icrgu.navitas.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:f8:65:6c:7f:18:a1:9c:17:20:be:9f:61:98:49:79 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=icrgu.navitas.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:f8:65:6c:7f:18:a1:9c:17:20:be:9f:61:98:49:79
Serial Number (int): 14582026698111689987518846261259684217
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:45:0d:21:91:bf:2c:61:30:12:cb:4b:0a:0c:3b:52:4f:4b:38:12
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 6d:15:29:4e:51:6a:6b:6f:72:83:73:0e:79:2d:dc:f5:03:19:40:2b
Fingerprint (sha256): 07:6b:55:f2:3c:73:c7:38:aa:38:72:04:73:27:ad:fe:53:3d:f1:b0:9f:e9:d2:30:fa:f9:73:d1:d5:17:b1:cb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate icrgu.navitas.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for icrgu.navitas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

icrgu.navitas.com
www.icrgu.navitas.com
s42968.pcdn.co

Other certificates including the domain name navitas.com

(limited to 100 certificates)
www.bcuic.navitas.com
study.hibt.navitas.com
sdp.collinsfoods.com
s4-sni.cloudinary.com
access2.navitas.com
www.upic.navitas.com
s4-sni.cloudinary.com
www.unh.navitas.com
s4-sni.cloudinary.com
helpdesk.thescapegroup.com.au
moodle-sae-au.axis.navitas.com
s4-sni.cloudinary.com
moodle.icrgu.navitas.com
moodle.uml.navitas.com
study.wku.navitas.com
study.bcuic.navitas.com
marketing.navitas.com
www.icp.navitas.com
moodle-sae-au.axis.navitas.com
www.uml.navitas.com
moodle.unic.navitas.com
www.icp.navitas.com
study.puic.navitas.com
www.upic.navitas.com
support.canterbury.qld.edu.au
www.financesharedservices.navitas.com
cdn.navigate.navitas.com
theportal.horizons.govt.nz
study.puic.navitas.com
study.puic.navitas.com
moodle.ucc.navitas.com
study.icrgu.navitas.com
*.hic.navitas.com
study.umd.navitas.com
study.bcuic.navitas.com
s4-sni.cloudinary.com
mynavcareer.pep.navitas.com
icrgu.navitas.com
adfs.navitas.com
helpdesk.grv.org.au
www.umass.navitas.com
sslvpn.navitas.com
code.navitas.com
moodle.training.navitas.com
*.eic.navitas.com
code.navitas.com
moodle.libt.navitas.com
mynavcareer.pep.navitas.com
agents.navitas.com
moodle.libt.navitas.com
learning.uml.navitas.com
moodle.hic.navitas.com
wifi.navitas.com
*.navitas.com
www.cric.navitas.com
fdus-68.freshdesk.com
*.training.navitas.com
www.umb.navitas.com
pathways.navitas.com
study.icrgu.navitas.com
usa.navitas.com
www.qld.navitas.com
servicehub.austal.com
knowledge.navigate.navitas.com
study.icws.navitas.com
study.hic.navitas.com
atrea-support.macmillan-platform.com
www.fau.navitas.com
www.icws.navitas.com
s4-sni.cloudinary.com
www.icgru.navitas.com
fdus-68.freshdesk.com
sslvpn.navitas.com
adfs.navitas.com
usawiki.navitas.com
*.training.navitas.com
www.bcuic.navitas.com
*.navitas.com
*.uat.navitas.com
moodle-analytics.navitas.com
build.navitas.com
study.uml.navitas.com
www.icws.navitas.com
navigate.navitas.com
moodle-ucic.axis.navitas.com
www.icrgu.navitas.com
servicedesk.yooralla.com.au
study.libt.navitas.com
www.icp.navitas.com
fdus-68.freshdesk.com
atrea-support.macmillan-platform.com
helpdesk.phsa.com.au
moodle.icrgu.navitas.com
learning.fau.navitas.com
servicedesk.cockburn.wa.gov.au
www.icws.navitas.com
navigate.navitas.com
s4-sni.cloudinary.com
learning.libt.navitas.com
moodle.bcuic.navitas.com

Certificate

The complete raw certificate details for icrgu.navitas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZU0FKE991zkALdKFtqu
uVG2VxNDKIBPod+fikhpf4jMvd4TKGMTwdZZ73nK8lNBxa4F3ksI1aG8a5hfi6Aw
px5zYLrL8TEJOpCbPeV+nT7NVn8h9cQiiSbkw0PoXcgN5P+UNgS+RUz2+eII41nv
A3Dyy2V9BHwod06S7VMpqVkg/3/xKtCfn3ohR53yOsjBozVOdi0HZGY9BbwvvPho
kri6WonDVnDH6OgpZsY6noksKgVZqIRhtzEc0ctqUcuCMgBtAyYsqG4IPb4hIJ7E
5GkvnMgAy+J6+2ukPWLD/JO47PoDnqn53Z7B9jRW9Nldgfvx35xdKEp73IeW0q0V
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14582026698111689987518846261259684217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icrgu.navitas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23932614596920080818508575980413270444661717475072038990450381498687113292695688737676680887959871865814552804206328165471673853994053108853226452727200577546195676720407008630829038879651064103924946148860429419128099402290151881510117169547162038543112024879506560608884538131654040265359947336653145372416339311356475636597340594110159959190232803422632669842005360136118946365611738547094286243944702706300931600050589636153645727646193162182060434988380304594291271270203653799426511371351040821097751009897197274653187637106498890946000044571882430902791886121641981693501841530903916542781416043890210199377193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8450d2191bf2c613012cb4b0a0c3b524f4b3812
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icrgu.navitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icrgu.navitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's42968.pcdn.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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