mpcv-api.claims.clmsbx.test.c1.statefarm

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:54:3c:66:d9:d2:12:0a:c6:59:50:aa:1a:7b:ac:42 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mpcv-api.claims.clmsbx.test.c1.statefarm

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:54:3c:66:d9:d2:12:0a:c6:59:50:aa:1a:7b:ac:42
Serial Number (int): 8412746004087423068114903444527754306
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:f6:87:2f:6b:5e:41:32:04:3f:3b:14:89:27:52:77:b3:0f:e9:ab
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 56:3e:ad:d4:a5:82:1e:e3:2e:c6:43:2d:83:27:79:0a:b6:aa:6b:98
Fingerprint (sha256): 07:b3:4d:57:23:d7:07:48:d4:1f:b9:5c:7d:60:96:57:54:0b:b9:89:51:d6:a7:5d:97:6f:72:3b:59:0b:24:97

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate mpcv-api.claims.clmsbx.test.c1.statefarm

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mpcv-api.claims.clmsbx.test.c1.statefarm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mpcv-api.claims.clmsbx.test.c1.statefarm

Other certificates including the domain name c1.statefarm

(limited to 100 certificates)
repaireligibility-1733283.claims.test.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
rentaleligibility-1713142.claims.test.c1.statefarm
status-guidance.claims.c1.statefarm
viewcol.claimsvc.clmsbx.test.c1.statefarm
telematics.aa.enrollment.env10.tl1.test.c1.statefarm
test.driveforsafety.test.goodneighbors.com
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
*.apis.alncacq.test.c1.statefarm
ocd.research.c1.statefarm
driveforsafety.whs.c1.statefarm
fireqfcapi.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1490984.claims.test.c1.statefarm
www.developer.c1.statefarm
mediadownload-bus.claimsvc.test.c1.statefarm
repaireligibility-1748488.claims.test.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
*.apis.alncacq.test.c1.statefarm
cicr-api.commxper.test.c1.statefarm
repaireligibility-1727262.claims.test.c1.statefarm
telematics.aa.eligibility.env10.tl1.test.c1.statefarm
roadsideassistance.claims.test.statefarm.com
rentaleligibility-1298191.claims.test.c1.statefarm
*.tl1.c1.statefarm
api.claims.sandbox.c1.statefarm
mpcv-api.claims.clmsbx.test.c1.statefarm
rentaleligibility-perf.claims.test.c1.statefarm
claimprefexp.claims.sandbox.c1.statefarm
mpcv-ui.claims.clmsbx.test.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
info-exp.claimsvc.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
api.infosec.c1.statefarm
*.oic.claims.test.c1.statefarm
arsondog.whs.research.c1.statefarm
photovideocapture.claims.test.statefarm.com
verify.cim.test.c1.statefarm
api.infosec.c1.statefarm
manage-tasks.claimsvc.test.c1.statefarm
rentaleligibility-1290042.claims.test.c1.statefarm
repaireligibility-1490984.claims.test.c1.statefarm
help-faqs.claims.test.c1.statefarm
media-mfe.claims.sandbox.c1.statefarm
providers.rental.claimsvc.c1.statefarm
telematics.aa.enrollment.test10.tl1.test.c1.statefarm
driveforsafety.whs.c1.statefarm
checkout.hub.claims.statefarm.com
cornhole-api.xrhost.c1.statefarm
developer.c1.statefarm
managestorage.claimsvc.sandbox.test.c1.statefarm
qualfc-env4.claims.sandbox.test.c1.statefarm
nachuntar.xrhost.test.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
repaireligibility-1735606.claims.test.c1.statefarm
crashreports.test7.tl1.test.c1.statefarm
plapcaws-prod-actions.pcmngd02.c1.statefarm
rentaleligibility-1743787.claims.test.c1.statefarm
rentaleligibility-1746348.claims.test.c1.statefarm
facade-env4.ecrmclaims.amccint.test.c1.statefarm
towexperienceapi-exp.claimsvc.test.c1.statefarm
roadsideassistance.claims.statefarm.com
sf-aqua-security.research.c1.statefarm
*.apis.alncacq.test.c1.statefarm
uimod-mfe.dcpm-sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
cornhole-api.xrhost.c1.statefarm
media-mfe.claims.c1.statefarm
driveforsafety.whs.test.c1.statefarm
api.rapid-reimbursement.claims.s.test.c1.statefarm
photovideocapture.claims.test.c1.statefarm
repaireligibility-1297024.claims.test.c1.statefarm
api.infosec.c1.statefarm
prepsub-exp.claims.sandbox.test.c1.statefarm
selfie-experience.xrhost.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
manage-tasks.claimsvc.sandbox.test.c1.statefarm
rentaleligibility-1292675.claims.test.c1.statefarm
rentaleligibility-1745749.claims.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
media-mfe.claims.sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
sf-aqua-security.research.c1.statefarm
rentaleligibility-1740151.claims.test.c1.statefarm
repaireligibility-1730977.claims.test.c1.statefarm
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
gnc-virtualmeeting.amccint.c1.statefarm
rss.claims.test.c1.statefarm
mddl-dev.c1.statefarm
digitalqfc.claims.test.c1.statefarm
rentaleligibility-1736987.claims.test.c1.statefarm
ocd.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
assignments.rental.claimsvc.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
premiumchange-api.pcu.conncen.c1.statefarm
driveforsafety.whs.c1.statefarm

Certificate

The complete raw certificate details for mpcv-api.claims.clmsbx.test.c1.statefarm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGarFWrqWfDVjwW9NyYm
6LsZMpCfV3gXzE5JyU32EWHyoRh3glLYwkZ8v4Rw4zCxY/15IPFquiuEknsoioyx
eM3CzycJNiV+2x0aKhnrmbWmr7caQRk4rbL5TGFMc11dvg3hkpiF0uoFK2taWNi2
OLofJdXF/cPXL9ri8b/tTMk61KdghSjsUVnDbPeqtc+xHpPkxSOpTo2VOP2kJbJj
OfYzYPFXqWwN7/QXs3LJnuVvVhzI+j0u1K1reRUeHe9ZJqwCFh3NFWOpCyA9RlFA
POT5DnMMJU/XZI+EFy4MsJUuYA0ooEvyaRlEHIhlysgb1dfHEhmG+3yGIjiVJzDE
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8412746004087423068114903444527754306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mpcv-api.claims.clmsbx.test.c1.statefarm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23783428957075656307215728984287835744698711319014818297840536981608418724445588108780410582455055075146018808783656983043521447460939283949308257047105387802298301458653445282570710248996870078923265758739079519778474617986812619514762265073951706408739502564141444847997625878528458829495649730396502777306606404232328842594357984256724914153839255137795778858533338572317331216775417535102291912197323539588256683055826451125986819929053883101598770767953982750682439804552918911244025105893324440915839124276314737982463913205807873370373621819735868709319839913751063355428748668207266091389593721422289797432453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fff6872f6b5e4132043f3b1489275277b30fe9ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcv-api.claims.clmsbx.test.c1.statefarm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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