*.testuat.singapore.swig.gy

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:14:06:9e:a1:08:cf:ae:14:9a:bd:79:e3:12:c9:06 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.testuat.singapore.swig.gy

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:14:06:9e:a1:08:cf:ae:14:9a:bd:79:e3:12:c9:06
Serial Number (int): 5420892182655397936847324929636616454
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 51:16:5b:dc:2b:ed:8f:a7:4e:ff:29:4a:53:d4:d2:5c:a2:b1:26:26
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 4f:a2:c7:38:6f:ba:55:d0:41:eb:aa:7d:09:de:91:b2:93:58:20:ad
Fingerprint (sha256): 07:e6:14:99:9d:b2:44:81:63:91:ee:8a:ee:2d:2c:a5:6b:ea:ba:49:b1:1c:d9:83:8a:ab:07:20:c5:cc:82:35

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.testuat.singapore.swig.gy

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.testuat.singapore.swig.gy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.testuat.singapore.swig.gy
*.testuat.singapore-c.swig.gy
*.testuat.singapore-b.swig.gy
*.testuat.singapore-a.swig.gy

Other certificates including the domain name swig.gy

(limited to 100 certificates)
*.reg05.singapore.swig.gy
*.qgps210.singapore.swig.gy
*.heatmap.singapore.swig.gy
*.foodgrowth.singapore.swig.gy
*.srsa4210.singapore.swig.gy
*.eh5.singapore.swig.gy
swig.gy
*.qgps1667.singapore.swig.gy
*.satyam0212.singapore.swig.gy
*.ozonedlm23.singapore.swig.gy
*.mobi.singapore.swig.gy
*.dlmreg2.singapore.swig.gy
*.footest.singapore.swig.gy
*.qgps939.singapore.swig.gy
*.testuat.singapore.swig.gy
*.eh10.singapore.swig.gy
*.foode2e02.singapore.swig.gy
*.irctc.singapore.swig.gy
*.dexp10.singapore.swig.gy
*.payments01.singapore.swig.gy
*.eh11.singapore.swig.gy
*.ozonealb.singapore.swig.gy
*.deap453.singapore.swig.gy
*.qgps9228.singapore.swig.gy
*.rtz1.singapore.swig.gy
*.dlmu3666.singapore.swig.gy
*.qgps1022.singapore.swig.gy
*.dlmreg1.singapore.swig.gy
*.deas5872.singapore.swig.gy
*.rocke2e9.singapore.swig.gy
*.fndr.in-west.swig.gy
*.nofrills1.singapore.swig.gy
*.dexp6928.singapore.swig.gy
*.eh12.singapore.swig.gy
*.fleetcap2.singapore.swig.gy
*.finqa.singapore.swig.gy
*.ozonescrip.singapore.swig.gy
*.restest04.singapore.swig.gy
*.hptest1.singapore.swig.gy
*.deap7934.singapore.swig.gy
*.ozoneharsh.singapore.swig.gy
*.dashserv01.singapore.swig.gy
*.seetest.singapore.swig.gy
*.dcptp.singapore.swig.gy
*.env052.singapore.swig.gy
*.ozonedebug.singapore.swig.gy
*.testcf.singapore.swig.gy
*.seetest1.singapore.swig.gy
*.dctest.singapore.swig.gy
*.dexp9489.singapore.swig.gy
*.taskenv.singapore.swig.gy
*.brand.singapore.swig.gy
*.qgps6038.singapore.swig.gy
*.dexp6265.singapore.swig.gy
*.foode2e01.singapore.swig.gy
*.banner07.singapore.swig.gy
*.env062.in-west.swig.gy
*.hitl1.singapore.swig.gy
*.dcpod.singapore.swig.gy
*.tmsreg.singapore.swig.gy
*.reset.singapore.swig.gy
*.payments13.singapore.swig.gy
*.ordernew.singapore.swig.gy
*.payments05.singapore.swig.gy
*.loyaltyen.singapore.swig.gy
*.qgps1187.singapore.swig.gy
*.rain.singapore.swig.gy
*.ozonedlm25.singapore.swig.gy
*.foode2e03.singapore.swig.gy
*.basefleet.singapore.swig.gy
*.eh8.singapore.swig.gy
*.devas8.singapore.swig.gy
*.chaostest.singapore.swig.gy
*.fleetseg.singapore.swig.gy
*.srsa2195.singapore.swig.gy
*.fpfleetseg.singapore.swig.gy
*.test123.singapore.swig.gy
*.sparshtest.singapore.swig.gy
*.foodrlbdd1.singapore.swig.gy
*.eh4.singapore.swig.gy
*.xpv2.singapore.swig.gy
*.dexp9385.singapore.swig.gy
*.menureg.singapore.swig.gy
*.swigcenter.singapore.swig.gy
*.dexp3592.singapore.swig.gy
*.ozonem1.singapore.swig.gy
*.ozonedlm22.singapore.swig.gy
*.mob.singapore.swig.gy
*.ddbtest212.singapore.swig.gy
*.mob1.singapore.swig.gy
*.shuttleu1.singapore.swig.gy
*.dexp7975.singapore.swig.gy
*.dexp5958.singapore.swig.gy
*.gpprom1.singapore.swig.gy
*.env055.singapore.swig.gy
*.payments02.singapore.swig.gy
*.testzone.singapore.swig.gy
*.dexp7815.singapore.swig.gy
*.qgps1215.singapore.swig.gy
*.test5.singapore.swig.gy

Certificate

The complete raw certificate details for *.testuat.singapore.swig.gy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq3M55OehzBZIIikxnys
IE9ix9xdg9fMAvlLLT8UcTUw4qNXYuPvj88+UhfPnw3v4U2pvPwOtqMUiPwxrePj
lx9HRc/Jgjn5djT9Rlwlvz46RFHYlNXq2fUjGF8NWK/goDTBv+j1wqhGAtpBSVkv
Gqm/gUJYKauq9Fojwk5RNhyyF4BrGE2v2+JfrrVhzJyyLv6iPneSgyzoiir+jat0
HxZUxqWdwksxVGbDL9p/t/3JD3cWOLoxGwiiFaa0k9lhJ4mxnUMruo33gDUTc8gm
O9e7CEDQS97Hyizm0Edja301M8rEoMHnH/QBMUHJbSWnb7Fz93qvL7Wruifl1cSo
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5420892182655397936847324929636616454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.testuat.singapore.swig.gy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18011543480889034429930364271888908854111062926936176945649292874302282134353878237860095321258466966449846122588889561332938567477428173352692731360739398955904396005038924244619007258625628091538997339606783615133959198314641522297754475486254896997469010599793337607472856051452175923667984296236898977653055683991022782716081130455948441954988210362462349565738816989819089080402794444724070923210942387052468335654852860332126383899730781000457423011585863033688380317152728739774621438822808858861385021413137548719538482870579801363816921571120065011855838310854751985506009379000255362319074281841493239179489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51165bdc2bed8fa74eff294a53d4d25ca2b12626
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testuat.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testuat.singapore-c.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testuat.singapore-b.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testuat.singapore-a.swig.gy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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