otis-uat.bluetree-qa.co.uk

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 02:79:86:38:10:35:ea:5b:81:74:fa:15:f3:06:64:5f was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=otis-uat.bluetree-qa.co.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:79:86:38:10:35:ea:5b:81:74:fa:15:f3:06:64:5f
Serial Number (int): 3289446196133475958819672697304671327
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ca:0d:50:fc:85:75:4a:61:29:87:2d:bc:e3:e5:6c:f4:4c:38:b5:93
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 80:8f:cf:fb:ba:20:b8:32:4c:03:88:7c:33:ee:fb:8d:f3:55:09:75
Fingerprint (sha256): 04:3b:48:f2:96:dc:68:cc:f0:34:1b:6c:d4:67:1e:e6:38:05:1d:48:75:91:5b:19:90:23:44:5c:82:16:c8:ca

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate otis-uat.bluetree-qa.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otis-uat.bluetree-qa.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otis-uat.bluetree-qa.co.uk

Other certificates including the domain name bluetree-qa.co.uk

(limited to 100 certificates)
product-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
route1print.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
default.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
default.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
results-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
default.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
default.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
default.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk

Certificate

The complete raw certificate details for otis-uat.bluetree-qa.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c5fzW1lgThN0pl5Dfxz
63oCU1AB8GIiBWP/EmvV3I8WMnouIVLT50k7dwm5CqVe/wKADKRbA4SqLeI9aW4w
7WB2qG0OKb3mBJJZuLvX4bgZ5ra/Z7uyJcsF8+iP9ano/8ZFLQTJVPwgImiiPcil
p9QZF144a3yMbxTipnYwXgDhgx5ccRw5Goa/D/gTeGo+m3RyBmGEeyS/QpI4TiOu
0ls8G8Cu8JTn5FDmogj7An4t2x1GqEZAMI0q/64oEMBiibliwFzYFmuSnn4kLig/
lK+K1Z5RLdYfEI2fjl5KO5+Z9FOUQhdaQ+V5CwuW2gH6pGnQ0Xae5T0ykXjxB78p
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3289446196133475958819672697304671327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otis-uat.bluetree-qa.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30020245201846851313917756413447777181227145047564572186798663050147663666495546748975377308404832470453258705725334054313483861609983156590319127379911572237214726308715020811314677003749789203738874669680758963144521076934141190008072100884854687362351073502036426229349748271172283035675055645319764367293037892630007101658108813834560527509430123140777282508766128562012199005240884271767715604424962379008548289670770745093760177752127091574569919217713727793597258552471897783917068836578073615138761807688863766702898367464328358574506000025628351418233487171963243061743556885347178081563919910430788630292799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca0d50fc85754a6129872dbce3e56cf44c38b593
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otis-uat.bluetree-qa.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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