management.pobmanagement-dev.s-cloud.fi

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:c2:c0:b2:8a:10:34:e6:d9:fa:f6:46:e0:2e:45:f1 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=management.pobmanagement-dev.s-cloud.fi

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c2:c0:b2:8a:10:34:e6:d9:fa:f6:46:e0:2e:45:f1
Serial Number (int): 10315809929035520320009892393141552625
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f0:22:b2:59:b3:40:b8:b6:90:aa:62:b3:05:57:01:d0:1f:15:54:88
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bc:33:99:7f:43:84:96:05:53:d3:3e:a7:9a:5f:57:7d:91:3a:73:98
Fingerprint (sha256): 03:bb:98:42:6c:37:f3:3e:46:9d:4b:69:c1:89:4b:93:1b:57:38:e7:d3:93:7e:c8:cc:60:b1:d3:3c:5d:de:88

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate management.pobmanagement-dev.s-cloud.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for management.pobmanagement-dev.s-cloud.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

management.pobmanagement-dev.s-cloud.fi

Other certificates including the domain name s-cloud.fi

(limited to 100 certificates)
products-search.contenthub.s-cloud.fi
*.coco-dev.s-cloud.fi
splunk.logmanagement.s-cloud.fi
*.devopstools.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
api.abcmobile-dev.s-cloud.fi
auth.tunnistus-test.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
reo-salesforce-adapter.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
staffapi-dev.raflaamo-test.s-cloud.fi
api.cmg-dev.s-cloud.fi
ext.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
t-ext.dam-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
management.pobmanagement-dev.s-cloud.fi
data.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
dam.s-cloud.fi
wp-multisite.sites-test.s-cloud.fi
beta.omo-test.s-cloud.fi
dia.coco-test.s-cloud.fi
ext.dam.s-cloud.fi
api.pressu.s-cloud.fi
api.skartta-qa.s-cloud.fi
lb-ext.dam.s-cloud.fi
browser-consent-front.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
entry-dev.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
adyen-webhook-listener-dev.ssc-dev.s-cloud.fi
api-dev.sokoshotelswebsite-test.s-cloud.fi
dam-input.contenthub-dev.s-cloud.fi
ao-api.ahis-edu.s-cloud.fi
*.gluucb.tunnistus-qa.s-cloud.fi
abc-auto.sites-test.s-cloud.fi
api.emobility-qa.s-cloud.fi
aok.wp-test.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
ext.dam.s-cloud.fi
wp.sites-test.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
henksu-test.s-cloud.fi
sinkhole.logmanagement.s-cloud.fi
reo.coco-dev.s-cloud.fi
*.sites-test.s-cloud.fi
ahis-api.ahis-dev.s-cloud.fi
sp.s-cloud.fi
*.wp.s-cloud.fi
splunk-demo-demo.logmanagement-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
frontend.atlassian.s-cloud.fi
int.eu-west-1.sokoshotelsmobile.s-cloud.fi
ext-qa.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
tasku-osk-ui.coco.s-cloud.fi
ext.dam.s-cloud.fi
*.service.int.abcmobile.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
boomi.s-cloud.fi
mastergui-test.logmanagement-test.s-cloud.fi
product-brands.contenthub-test.s-cloud.fi
event-stream.custi-dev.s-cloud.fi
lupa.coco.s-cloud.fi
*.purchase-event-stream-dev.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
testrail-test.s-cloud.fi
*.test.sokos.fi
spectrum.coco-test.s-cloud.fi
sinkhole-int.logcollector.s-cloud.fi
lb-ext.dam.s-cloud.fi
vikke-osk-ui.coco.s-cloud.fi
ext-preprod.eu-west-1.sokoshotelsmobile.s-cloud.fi
raflaamo-test.s-cloud.fi
argocd-qa.s-cloud.fi
reo.coco.s-cloud.fi
api.price-comparison-test.s-cloud.fi
tos-poc.coco-test.s-cloud.fi
api.skartta.s-cloud.fi
splunk.logmanagement.s-cloud.fi
s-bonus.sites.s-cloud.fi
rekku.coco-test.s-cloud.fi
*.gitlab-pages-dev.s-cloud.fi
s-bonus.sites.s-cloud.fi
reo.coco.s-cloud.fi
*.gitlab-pages-test-spankki.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
tasku-bff.coco.s-cloud.fi
shiny.paja-test.s-cloud.fi
sok-contacts-nm-bff.coco-test.s-cloud.fi
dropshipping-api.ecommerce-om-dev.s-cloud.fi
mrm-id.s-cloud.fi
admin-ui.contenthub.s-cloud.fi
t-lb-ext.dam-test.s-cloud.fi
api-ext.dam.s-cloud.fi
api-int.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
reo-salesforce-adapter.coco-dev.s-cloud.fi

Certificate

The complete raw certificate details for management.pobmanagement-dev.s-cloud.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXmfhOBL7B54SJl8iAyC
sg+QUzh2MLNG7V49bdLDa+uPpUSVqMBtQmUy0pmVSl/mb+keV4x1T3Jbig4RsfUv
OLl4fgfTPNPeF0TYzrjwM5rk3EK25qCQS0Asr0r6buk/AJ/7vpZH8EVcuuRfr8rB
c+5n8n56wDcDhb2asVfbpNW41vbT0lotw9bAkVVgUdaPXtCJcdoF6flaIVY3WFck
ZW9vhJRWrGPAzOhKqqJyO+yaVHQMeRt+AXCMv/RlNO/VNxcvxcMoEtsneRmcghK+
UfT0slGhhVNJyyPK/I4KdAUyMvMUEVWtYS45DHNpzf5SKJwJ7rWTaL7ygMVGT2Ef
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10315809929035520320009892393141552625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management.pobmanagement-dev.s-cloud.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17859575596600894218840855813680653129237811223101943164381486831225144377478059647884989224220282930340250256101786965953580650224358664646509739775787227184155426773110623088319585251530234641717832646985925959505368714172061559861009483339435207559329621353178096285122957525446873822690084643587351702268869836147577312976104677778550573438957074561729253928963538647232545625909225694037770467123377953366716163308118769025473488740096508383852591479144749086902594281763000666310229417725831983257111455552952591630008848004726537529907015190328327794228202451484181885244206637162381777532147286271085546381247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f022b259b340b8b690aa62b3055701d01f155488
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.pobmanagement-dev.s-cloud.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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