deploytestservice-staging1a.outreach-staging.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:0e:55:b8:77:32:f3:e0:9d:74:c1:01:ea:f4:f6:f5 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=deploytestservice-staging1a.outreach-staging.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:0e:55:b8:77:32:f3:e0:9d:74:c1:01:ea:f4:f6:f5
Serial Number (int): 16025166725127005216461974447364306677
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:ac:1d:6f:92:e6:63:1d:6a:46:fc:49:f5:5f:0c:b1:df:e1:18:44
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 9c:d4:c7:8d:43:9e:e5:55:b1:44:73:a0:22:23:15:6f:b3:7f:9b:36
Fingerprint (sha256): 06:0c:0e:d5:78:7b:7f:cb:aa:43:ab:c2:a2:29:03:e7:df:06:22:c8:7a:3d:e2:30:ff:42:7d:01:81:e5:26:d7

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate deploytestservice-staging1a.outreach-staging.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deploytestservice-staging1a.outreach-staging.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deploytestservice-staging1a.outreach-staging.com
deploytestservice-canary-staging1a.outreach-staging.com
deploytestservice-stable-staging1a.outreach-staging.com

Other certificates including the domain name outreach-staging.com

(limited to 100 certificates)
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
cdn.outreach-staging.com
carspa.app
summit.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
staging1c.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
marketplace.outreach-staging.com
id.outreach-staging.com
deploytestservice-staging1a.outreach-staging.com
vanity.outreach-staging.com
id.us-east-2.outreach-staging.com
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
id.outreach-staging.com
deploytestservice-staging1a.outreach-staging.com
web.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
login-master.outreach-staging.com
www.sppetroleum.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
telefork.staging1a.outreach-staging.com
controlplane.outreach-staging.com
storage.outreach-staging.com
staging2.outreach-staging.com
login-master.outreach-staging.com
outlook.outreach-staging.com
staging1c.outreach-staging.com
id.outreach-staging.com
staging1c.outreach-staging.com
staging1c.outreach-staging.com
staging2b.oats.outreach-staging.com
deploytestservice-ngb-ss2-us-east-2.outreach-staging.com
keycloak.outreach-staging.com
deploytestservice-canary-ngb-ss2-us-east-2.outreach-staging.com
sidebar.outreach-staging.com
europeapp.wingchan.net
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
round1.io
staging1a.outreach-staging.com
plan-master-orca.outreach-staging.com
deploytestservice-staging1c.outreach-staging.com
deploytestservice-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-gs-us-east-2.outreach-staging.com
staging1a.outreach-staging.com
staging1c.outreach-staging.com
staging1c.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-ngb-ss2-us-east-2.outreach-staging.com
id.us-east-2.outreach-staging.com
deploytestservice-stable-staging2b.outreach-staging.com
oidctester.outreach-staging.com
accounts.outreach-staging.com
developers.outreach-staging.com
rolling.vi.outreach-staging.com
summit.outreach-staging.com
deploytestservice-stable-ngb-gs-us-east-2.outreach-staging.com
staging1a.outreach-staging.com
unleash.outreach-staging.com
staging1a.outreach-staging.com
developers.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
www.lifebits.app
deploytestservice-canary-staging1a.outreach-staging.com
cdn.outreach-staging.com
id.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
id.outreach-staging.com
controlplane.outreach-staging.com
www.outreach-staging.com
deploytestservice-stable-staging1a.outreach-staging.com
id.outreach-staging.com
staging1a.outreach-staging.com
api.outreach-staging.com
staging1c.outreach-staging.com
outlook.outreach-staging.com
staging1a.outreach-staging.com
deploytestservice-stable-staging1a.outreach-staging.com
staging1a.outreach-staging.com
plan-staging.outreach-staging.com
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
developer-master.outreach-staging.com
web-master.outreach-staging.com
deploytestservice-canary-ngb-gs-us-east-2.outreach-staging.com
www.outreach-staging.com
uat.panel.elfedu.pl
www.penelopepennybooks.com
staging1a.outreach-staging.com
developer.outreach-staging.com
id.us-east-2.outreach-staging.com
kaia-slack.staging1a.outreach-staging.com
api2.outreach-staging.com
accounts.outreach-staging.com
web.outreach-staging.com

Certificate

The complete raw certificate details for deploytestservice-staging1a.outreach-staging.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKudle1Vd29LrC4vmVLW
FKB7S1MFEaU8JglVYTQf/IZ9VKW24rQxWfqoQ3i15/kljEwAPEVirXQgqgyLhNtq
jpgp9/mQZhpiKAphh+ZSiEiFCLo4d0vIOuXL1exJZHKH0DjL00uFHAZJ+FjLipsj
0vv5A0gjrkTwLj+jdT0iRlt8vlH0Upp9oBsRAWr/rZFpO18JSOXM3vISAlOOy+NI
Iqg+3O83h3YRqLxJuyvZQQ8aw3NmRZtQTNq+1egPgSzDtRC6q0Y91dApEwoDI7Ux
dEiUGyqjUQ4/+Xy4otXnoOOR0EhKQfZsLB39LHqIzVEd0b9dQGKwzh8QK1/pbDdI
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16025166725127005216461974447364306677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deploytestservice-staging1a.outreach-staging.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17253036266519762474751270134696125319883782346797061117152016265663554041671671058452918257853565688412842141569167653864101474327391447137854958641299686083708640043831669027346751438024206249249815952504070283171205851938357504839907689273225352534890268536700999867652541113454412329971537006876106372710424259379913643073087603030930034926800992157690828191503882778505857184323849832709543893774808987916787312136305175403461647332444382141673178231258953006711158282972397715384587606565361759190695374406584188045532378329800930266045982724055245367794530315374605552540083226336758988726642805122139633961079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acac1d6f92e6631d6a46fc49f55f0cb1dfe11844
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deploytestservice-staging1a.outreach-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deploytestservice-canary-staging1a.outreach-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deploytestservice-stable-staging1a.outreach-staging.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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