static.drm.pbs.org

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:5e:5c:ad:e4:2d:c1:54:ec:d6:d6:6a:0a:c0:00:60 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=static.drm.pbs.org

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:5e:5c:ad:e4:2d:c1:54:ec:d6:d6:6a:0a:c0:00:60
Serial Number (int): 16440691612894812077810051812675289184
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f5:a7:3a:cd:71:7a:82:9d:b3:94:cb:ff:50:10:ba:3d:26:9c:2d:3b
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 92:20:73:70:a0:a7:e1:bf:08:f2:39:82:18:64:62:65:39:1c:8e:e4
Fingerprint (sha256): 06:2b:11:39:e3:40:af:86:f6:9d:35:3e:3b:d7:d2:27:4c:cf:f0:18:4e:c8:22:e9:bf:fe:96:85:6b:9f:4f:2f

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate static.drm.pbs.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.drm.pbs.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.drm.pbs.org

Other certificates including the domain name pbs.org

(limited to 100 certificates)
shop.pbs.org
statuspage.io
www.pbs.org
jira.pbs.org
paymentsolutions-status.shijicloud.com
cucm-pub-ms.hq.corp.pbs.org
paymentsolutions-status.shijicloud.com
cucm-pub-ms.HQ.CORP.PBS.ORG
ourneighborhood.pbs.org
mosaic-dev.pbs.org
www.pbs.org
cloud-status.dimensiondata.com
statuspage.io
statuspage.io
statuspage.io
paymentsolutions-status.shijicloud.com
*.services.pbs.org
statuspage.io
*.kids.pbs.org
cloud-status.dimensiondata.com
cloud-status.dimensiondata.com
services.pbs.org
paymentsolutions-status.shijicloud.com
static.drm.pbs.org
staging.pbs.org
staging.pbs.org
techops.pbs.org
cloud-status.dimensiondata.com
to.pbs.org
open.pbs.org
to.pbs.org
beta.pbs.org
dll-svc.pbs.org
cloud-status.dimensiondata.com
paymentsolutions-status.shijicloud.com
fdus-64.freshdesk.com
account-qa.pbs.org
api.pbs.org
fdus-40.freshdesk.com
mxgw2.pbs.org
fdus-64.freshdesk.com
*.services.pbs.org
statuspage.io
mvaultsupport.pbs.org
fdus-40.freshdesk.com
teacherline.pbs.org
teacher.shop.pbs.org
statuspage.io
caretendtrust.wellsky.com
sponsorship.pbs.org
statuspage.io
pss.pbs.org
docs.pbs.org
services-qa.pbs.org
www.pbs.org
www.pbs.org
status.bettr.io
link-status.sealedair.io
fdus-40.freshdesk.com
ISE-Cisco-CCHQ-01.hq.corp.pbs.org
lplfinancial-status.polaris.synopsys.com
*.console.pbs.org
*.services.pbs.org
masterpiecesweepstakes.pbs.org
staging.pbs.org
statuspage.io
statuspage.io
cloud-status.dimensiondata.com
ropsplus.support.navblue.aero
paymentsolutions-status.shijicloud.com
statuspage.io
beta.pbs.org
paymentsolutions-status.shijicloud.com
to.pbs.org
*.pbs.org
staging.pbs.org
*.video.cdn.pbs.org
video.pbs.org
paymentsolutions-status.shijicloud.com
*.services.pbs.org
statuspage.io
link-status.sealedair.io
cloud-status.dimensiondata.com
cloud-status.dimensiondata.com
*.console.pbs.org
wnet.video-staging.pbs.org
*.cdn.pbs.org
www.pbs.org
statuspage.io
open.pbs.org
ropsplus.support.navblue.aero
cloud-status.dimensiondata.com
login.pbs.org
tableau-dev.pbs.org
cloud-status.dimensiondata.com
footballsupport.geniussports.com
statuspage.io
pov-tc.pbs.org
test.showmetadata.pbs.org
cloud-status.dimensiondata.com

Certificate

The complete raw certificate details for static.drm.pbs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbKbn+KPVAb889K1mWqv
iqgUrNJo/10T/5CRzVyJvATa+1SvzLl92TR+Z+zhIna8NROrlQBldIFm11MF2+iX
EJbL+IF1RUlBET+Lzm10HDDx84aEyE14PiR1gz0RrZg37T1ofzPLTcoag8XOY1jz
D23O+732tnQ06louEGQE8EMAXzr8HpgbxvvP+8slqeBida4xGtObPLvpS2Qcwaos
Y7IINV8S64qPLCL0emUKv1TFWvqRN24KaxUGgN3K2wLlYe8AKKx4iqDuQuLr39fz
B9sxgrtldWIGD8l1p6iJAEP0OQi8dGdsCNZAAZPOV77/wtLvE/Um9ST+4tfAn9Bu
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16440691612894812077810051812675289184
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.drm.pbs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22432254821219470403839928962665038302711800051669475458821223062898158409719722770319433170063807191469618220864577694910555957994311719185736775223121198512721291686953828444164291547749490554499817709168466837503930223917911468605894719763441416616822090626553243264071775953373318491470612957483496498559531705299836081301584254052083085391064347549438516086817941933097360972678030228857102208770368481492138628464278873520513765580938325147274189825265928984695401176738338311844469877595848497005567478009990506167578681425679931861861325796403664541993010775733080859263103942911217972166587207980646281539219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5a73acd717a829db394cbff5010ba3d269c2d3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.drm.pbs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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