pr-80-7-mock.anon-apigw.dev.tivoservice.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:63:65:a2:f2:93:11:fe:b3:9f:cb:38:aa:8e:39:93 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pr-80-7-mock.anon-apigw.dev.tivoservice.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:63:65:a2:f2:93:11:fe:b3:9f:cb:38:aa:8e:39:93
Serial Number (int): 9820694792894824625982025309654759827
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fb:f0:50:c8:5f:56:7c:d6:c3:74:60:ac:8e:8c:23:12:49:ac:e0:c9
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a3:ec:99:29:39:22:19:19:57:72:09:31:cf:a7:0b:fc:7e:61:c5:56
Fingerprint (sha256): 05:21:60:5e:ad:c0:8b:cb:31:31:d7:72:6c:41:1c:aa:33:96:6e:54:3f:da:38:1a:a8:1e:9b:fb:5b:78:d9:8f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate pr-80-7-mock.anon-apigw.dev.tivoservice.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pr-80-7-mock.anon-apigw.dev.tivoservice.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pr-80-7-mock.anon-apigw.dev.tivoservice.net

Other certificates including the domain name tivoservice.net

(limited to 100 certificates)
cc-branding-service-pr-192-4.dev.tivoservice.net
api-service-registry-internal-pr-189-2.dev.tivoservice.net
api-cloudcore-onepass-internal-snemtisor.dev.tivoservice.net
api-channels-service-internal-pr-137-14.dev.tivoservice.net
entitlement-dispatcher-pr-59-1.dev.tivoservice.net
api-cloudcore-recordings-internal-pr-175-1.dev.tivoservice.net
entitlement-dispatcher-pr-125-9.dev.tivoservice.net
pr-80-7-mock.anon-apigw.dev.tivoservice.net
fanhattan.tivoservice.net
api-callback-policy-master-84.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-45-4.dev.tivoservice.net
api-service-registry-internal-pr-176-1.dev.tivoservice.net
api-callback-policy-pr-66-2.dev.tivoservice.net
api-channels-service-internal-pr-152-4.dev.tivoservice.net
api-service-registry-internal-pr-192-1.dev.tivoservice.net
api-service-registry-internal-pr-187-2.dev.tivoservice.net
api-service-registry-internal-pr-42-11.dev.tivoservice.net
tdc-mock.anon-apigw.dev.tivoservice.net
api-service-registry-internal-pr-182-2.dev.tivoservice.net
package-inventory.dev.tivoservice.net
api-cloudcore-recordings-internal-pr-170-3.dev.tivoservice.net
cc-branding-service-usharma.dev.tivoservice.net
main-298-mock.anon-apigw.dev.tivoservice.net
pr-85-4-mock.anon-apigw.dev.tivoservice.net
api-service-registry-internal-pr-188-2.dev.tivoservice.net
cc-branding-service-pr-192-8.dev.tivoservice.net
api-fe-prov-data-migration-abhanani.dev.tivoservice.net
api-channels-service-internal-pr-96-60.dev.tivoservice.net
atlantis-ext.ue1.tivocloud.tivoservice.net
api-service-registry-internal-pr-43-11.dev.tivoservice.net
api-channels-service-internal-pr-108-33.dev.tivoservice.net
api-service-registry-internal-pr-20-22.dev.tivoservice.net
pr-116-1-1.anon.dev.tivoservice.net
api-channels-service-internal-pr-152-6.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-10-5.dev.tivoservice.net
api-onepass-odau-service-pr-38-11-1-int.dev.tivoservice.net
api-callback-policy-pr-53-11.dev.tivoservice.net
device-mgmt.dev.tivoservice.net
api-kafka-indexer-apigw-pr-107-1-1.dev.tivoservice.net
fe-fav-api-gbala.europe.tivoservice.net
api-cloudcore-partnerinfo-lambda-mkadam-1.dev.tivoservice.net
fanhattan.tivoservice.net
api-service-registry-internal-pr-205-1.dev.tivoservice.net
jenkins-cloud.engr.tivoservice.net
api-service-registry-internal-pr-175-1.dev.tivoservice.net
cc-branding-service-master-179.dev.tivoservice.net
api-channels-service-internal-pr-154-2.dev.tivoservice.net
atlantis-ext.ue1.tivodev.tivoservice.net
api-onepass-odau-service-pr-48-6-1-int.dev.tivoservice.net
api-cloudcore-rating-lambda-pr-40-1.dev.tivoservice.net
atlantis-ext.ue1.tivodev.tivoservice.net
*.sls.tivoservice.net
api-cc-lookup-service-pr-59-4.dev.tivoservice.net
device-updates.dev.tivoservice.net
api-channels-service-internal-pr-157-2.dev.tivoservice.net
sls-production.tivoservice.net
pr-77-1.anon.dev.tivoservice.net
pr-80-8-mock.anon-apigw.dev.tivoservice.net
api-service-registry-internal-main-110.dev.tivoservice.net
api-fe-prov-data-migration-pr-219-1.dev.tivoservice.net
api-channels-service-internal-pr-153-3.dev.tivoservice.net
api-onepass-odau-service-pr-49-5-1-int.dev.tivoservice.net
api-excluded-partners-int-pr-84-4.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-45-3.dev.tivoservice.net
pr-85-1-mock.anon-apigw.dev.tivoservice.net
pr-116-1-ng.anon.dev.tivoservice.net
atlantis-ext-tivodev-ue1.tivodev.tivoservice.net
api-service-registry-internal-pr-206-1.dev.tivoservice.net
api-cloudcore-recordings-internal-main-194.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-10-6.dev.tivoservice.net
jackowski-vault-test-vewd-vault.dev.tivoservice.net
api-service-registry-internal-main-111.dev.tivoservice.net
pr-78-1.anon.dev.tivoservice.net
api-service-registry-internal-main-115.dev.tivoservice.net
api-callback-policy-pr-274-1.dev.tivoservice.net
api-service-registry-internal-pr-203-1.dev.tivoservice.net
api-fe-prov-data-migration-main-217.dev.tivoservice.net
pr-80-3-mock.anon-apigw.dev.tivoservice.net
atlantis-ext-ue1.tivodev.tivoservice.net
api-fe-prov-data-migration-abhanani.dev.tivoservice.net
api-messaging-interface-pr-106-3.dev.tivoservice.net
api-callback-policy-master-290.dev.tivoservice.net
api-service-registry-internal-pr-179-3.dev.tivoservice.net
package-inventory.dev.tivoservice.net
api-authservice-proxy-pr-1-2.dev.tivoservice.net
api-channels-service-internal-pr-156-2.dev.tivoservice.net
api-cloudcore-onepass-internal-pr-27-17.dev.tivoservice.net
api-service-registry-internal-pr-186-1.dev.tivoservice.net
dacs-main-11.dev.tivoservice.net
api-service-registry-internal-pr-20-20.dev.tivoservice.net
main-293-mock.anon-apigw.dev.tivoservice.net
pr-80-2-mock.anon-apigw.dev.tivoservice.net
api-callback-policy-master-291.dev.tivoservice.net
api-service-registry-internal-main-105.dev.tivoservice.net
api-cloudcore-partnerinfo-lambda-pr-45-8.dev.tivoservice.net
pr-85-2-mock.anon-apigw.dev.tivoservice.net
api-channels-service-internal-pr-153-2.dev.tivoservice.net
api-service-registry-internal-pr-190-1.dev.tivoservice.net
api-aps-federated-db-cleanup-pr-20-2.dev.tivoservice.net
api-onepass-odau-service-pr-27-18-1-int.dev.tivoservice.net

Certificate

The complete raw certificate details for pr-80-7-mock.anon-apigw.dev.tivoservice.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw38u3MknbXfF2GDvkx37
Q8eRwXZoRfIPILOYG4Ennps479Cx85WmI3DQpjC1Q8ZI9tnoKbbm0SFbPbnMvr70
Yh0Pg9J1c1DszPSdlI3NjMKc38E0ueKIIwMy+eocD8xdziGPiM2IcdRtS1wHXjBD
7LLMfrOrnlgyqQx2TbGF5cfifbqEMAJmLyF1m1WAZqmxgxsXNKbTm2cC96InvCX/
kE/9b8Xx8W+Unh8wkwz/x2WzxzlgC2q+QNC+UM1DGn+cUhfWeKpqm5aOayjP+xi/
6+PB8WmqGYn+AuWodiMvuEbqEw0BDzGa5mkfCVKqllpboOEPrprTQDQR9GG3Mj+2
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9820694792894824625982025309654759827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pr-80-7-mock.anon-apigw.dev.tivoservice.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24679185770972372391436431697183000498322657567041824032394977363964260922734230302966768248945121273190041833994627911187587801242603646979968646741907467216943542766356594683753462931196793426159199016526352488831208757067534891046939848998798462402173986891089824235676019244667609843915266470771591864261414193247926683208157843206417208220615090357735049054779770532544207520489716847578783120869905211628079603130517048900160879756487210527213997631465302984938495366933811385369715354598841785647819787536090556740517566585633726137486447668076210736658003227525580669435950435544876269416336435782223883384399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbf050c85f567cd6c37460ac8e8c231249ace0c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-80-7-mock.anon-apigw.dev.tivoservice.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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