*.grid.id

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:89:e4:fb:38:2a:c9:05:fb:cb:f6:08:d7:fa:cf:62 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.grid.id

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:89:e4:fb:38:2a:c9:05:fb:cb:f6:08:d7:fa:cf:62
Serial Number (int): 20654408899434317880330961336930062178
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 91:0f:16:6c:a8:bf:00:fb:8d:7e:62:0e:dc:26:8d:47:ba:7a:6d:09
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 67:37:05:f6:57:ea:37:fa:1f:04:b2:f5:e2:83:37:48:02:38:9a:c6
Fingerprint (sha256): 0e:0f:f5:6f:9c:1e:19:38:e1:8f:47:6a:cd:49:0a:72:06:4f:f1:47:86:8a:c3:53:0d:c4:7a:61:85:51:44:ea

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.grid.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.grid.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.grid.id

Other certificates including the domain name grid.id

(limited to 100 certificates)
infokomputer.grid.id
makemac.grid.id
asset-a.grid.id
*.grid.id
infokomputer.grid.id
*.grid.id
fudezz.grid.id
fudezz.grid.id
games.nationalgeographic.grid.id
fudezz.grid.id
asset-a.grid.id
makemac.grid.id
asset-a.grid.id
infokomputer.grid.id
iduladhaalasase.sajiansedap.grid.id
*.grid.id
infokomputer.grid.id
fudezz.grid.id
fudezz.grid.id
*.grid.id
infokomputer.grid.id
plus.intisari.grid.id
grid.id
grid.id
fudezz.grid.id
fudezz.grid.id
dev-infokomputer.grid.id
*.kgmedia.id
grid.id
*.grid.id
fudezz.grid.id
grid.id
fudezz.grid.id
fudezz.grid.id
fudezz.grid.id
asset-a.grid.id
grid.id
ultah.idea.grid.id
*.kgmedia.id
infokomputer.grid.id
fudezz.grid.id
intisari.grid.id
asset-a.grid.id
infokomputer.grid.id
infokomputer.grid.id
*.grid.id
fudezz.grid.id
infokomputer.grid.id
intisari.grid.id
sannycloud.grid.id
grid.id
plus.intisari.grid.id
fudezz.grid.id
webstories.grid.id
infokomputer.grid.id
*.grid.id
webstories.grid.id
*.kgmedia.id
fudezz.grid.id
grid.id
stylovers.stylo.grid.id
*.grid.id
fudezz.grid.id
fudezz.grid.id
fudezz.grid.id
plus.intisari.grid.id
greateastern.nationalgeographic.grid.id
asset-a.grid.id
*.grid.id
fudezz.grid.id
stylovers.stylo.grid.id
dev-infokomputer.grid.id
*.grid.id
fudezz.grid.id
asset-a.grid.id
*.kgmedia.id
games.nationalgeographic.grid.id
grid.id
*.grid.id
*.kgmedia.id
infokomputer.grid.id
ramadhanalasase.sajiansedap.grid.id
*.grid.id
*.grid.id
fudezz.grid.id
fudezz.grid.id
*.grid.id
ultah.idea.grid.id
grid.id
infokomputer.grid.id
fudezz.grid.id
fudezz.grid.id
dev-infokomputer.grid.id
fudezz.grid.id
games.nationalgeographic.grid.id
*.grid.id
webstories.grid.id
jip.grid.id
grid.id
infokomputer.grid.id

Certificate

The complete raw certificate details for *.grid.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX2DDwIBdflOkVBhTgLB
TC7uMm1ZYU3vHCGLDCM6OwhcREpR1P8vsKdm6kfQcdcfQyUamte0ofE2AQtHUYy8
tMojKTXXAkePeG9hxwh6hL7RWf8wPOY89Xng15exB1M51ZmNeQBO2tad22U4GftO
2YLa6CXdtOtjTVCgDBB/AxQ5/k44BxQvvtWM6lyZF5LSsiji5pONleUmbsETGacj
apXgy9gIOhPlhzFCC1PNVgWIAqPK1P84TPL6nCJ/7scR8qtyW9b3bdp+K9gi2gDZ
vpKVhAjqOdIIL88K786XAEqv2ciu628K3kdfnpsgKBOVrfbi9hwguPiJNyQ/CTsB
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20654408899434317880330961336930062178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.grid.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21396165787455795444999323217744240941531728875033331765453637334245220674938966425976392275031823684992390173359068305565261043103515439160885475378361439308984256958369229588495014274434914350519526440483810635198480795457202783114386463461823125401110840075422217952571854289945957221128681632403209515929309342196590206222263585525912319602966943492236858502801512714010925461020603388248547584057836973281782822953364316351169853488952561237672300127605899252911353700481373472240679235621780732867521919335580540116535733645929627407564119745764129437871937531908383378056871798224084096272143677348621378584899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							910f166ca8bf00fb8d7e620edc268d47ba7a6d09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grid.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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