assets.tigocloud.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:ee:ea:78:3c:51:47:60:96:7c:91:65:64:f3:d5:eb was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.tigocloud.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:ee:ea:78:3c:51:47:60:96:7c:91:65:64:f3:d5:eb
Serial Number (int): 13203574224289648684745142325990381035
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:9e:62:eb:eb:36:b3:aa:8d:db:04:f3:82:af:45:87:bd:b7:21:b5
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 6b:88:c8:ce:c1:a9:c4:cf:3c:53:80:aa:e1:81:cc:3e:ae:1c:8e:e7
Fingerprint (sha256): 04:6b:44:da:ad:1b:de:48:7c:e2:37:2f:f1:34:8c:b8:33:88:5f:03:99:ce:35:bf:27:73:f1:44:17:27:28:7c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate assets.tigocloud.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.tigocloud.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.tigocloud.net
images.tigocloud.net
videos.tigocloud.net

Other certificates including the domain name tigocloud.net

(limited to 100 certificates)
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
incapsula.com
h3.shared.global.fastly.net
assets.tigocloud.net
*.tigocloud.net
incapsula.com
dev.sv.mfs.tigocloud.net
cda.tigocloud.net
mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
test.gt.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
development.gt.sartaza.mfs.tigocloud.net
test.hn.mfs.tigocloud.net
dev.bo.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
development.hn.sartaza.mfs.tigocloud.net
h3.shared.global.fastly.net
*.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
pquiroga.sv.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
pquiroga.sv.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
gitlab.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
dev.hn.mfs.tigocloud.net
pquiroga.gt.mfs.tigocloud.net
h3.shared.global.fastly.net
pquiroga.sv.mfs.tigocloud.net
h3.shared.global.fastly.net
test.bo.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
jenkinsmitigo.tigocloud.net
h3.shared.global.fastly.net
jenkinsmitigo.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
jenkinsmitigo.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
dev.sv.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
*.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
incapsula.com
dev.hn.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
pquiroga.hn.mfs.tigocloud.net
incapsula.com
h3.shared.global.fastly.net
incapsula.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
incapsula.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
dev.bo.mfs.tigocloud.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
incapsula.com
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
h3.shared.global.fastly.net
dev.gt.mfs.tigocloud.net

Certificate

The complete raw certificate details for assets.tigocloud.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtkX20h97I3ZdtdYsdNy
PtJGIN16C93XQmsjZB1vpXUTfpsg1hX6GIIfN/PPjSFgQlLRvRAxcL3PmiGFqJDL
YtDcZEllbxu5hRq3qwfLv3GKN1sYWMWbmhwXrh8NeWtWm37IfNQT0bkYI8Q2IA55
/ak2dSDfbaxalrZvGPlj6bKcqOHLe1fUOtwNHGhKDMfIvX38id/xTAtjWPz8ehTf
MXbdIx4lBgbRqG9UMlBtnIn7Za5aheBKi3dGAEjShx2RBLTm3ZVinMTpge3JMbXy
4HFW8ix/e32GjkbJPHArt2Jbo7oZavAHaIQRSP9yHZr98BzYKjeiDurjT6SAClt3
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13203574224289648684745142325990381035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.tigocloud.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24092330585321321105965345464432807601105971443804632979748900736067491341245992287711519304286498914108701650958925469166855063987378964513919448598121270256011521289280351892212517019967204703593231877546235675920810954421710753586513348124370376991722458602465253154386364267984652877278938282819684210625942718683118572110855869415065894186137230114885708443653349726454267535328568431793717503299248400576704461361411115658668655403055788565217160724452814677065222915603349840897162317070518149221954435823398612532709723587666015798067562544891983913462104510240971911052164409019372761030770474963120248551213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c9e62ebeb36b3aa8ddb04f382af4587bdb721b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.tigocloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.tigocloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.tigocloud.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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