*.wrd-aws.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:ce:aa:8f:ed:74:30:62:e9:4d:8d:7b:7b:4b:fe:e4 was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.wrd-aws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:ce:aa:8f:ed:74:30:62:e9:4d:8d:7b:7b:4b:fe:e4
Serial Number (int): 17023808515025436511012737660765339364
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: de:a1:25:9b:7b:2b:4e:20:8c:15:3e:95:83:a4:02:f9:b3:9c:2b:c3
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): fc:74:47:16:35:9d:1a:a9:05:24:62:7d:75:3b:90:c3:2b:f8:2a:d2
Fingerprint (sha256): 04:7d:a1:c2:bc:f6:0d:99:f5:01:6b:f8:50:25:c7:ca:dd:9a:24:fd:83:f6:c5:72:65:cf:5a:e2:f9:b2:47:eb

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.wrd-aws.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wrd-aws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wrd-aws.com
de.business.renault.ch
renew.auto
fr.business.renault.ch
www.myr-de.renault.ch
it.business.renault.ch
*.renew.auto
www.myr-it.renault.ch
www.business.renault.ch
renault.ch
*.renault.ch
www.myr-fr.renault.ch

Other certificates including the domain name wrd-aws.com

(limited to 100 certificates)
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
ren-it-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.public-alb-k8sone-dev-1-euw1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
static-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.internal.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com

Certificate

The complete raw certificate details for *.wrd-aws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXpnXmnbK5zc7BA04yud
62O2KG9nXKgGVHY0rKdXcnbQEuWxTD5eT090ES4pntYT/5r1bHpo470bs/V5qUVx
GMy3IjvJXd5v+GjoMzQzJgZ8mgo5Tatxuc9JWhY/K0ZIX8kcrambu66t5IOdaOpk
9WpcGbyotv7TIIAtOX23lPYi8fYymqJEyHBvE9sGAwpuCzn6HSsv87Pjwhp67LfL
a8lFV9umhEm0sEYiAe4f8wI2+Yk1/ZJkj5r0UnLFQcMsLUesXFGwrlXJLiR2xZBd
TpUh7Coi76XV2z4JTbIlF8GShx0QZg1ITkc2B3Di58FnEambmgN6zlJc0jncCHBy
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17023808515025436511012737660765339364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wrd-aws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23414445974432877587790527182824976534439742355307671514174794767732915774243185128302127576526025176975336330266340505320471100777049656266745948735518237387074426357149795990716279665889283899123188218370714246823997299803111406210382370643998634559752541005488462766735572418497082937301893563502618780447423941729611883013281426823174386224897886810026325051880024287939121549180969635099359753317035715552427555843341088517213819551749327544467784703543085706445374403123850384133084785054103986271472837275733756670510714630297650973073622938264086085290867035424481890454713834443947944634226707496322959700563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dea1259b7b2b4e208c153e9583a402f9b39c2bc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (236 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrd-aws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.business.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renew.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.business.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-de.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.business.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renew.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-it.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-fr.renault.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf28182fc00000403004730450220609cd22fb0b4648d721e8ea21e4d325f58c1efd0ba94fa92ffbad303c6d25722022100aae504dbb902b02395125db550f11439bbc33dd20065d77dfd13650db4c08f9900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf281831f000004030046304402206acae62f631ea1560effb11b97f5697efa31cce5712f1b6d3347dd5601c00bab02207cee6f62d2d6d6370d5470d83dfde21731a2f4a711b77c8317dc0cdacf9ba036007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018bf28182ff0000040300473045022100ec623dae46e7093a1b20f147a05d365c2c39a5df788bbd6908c3362428f3b5b8022062c553274563a717295c463dbcc5fbaef792ea1e6dd325d369c07c4cb466bfeb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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