sesame.bdh.biogen.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:92:b6:05:cb:4d:57:a0:7b:f3:b8:4b:af:07:fe:df was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sesame.bdh.biogen.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:92:b6:05:cb:4d:57:a0:7b:f3:b8:4b:af:07:fe:df
Serial Number (int): 19370959139942542317895719646893965023
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:e2:35:6b:e0:70:3d:7b:f3:3b:98:8a:3f:1e:30:13:d8:9c:4c:79
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 58:0a:2a:21:be:fa:d4:29:b9:1f:a7:75:a1:eb:d5:40:f6:57:69:55
Fingerprint (sha256): 0e:5b:b8:62:2f:b3:ce:95:70:4f:77:62:2e:ce:a5:2e:74:e8:eb:85:70:7b:17:c1:47:bc:f5:8e:68:b7:2d:03

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate sesame.bdh.biogen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sesame.bdh.biogen.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sesame.bdh.biogen.com

Other certificates including the domain name biogen.com

(limited to 100 certificates)
lyvgw106p01.biogen.com
valextest.biogen.com
lyvgw105p01.biogen.com
incapsula.com
lyvgw101p01.biogen.com
lyvgw212p01.biogen.com
pschat.biogen.com
synapse.biogen.com
rdc.biogenidec.com
cdn.biogen.com
akamaisecure4.qualtrics.com
usrtgaapiwbp01.usrtgmcn.biogen.com
mygatewaydr.biogen.com
leapfrog-ssl-20.gcs-web.com
mycims.biogen.com
api.biogen.com
searchapi.biogen.com
eis3int.biogen.com
aws-bastion.bdh.biogen.com
lywn101p01.corp.biogen.com
lyvgw215p01.biogen.com
leapfrog-ssl-20.gcs-web.com
akamaisecure4.qualtrics.com
synapse-cms.biogen.com
akamaisecure4.qualtrics.com
rtpacedge.biogenidec.com
eis3devint.biogen.com
search.biogen.com
lysba217p01.corp.biogen.com
smetric.biogen.com
wiki.biogen.com
incapsula.com
www.biogen-armm.eu
leapfrog-ssl-20.gcs-web.com
tst.api.biogen.com
securemail.biogen.com
camvmcorpdc02.corp.biogen.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
akamaisecure4.qualtrics.com
tst.api.biogen.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
eics1.biogen.com
survey.zolamedia.com
www.tysabri-video.com
usawsaaazp0120.aaz.amazon.biogen.com
sesame.bdh.biogen.com
clinicalresearch.biogen.com
cdn.biogen.com
incapsula.com
amsbiib.biogen.com
lyed102p01.corp.biogen.com
spam.biogen.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
wecare.adviserly.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
elnewrkbkp1.corp.biogen.com
leapfrog-ssl-20.gcs-web.com
usawsaaacs0045.aac.amazon.biogen.com
neoplmsiteval.abh.gxp.amazon.biogen.com
securemail.biogen.com
spservice.gateway.biogen.com
ShaCCECluster.biogen.com
leapfrog-ssl-20.gcs-web.com
activate.biogen.com
gmi.biogen.com
leapfrog-ssl-20.gcs-web.com
sinequavmd01.corp.biogen.com
dev.api.biogen.com
lyvgw216p01.biogen.com
spam.biogen.com
akamaisecure4.qualtrics.com
dvddv1.aay.amazon.biogen.com
wesfepool.corp.biogen.com
leapfrog-ssl-20.gcs-web.com
tst1.api.biogen.com
leapfrog-ssl-20.gcs-web.com
shiny.analyticaldev.biogen.com
www.biogen.com
rdc.biogenidec.com
akamaisecure4.qualtrics.com
leapfrog-ssl-20.gcs-web.com
RTPACEDGE.BIOGENIDEC.COM
incapsula.com
camvmcorpdc02.corp.biogen.com
akamaisecure4.qualtrics.com
wesofcwebapp-int.corp.biogen.com
developer.biogen.com
akamaisecure4.qualtrics.com
wicom-tst.biogen.com
O3PRXY102P02.biogen.com
survey.zolamedia.com
api.biogen.com
lyvgw217p01.biogen.com
developer.biogen.com
ar.biogen.com

Certificate

The complete raw certificate details for sesame.bdh.biogen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznWe1PQlNVvLVk69xkFa
2mSUvYDwlkYiKvUCrATiPNWCB3DY3eWvg7EO4GFhXex/28kHEkq7NTzMETGeu/Rb
xJ5UIz87UOSg6ks5k5aC1A16InC1dwQZ8diMuxZCqRp0e42dz+BTmAtezzdvIN68
io+r29eH4s5q2/Q0q3b9hiC+zSZZfuFVT2GEuZoySqk7/aZ1L65j/Dd3Ls2qT7gc
eJe5LehaWn6bwMdYPFmmp7Jzr3PjY00Eq/y+wJs1c3eMzs+1/yLlFjzrP0hLwEKJ
f6I2jeyNHm5ssKP1xICroqfEfFYvgOjBdq2rzf5geVKnIP5CXKvs+V5fP3V/8doJ
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19370959139942542317895719646893965023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sesame.bdh.biogen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26063091622170486932996652380594232303604013403338180842488565555827882360954158079077775957203813745964078088289074090639777711904533358615714364937511648076786614463772088916283950067905585217396384416423235588694021875743926966186215810575058161751406998019774915187208162317080182803879405118398162020853004905185088508051328310545101920328251419571788810011099004733288285949818669405831801559446610245432042312376038142355478730281505624656389692826495754989139486671359796160276977036454792996285424605258378843988707747147237066268126452784696138465301987508028838060106113752351464223134870552481920047515911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cde2356be0703d7bf33b988a3f1e3013d89c4c79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesame.bdh.biogen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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