jazznetworks.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:74:14:6d:a6:c1:6f:7a:07:65:69:e6:8c:07:dc:82 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jazznetworks.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:74:14:6d:a6:c1:6f:7a:07:65:69:e6:8c:07:dc:82
Serial Number (int): 20541140708033925933932149051752963202
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e9:6c:ae:38:b6:05:5f:ec:4f:37:1e:06:7f:fc:81:6f:cc:21:67:f1
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e3:02:17:f5:e0:e5:54:d7:8b:e8:c7:ce:a6:8a:c7:26:68:4b:25:56
Fingerprint (sha256): 0a:af:a5:86:2d:e9:c4:ff:ef:4e:be:58:70:3c:df:1b:15:3c:86:0b:79:6d:2b:9d:93:34:90:2c:d7:0a:5e:eb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate jazznetworks.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jazznetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jazznetworks.com
*.jazznetworks.com

Other certificates including the domain name jazznetworks.com

(limited to 100 certificates)
kvy-eu2-status.kinvey.com
*.dev.jazznetworks.com
overthebunker.com
reveal.avasecurity.com
reveal.avasecurity.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
www.cakeitawaymerrylands.com
jazznetworks.com
partner.jazznetworks.com
demo.jazznetworks.com
*.jazznetworks.com
kvy-eu2-status.kinvey.com
info.jazznetworks.com
kvy-eu2-status.kinvey.com
info.jazznetworks.com
kvy-eu2-status.kinvey.com
lambda.dev.jazznetworks.com
kvy-eu2-status.kinvey.com
www.swingdata.app
jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
100s.tv
support.jazznetworks.com
seeticketstatus.com
jazznetworks.com
cloud.jazznetworks.com
kvy-eu2-status.kinvey.com
support.jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
www.tuckermillerdev.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
support.ava.uk
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
federal.jazznetworks.com
info.jazznetworks.com
kvy-eu2-status.kinvey.com
support.jazznetworks.com
kvy-eu2-status.kinvey.com
demo.jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
cloud.jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
*.dev.jazznetworks.com
partner.jazznetworks.com
*.jazznetworks.com
stage.brv.dev
donedigital.com.au
kvy-eu2-status.kinvey.com
jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
events.jazznetworks.com
www.thebiermans.net
gcloud.jazznetworks.com
bignmore.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
www.casanova-ai.com
support.jazznetworks.com
*.ds.jazznetworks.com
lambda.dev.jazznetworks.com
bridge.skey.network
events.jazznetworks.com
kvy-eu2-status.kinvey.com
bridge.skey.network
kvy-eu2-status.kinvey.com
www.tuckermillerdev.com
kvy-eu2-status.kinvey.com
jchenderson.com
etos.management
*.cloud.jazznetworks.com
jsg.jazznetworks.com
support.jazznetworks.com
kvy-eu2-status.kinvey.com
demo.jazznetworks.com
cloud.jazznetworks.com
reveal.avasecurity.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
partner.jazznetworks.com

Certificate

The complete raw certificate details for jazznetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+U+bf6vKdXXymKEpiKb
6jrl/eTpS2cXgnv5XLS1rIsF35nsjdoIT7uzoDsyF8ERRv+rfnP1iT4rGkkUC1g0
4Wzg87szf7H23GpIvOUIN9ydN7VL5Q5zKgP/+BtzHOlt3tleYYrf2hKamdXuDfk+
HK0tf/Uj0QIDV+09ZeNkf1S7K0WXspbZpOfHqZOJhO3DubLB8J9+KNC7l4qR70Q8
F2eISlIXLHvJ2dkZ2CyYBCt4POYtUDgDdpeOQmmQ3pRil3VuTjWWTPqAMfSxiSCu
TTl2ErTEWKdwiruN1NhVlap5m6lSELpFBN/m6tCDDOH3IEhKq6lruiGV6GruMrne
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20541140708033925933932149051752963202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jazznetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21194841292822471251792740602235970825777617884534321649728431859750025938009599034821803919309108749131589144238312109606758357460271602470999985352469826281113679957115835596769351986654265723430739121569519195104423968889308769760496333319012523203414702028720094527709449707864781490405628014752768806021049810086105987660065413255622825661224930313650009570472477740793992037172421405165905507692930543701314333926993299685007262801196436955875398451669240720704484066330401124261663533376058170016251361316149888034243344967910031715225302933815643397151663316325090727535403894330239400649634428113155704610351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e96cae38b6055fec4f371e067ffc816fcc2167f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazznetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jazznetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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