*.admin.test.queue-it.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:9d:60:eb:ea:29:a0:55:4f:31:ce:aa:0c:93:cc:e0 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.admin.test.queue-it.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:9d:60:eb:ea:29:a0:55:4f:31:ce:aa:0c:93:cc:e0
Serial Number (int): 19426348350188746979928640905477868768
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:2f:69:a1:09:85:e1:f9:eb:b7:28:74:46:06:49:50:c5:79:48:6c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 26:c0:f0:3f:66:1a:a2:62:1a:07:71:47:16:48:66:00:3b:e3:1f:e5
Fingerprint (sha256): 0f:1c:f0:6d:a7:67:6f:85:67:cf:e9:1c:f5:1c:d6:3a:6b:81:58:64:a9:54:9d:97:c3:5d:a2:44:c3:05:e9:03

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.admin.test.queue-it.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.admin.test.queue-it.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.admin.test.queue-it.net
admin.test.queue-it.net

Other certificates including the domain name queue-it.net

(limited to 100 certificates)
sslcertificate3.queue-it.net
*.test.queue-it.net
hd-dtc.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net

sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate4.queue-it.net
sslcertificate4.queue-it.net
sslcertificate1.queue-it.net
go.test.queue-it.net
sslcertificate1.test.queue-it.net
tomo.okos.uno

sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sa-east-1-logging.test.queue-it.net
*.test.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net

api2.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net

sslcertificate4.queue-it.net
*.test.queue-it.net
vpn.test.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net
api2.test.queue-it.net
api2.test.queue-it.net
sslcertificate1.queue-it.net
www.queue-it.net
sslcertificate4.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
electronicarts.queue-it.net
go.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net
sslcertificate1.queue-it.net
go.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.test.queue-it.net
*.admin.test.queue-it.net
sslcertificate3.queue-it.net
portal.childrens-mercy.darivault.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
sslcertificate4.queue-it.net
*.queue-it.net
sslcertificate1.queue-it.net
*.queue-it.net
go.queue-it.net
api2.queue-it.net


sslcertificate2.queue-it.net
sslcertificate3.queue-it.net
*.test.queue-it.net
sslcertificate1.test.queue-it.net
api2.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
sslcertificate1.queue-it.net
sslcertificate5.queue-it.net
*.test.queue-it.net
api2.queue-it.net
sslcertificate2.queue-it.net
*.queue-it.net
cf.go.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate4.queue-it.net
vpn.test.queue-it.net
*.test.queue-it.net
sslcertificate1.test.queue-it.net
go.queue-it.net
*.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.queue-it.net
sslcertificate2.queue-it.net
wazuh.internal.queue-it.net
api2.test.queue-it.net
herning.citytilbud.dk
sslcertificate5.queue-it.net
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate2.queue-it.net

api2.queue-it.net

Certificate

The complete raw certificate details for *.admin.test.queue-it.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWV+zMICztvxJVutgZnb
eDWtAr7uZTtkFc2oC992G+cibAUdp9hkx7VGkf9n87zmgc1PBb7ZlVVSd2nvuiWQ
TXeRCnJsattC9oqCg9UzGSkfW+imUWYDZieWlKoBQu+61NHFBtlLTe8IjVgszhCR
hEnDzxbDxThAYfo5pyM/P8Mi8hYzsMwfu0DFL95v5kcwfarf+Bal0hOplwY/oBD+
ofANcIUamEI2c7Bk6YIAvBCHrO/ShkHAqF2ftdBdaQdqQfjPL/LlflhCnvqGPlmu
+CqUojdLB6PfK4HOeDwHH0Mj0Mlm3QSdZAVxKi6gDHrPPtzSz+nIPcFiBYn+9bXN
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19426348350188746979928640905477868768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.admin.test.queue-it.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17849650203850279612818345404209941689585291483540349476507173580840220125065151352388464900271755759847518249868895048722537319674445362731696258805249303655885135159675994114671525250942660439522254456286638706489953103756823617572562250579095203018874805396236971551563452204339045645957335397140668693786982370529660152195664921419472381586765692476639174757396760290823713031222971208128607229512075841424680781016601475164192371924113525225969205593566045607082194256695171229343702816231235058312301812731489137619278251084325917916229565099891970600135712914723081772688154305893898403200052351705755891912051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e52f69a10985e1f9ebb7287446064950c579486c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.test.queue-it.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.test.queue-it.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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