euwest1a.tines.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:ce:59:52:72:45:50:15:03:17:fd:30:39:a4:22:e7 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=euwest1a.tines.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ce:59:52:72:45:50:15:03:17:fd:30:39:a4:22:e7
Serial Number (int): 10376020789881721948257273099093025511
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c2:df:67:6f:a5:dc:37:b8:5f:ee:8a:f0:22:14:ba:52:0b:eb:e2:e2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a6:d7:5d:ff:da:53:71:31:f5:28:f7:72:fa:9d:40:a1:6e:e1:0b:13
Fingerprint (sha256): 08:65:fe:d7:de:8e:62:7d:a4:1a:06:79:52:83:e2:81:04:ef:d0:58:e7:23:a5:ee:63:a9:89:4b:59:17:79:33

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate euwest1a.tines.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for euwest1a.tines.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

euwest1a.tines.com
*.tines.com
tines.io
tines.com
*.tines.io
tines.plaid.com
soar.reevo.it

Other certificates including the domain name tines.com

(limited to 100 certificates)
mail.tines.com
tines.io
tines.com
tines.io
tines.com
tines.zdrake.com
euwest1a.tines.com
demo3.tines.com
tines.com
engage.tines.com
tines.com
demo3.tines.com
tines.com
tines.com
tines.com
tines.com
demo3.tines.com
tines.com
data.tines.com
mail.tines.com
*.tines.com
tines.com
mail.tines.com
tines.com
tines.secops.sprinklr.com
tines.com
tines.com
tines.io
tines.com
askinfosec.rbx.com
mail.tines.com
tines.io
tines.com
mail.tines.com
tines.io
mail.tines.com
tines.com
tines.com
tines.com
tines.com
tines.com
tines.com
mail.tines.com
tines.com
tines.com
tines.com
admin.tines.com
tines.com
tines.com
tines.com
admin.tines.com
mail.tines.com
tines.com
mail.tines.com
tines.com
tines.com
mail.tines.com
tines.com
*.tines.com
tines.com
mail.tines.com
demo3.tines.com
mail.tines.com
data.tines.com
mail.tines.com
mail.tines.com
demo3.tines.com
*.tines.com
tines.com
mail.tines.com
*.tines.com
mail.tines.com
demo3.tines.com
tines.com
tines.com
tines.com
mail.tines.com
mail.tines.com
tines.com
tines.com
mail.tines.com
mail.tines.com
tines.com
tines.com
data.tines.com
mail.tines.com
mail.tines.com
mail.tines.com
mail.tines.com
admin.tines.com

Certificate

The complete raw certificate details for euwest1a.tines.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g+o+gTb7TtbVYopc6qH
HoZjT2gtpD6zXqj0k/x2kLgPbIy9TDiF+KuC7Mk4gm5Je9A0i4sPjjQ8JqeCB+45
tCsdxRTIKWZbLNTB+tvp7M+P2FwKyfEEQJ2oYeyoBuBM01V7z+RqNDYCtMdGqu6Y
CiT0EzFOLvKm2M+NK+L1Z7nxijkahWyoWvB/+tLlNZgc8O5wDnDFcOY+2q4FNVGK
m4WUxMQl4E+2AaFnjYiXK9XO80t6y69ovfNYGwTWb/ut/R5qeAewTyFZXsQBeuN9
RbHCNaagqapyKctEB2gZnoE1MvhDuV+dV1LzEPsceeUvDlXca3t1Qy1bLrT39MZ3
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10376020789881721948257273099093025511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'euwest1a.tines.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27527672748458605049085595675766343390638239353401434761045326388527864769295305006846483703618446320962041925066354990053105394123566663417265355228691838448240562007188965910148479999637130498090398830978499568733806768721489507424371702798259693190801984251669601887115316932202279471816792557522573194787319839686469854155532255941588343753578122993408324064061912374095581048624048790388523096968468597492540346051270169745485898785716706205945257378271137965372286724378631785110352005995587550656001620680716265768810815157879101957348868371421458095984428799703984225315491448400889900603714311053162498652131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2df676fa5dc37b85fee8af02214ba520bebe2e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euwest1a.tines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tines.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tines.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tines.plaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soar.reevo.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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