gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:44:04:cb:8d:4b:e3:96:04:35:87:9f:f3:ac:85:7d was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:44:04:cb:8d:4b:e3:96:04:35:87:9f:f3:ac:85:7d
Serial Number (int): 20291593379838641940426678948187637117
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: af:34:52:48:40:27:05:4b:17:ed:a4:29:c5:71:f5:14:e7:42:d8:02
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): fa:f2:dd:f1:a3:4c:fc:9d:50:75:ac:88:be:80:f5:87:e0:c7:81:41
Fingerprint (sha256): 07:e3:60:5b:9d:40:63:72:15:d8:df:08:f2:2e:6d:df:03:79:33:1a:09:fd:a2:ae:26:d9:a6:89:58:94:58:e0

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk

Other certificates including the domain name dwp.gov.uk

(limited to 100 certificates)
36-ast.feat.exchange.dwp.gov.uk
gen-mr-1666-exchange-gateway.feat.exchange.dwp.gov.uk
1143-amr-exchange-gateway.feat.exchange.dwp.gov.uk
309-mr-redis.feat.exchange.dwp.gov.uk
api.747-amr.feat.exchange.dwp.gov.uk
sip.dwp.gsi.gov.uk
stat-xplore.dwp.gov.uk
api.445-evergreening.feat.exchange.dwp.gov.uk
getstatepension.dwp.gov.uk
api.44-bst.feat.exchange.dwp.gov.uk
*.atw.health.dwp.gov.uk
783-bmr-exchange-gateway.feat.exchange.dwp.gov.uk
support.findajobstage.dwp.gov.uk
secureies.dwp.gov.uk
778-amr-exchange-gateway.feat.exchange.dwp.gov.uk
secureupdate.dwp.gov.uk
321-evergreening.feat.exchange.dwp.gov.uk
45-ast.feat.exchange.dwp.gov.uk
api.744-bmr.feat.exchange.dwp.gov.uk
780-amr.feat.exchange.dwp.gov.uk
stat-xplore.dwp.gov.uk
1138-bmr.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
secureonline.dwp.gov.uk
oid-tes.feat.exchange.dwp.gov.uk
dev.uc.confirm-your-identity.dwp.gov.uk
747-bmr-exchange-gateway.feat.exchange.dwp.gov.uk
760-amr.feat.exchange.dwp.gov.uk
api.546-merge-request.feat.exchange.dwp.gov.uk
api.v2-11-merge-request.feat.exchange.dwp.gov.uk
api.757-bmr.feat.exchange.dwp.gov.uk
775-amr-exchange-gateway.feat.exchange.dwp.gov.uk
565-merge-request.feat.exchange.dwp.gov.uk
communicationcentre.dwp.gov.uk
516-mr-curity.feat.exchange.dwp.gov.uk
get-state-pension.service.gov.uk
supportforcysp.dwp.gov.uk
jira.dwp.gov.uk
771-bmr-exchange-gateway.feat.exchange.dwp.gov.uk
prap-staging.dwp.gov.uk
mr-887-redis.feat.exchange.dwp.gov.uk
733-amr-exchange-gateway.feat.exchange.dwp.gov.uk
api.315-evergreening.feat.exchange.dwp.gov.uk
741-amr.feat.exchange.dwp.gov.uk
api.1129-amr.feat.exchange.dwp.gov.uk
secure.dwp.gov.uk
api.orl-dun.feat.exchange.dwp.gov.uk
298-mr-curity.feat.exchange.dwp.gov.uk
careers.dwp.gov.uk
gen-mr-1482-exchange-gateway.feat.exchange.dwp.gov.uk
dev.prap.dwp.gov.uk
519-mr-keycloak.feat.exchange.dwp.gov.uk
ecs-mr-1483-exchange-gateway.feat.exchange.dwp.gov.uk
secureies.dwp.gov.uk
hol-mat.feat.exchange.dwp.gov.uk
gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk
api.553-merge-request.feat.exchange.dwp.gov.uk
584-evergreening.feat.exchange.dwp.gov.uk
www.dwpe-services.direct.gov.uk
sts-tell-us-someone-died.dwp.gov.uk
380-merge-request.feat.exchange.dwp.gov.uk
1132-amr.feat.exchange.dwp.gov.uk
ecs-mr-1478-exchange-gateway.feat.exchange.dwp.gov.uk
*.architecture.dwp.gov.uk
739-amr-exchange-gateway.feat.exchange.dwp.gov.uk
api.306-evergreening.feat.exchange.dwp.gov.uk
communicationcentre.dwp.gov.uk
bab-har-exchange-gateway.feat.exchange.dwp.gov.uk
getinvolved.dwp.gov.uk
1150-bmr.feat.exchange.dwp.gov.uk
1205-amr-exchange-gateway.feat.exchange.dwp.gov.uk
tell-us-someone-died.dwp.gov.uk
jobcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
772-bmr.feat.exchange.dwp.gov.uk
497-mr-keycloak.feat.exchange.dwp.gov.uk
api.773-amr.feat.exchange.dwp.gov.uk
729-amr.feat.exchange.dwp.gov.uk
bab-har-exchange-gateway.feat.exchange.dwp.gov.uk
sts.dwp.gov.uk
*.digital.uc.dwp.gov.uk
40-bst-exchange-gateway.feat.exchange.dwp.gov.uk
ecs-mr-1683-exchange-gateway.feat.exchange.dwp.gov.uk
1148-amr-exchange-gateway.feat.exchange.dwp.gov.uk
jobs.dwp.gov.uk
1143-bmr.feat.exchange.dwp.gov.uk
ecs-mr-1480-exchange-gateway.feat.exchange.dwp.gov.uk
securetest.tes.dwp.gov.uk
churchill-beta.dwp.gov.uk
789-amr-exchange-gateway.feat.exchange.dwp.gov.uk
*.architecture.dwp.gov.uk
paradoxrdpqa.dwp.gov.uk
mat-hol.feat.exchange.dwp.gov.uk
api.592-1-evergreening.feat.exchange.dwp.gov.uk
gen-mr-1675-exchange-gateway.feat.exchange.dwp.gov.uk
findajob.dwp.gov.uk
446-evergreening.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
38-ast.feat.exchange.dwp.gov.uk
790-amr-exchange-gateway.feat.exchange.dwp.gov.uk

Certificate

The complete raw certificate details for gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI887gsvzPLh0kCf0Qd8
TfnX2/M0N6cqTkpR98qr6a7bWPhjYMqF0NPuFH4svUu276y7avLOXV+4020FekPH
4lRjcD7OiDg8Rv9cebVg+O0uzasK+BZXzmbqee18SYI9lTgdeYMa4G2DQsHNjBtj
5jrrbuhBEBL0eSZZD2m6acnFCw1wtLJBJiEv7xeb84lCq0SnzGAtn6LRoM/Mqo/N
XwEcEEYBVcwhS2OSrY2IG/FXoDVqeVZJmcua4/I7Qi6PaH944NQQncrDo6+1MxJF
ZrQrBas5nwM4SCQ1Luxw2E7+HQFRGRJ4O0z91wYMMwyF4QQlDBYZEj/YgFc2p1+3
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20291593379838641940426678948187637117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17743995989166327482170925875943735667772750552897958511816571098112693713306315605534531672495494957121106041185483464848261955492445037534681905485135090683267575978615962429311280135000847413804008968592174815541055913991748645548742696572317939469613692712184158354326325525075708951900322302677671202034583639830503801976870931955157987559142325377485556604022413040734697855526965606111848047912280154894411339511701864415671600912169357997727372993185394764057143464202965322614106719687581779534678194341812609939196632613203789147916520252837170457366336063016449409274321633347716905040026364790844323510227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af3452484027054b17eda429c571f514e742d802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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