20:46:f1:4c:f0:60:c1:c0:64:ad:ae

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate victims-rights.campaign.europa.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for victims-rights.campaign.europa.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

victims-rights.campaign.europa.eu
*.victims-rights.campaign.europa.eu

Other certificates including the domain name europa.eu

(limited to 100 certificates)
cpvoextranet.cpvo.europa.eu
www.cmfb.europa.eu
esubweb-xcomp.ema.europa.eu
*.frontex.europa.eu
nuclear.jrc.ec.europa.eu
acc.nsl.consilium.europa.eu
prd.frontex.europa.eu
www.easa.europa.eu
vaccination-info.eu
www-s.eige.europa.eu
cyclone.enisa.europa.eu
www-s.eige.europa.eu
ews.eeas.europa.eu
connect19.ca
portal.europol.europa.eu
staging.cedefop.europa.eu
5691420614590464-fe3.pantheonsite.io
clearinghouse-oef.jrc.ec.europa.eu
a-sdw-wsrest.ecb.europa.eu
dns-vetting1j.map.fastly.net
rvd.ema.europa.eu
a-procurement.ecb.europa.eu
fmapps.ema.europa.eu
monthlyanalysis.frontex.europa.eu
euctis-preprod.ema.europa.eu
bauth1.europarl.europa.eu
euctis-uat2.ema.europa.eu
mail.frontex.europa.eu
cbs.easo.europa.eu
nirvana.f4e.europa.eu
erc.europa.eu
sealingservice.grants.ec.europa.eu
a-talent.ecb.europa.eu
*.in.ep.europa.eu
r2.shared.global.fastly.net
odin.jrc.ec.europa.eu
idm.f4e.europa.eu
circulareconomy.europa.eu
opmd.publications.europa.eu
dev.edpsweb.edps.europa.eu
eulisa.europa.eu
eudravigilance-human-training.ema.europa.eu
sip.cepol.europa.eu
cyclone.enisa.europa.eu
test-eguides.osha.europa.eu
*.eeas.europa.eu
knowledge-base.inspire.ec.europa.eu
team-europe-partners.network.europa.eu
fch.cust.concepto.ch
*.euipo.europa.eu
cti-chat.enisa.europa.eu
webmail.eca.europa.eu
mobiledw.tech.ec.europa.eu
setis.ec.europa.eu
alumni.europa.eu
stsext.ema.europa.eu
*.stress.ec.europa.eu
biodiversity.europa.eu
us-server2.cedefop.europa.eu
mobile.tech.ec.europa.eu
r2.shared.global.fastly.net
edps.europa.eu
e3p.jrc.ec.europa.eu
eudragmdp.ema.europa.eu
bi.ema.europa.eu
nexus.cis.consilium.europa.eu
cbrne.jrc.ec.europa.eu
owa.ema.europa.eu
aula.frontex.europa.eu
*.fra.europa.eu
*.discomap.eea.europa.eu
a-cms2-ro.ecb.europa.eu
organised-crime-corruption-track-record.ec.europa.eu
sip.era.europa.eu
r2.shared.global.fastly.net
webanalytics.acc.fpfis.tech.ec.europa.eu
ssl861147.cloudflaressl.com
dns-vetting1j.map.fastly.net
webstats.eit.europa.eu
cewe1.eurojust.europa.eu
e3p.jrc.ec.europa.eu
a-www.ecb.europa.eu
5691420614590464-fe3.pantheonsite.io
enet.cepol.europa.eu
*.cedefop.europa.eu
SafeOnWeb.eurofound.europa.eu
www.eit.europa.eu
jt.ec.europa.eu
list.aasc.europa.eu
pgateway.ema.europa.eu
eit.europa.eu
restricted.eurojust.europa.eu
*.cooperation.enisa.europa.eu
esvac-test.ema.europa.eu
esm.europa.eu
epwa.europarl.europa.eu
*.frontex.europa.eu
isportal.berec.europa.eu
sip.eib.org
economic-policy-committee.europa.eu

Certificate

The complete raw certificate details for victims-rights.campaign.europa.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr53zVCcIgePccNaUvI4t
4aqMtIhLtljGyDyntB7aICG9wwd192bQo5fTMW4CpAKEBQ+ZLxopGF4OJOfqQm2l
m2XvD9Uw3r2xlcZlaVlCbtlYtzUhWEJ82opOyJSP0SAUMO04FCRQ+uhHM3MzP/KN
hNPfTxzLoZjxQ1p9esWY0CVzpJrAe+kGDEUFMbpRB+avyuYPNacshwKNLZz3BgDY
hXj2deLFQ2YXeXZ9q/yTIr1j2y8M+wXQpJefGPiG+103nNus37Ri1sv2UB57418f
GCwp8E9z+bf3rIHNAKd3z3Bx8TOtHeUocK2IC+Aq8fkv594UupdtNK/IJCPiN79b
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9834839541550177596002260690512561202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'victims-rights.campaign.europa.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22169591664934799809731636634576143248140795264997837125563597543354125966098288173022119891346099588576825685898625512341637344401565976144130694794200539354527715910470670624700659912378205972151636118020128595979329597604082118585331932323054700345131361723168794844148719697168271562581341179633784980447038579723299944763464425538440850093077644805897610722000242154577496868867451588399310081857559044267676783550798538554390667164536516519278607934063977130761052293572299317944064383502866245428391460803818068251316851041375864434101543622072194836255298683637789953443899869278567120613636929569407467740063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66ae510bf6c8109b2e36ca195c9a50cc35c9b123
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victims-rights.campaign.europa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victims-rights.campaign.europa.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185343168de0000040300463044022003e9f429eb9d17271c13b9beb7a43d554308a93eefebc4279f82c6851a812d1a02207df752d7283ed8d17df1f1c859cbfafcac56d76f05eaedb45f09d89a5eedd72500770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000185343169020000040300483046022100e170aa6aaaf98cbf31a16203b13ec60e280399802d5c844837665a594804a5ba022100886f943cea45e98444ea91635e3dfe237b9b78e7408c3a10607f9c366b05f8d200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000185343168cd000004030047304502203249417478c3abc831d6744dd67c2f9b065f6b2f436a5178eec06886b4bfabe202210084cd7a1c2ee9feaa13ec79763017c7fa2e1c7f2a3d62dd481c97e5aa1e8cce35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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