green-iot-avx-e.airview-messaging-stg.dht.live

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:8e:0e:b0:cb:59:c2:0a:0e:a2:2c:65:48:10:e2:70 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=green-iot-avx-e.airview-messaging-stg.dht.live

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:8e:0e:b0:cb:59:c2:0a:0e:a2:2c:65:48:10:e2:70
Serial Number (int): 12700656076801209729593268218742497904
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:b1:80:7a:50:08:d7:ba:88:5f:03:46:6a:2c:12:91:ab:fc:10:1c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): eb:38:32:01:d3:75:1a:4f:6a:69:3d:83:b2:b9:d2:ec:ac:3c:dc:8e
Fingerprint (sha256): 11:2f:eb:90:45:66:4f:b5:9b:9a:71:72:54:9e:d7:77:15:b9:32:bf:8a:41:bb:f5:34:26:55:79:d1:9c:72:b2

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate green-iot-avx-e.airview-messaging-stg.dht.live

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for green-iot-avx-e.airview-messaging-stg.dht.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

green-iot-avx-e.airview-messaging-stg.dht.live
*.green-iot-avx-e.airview-messaging-stg.dht.live

Other certificates including the domain name dht.live

(limited to 100 certificates)
static.showtime7-sbx.dht.live
green-mcs-d.messaging2-amr-prd.dht.live
static.showtime8-sbx.dht.live
green-iot-avx-a.airview-messaging-stg.dht.live
sc-2061-werewolf-api.honeybadgers-sbx.dht.live
avw.airview0-dev.dht.live
sc-1457-scui.honeybadgers-sbx.dht.live
green-iot-hub-c.messaging2-amr-prd.dht.live
support-api.showtime5-sbx.dht.live
monaco.airview0-dev.dht.live
external.showtime8-sbx.dht.live
support-api.showtime8-sbx.dht.live
artifactory-edge-amr.artifactory-shared.dht.live
api.aloe-dev.dht.live
avx-mock-amr.showtime6-sbx.dht.live
mobilequestionsui.sleep-concierge-qa.dht.live
docs.showtime8-sbx.dht.live
nexus-new.airview0-shared.dht.live
*.mgmt.paas.dht.live
docs.showtime2-sbx.dht.live
avx-mock-apac.showtime8-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
data-platform-mock.showtime8-sbx.dht.live
green-iot-avx-d.airview-messaging-stg.dht.live
docs.showtime5-sbx.dht.live
peep-ws10.smart-coaching-dev.dht.live
bitbucket.prod.dht.live
sc-1470-mobilequestionsui.honeybadgers-sbx.dht.live
graphql.showtime8-sbx.dht.live
amr-stg-mcs-c.airview-messaging-stg.dht.live
graphql.showtime5-sbx.dht.live
green-mcspacific-a.messaging2-amr-prd.dht.live
external.myair-eu-dev.dht.live
docs.showtime7-sbx.dht.live
support-api.showtime6-sbx.dht.live
peep-ws5.smart-coaching-dev.dht.live
green-iot-mds-h.messaging2-amr-stg.dht.live
api.showtime4-sbx.dht.live
green-iot-mds-f.airview-messaging-stg.dht.live
api.hellosleep-prd.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
nightowl.showtime6-sbx.dht.live
green-mcspacific-c.messaging2-amr-stg.dht.live
scui.sleep-concierge-prd.dht.live
api.showtime8-sbx.dht.live
sc-1457-werewolf-api.honeybadgers-sbx.dht.live
*.sre-dev-ave-qa.dht.live
support-api.showtime7-sbx.dht.live
green-dps-ebs-b.messaging2-amr-prd.dht.live
graphql.showtime8-sbx.dht.live
avx-mock-amr.showtime2-sbx.dht.live
data-platform-mock.myair-eu-dev.dht.live
content-ws4.smart-coaching-dev.dht.live
green-iot-mds-c.messaging2-amr-stg.dht.live
*.airview-icm-dev.dht.live
avw.airview0-dev.dht.live
data-platform-mock.myair-eu-dev.dht.live
avx-mock-apac.showtime9-sbx.dht.live
green-iot-avx-c.airview-messaging-stg.dht.live
dev.us-west-2.paas.dht.live
avx-mock-apac.myair-eu-dev.dht.live
green-iot-avx-b.airview-messaging-stg.dht.live
peep-ws3.smart-coaching-dev.dht.live
honeybadgers-sbx.dht.live
content-ws1.smart-coaching-dev.dht.live
docs.showtime5-sbx.dht.live
avx-mock-amr.showtime5-sbx.dht.live
nightowl-mock.showtime8-sbx.dht.live
green-iot-avx-e.airview-messaging-stg.dht.live
green-iot-avx-d.messaging2-amr-prd.dht.live
devjmqc-envoymq-hub.bouncer-dev.dht.live
amr-prod-hub-b.prod-messaging-prd.dht.live
green-iot-hub-a.machine-services-perf-stg.dht.live
sc-1428-survey-api.honeybadgers-sbx.dht.live
graphql.showtime5-sbx.dht.live
docs.showtime4-sbx.dht.live
data-platform-mock.showtime4-sbx.dht.live
amr-dev-mds-f.airview-messaging-dev.dht.live
green-mcs-e.messaging2-amr-prd.dht.live
avx-mock-amr.showtime2-sbx.dht.live
support-api.myair-eu-dev.dht.live
green-iot-hub-f.airview-messaging-stg.dht.live
mcs2-dev.dht.live
graphql.showtime10-sbx.dht.live
green-iot-mds-h.airview-messaging-stg.dht.live
green-mcspacific-b.messaging2-amr-stg.dht.live
docs.showtime5-sbx.dht.live
airview-kona-dev.dht.live
artifactory-nexus.airview0-dev.dht.live
avx.eta.dht.live
mcs2-dev.dht.live
green-rhs-a.messaging2-apac-stg.dht.live
external.showtime2-sbx.dht.live
sc-tam-scui.honeybadgers-sbx.dht.live
static.showtime5-sbx.dht.live
avx-mock-eu.showtime7-sbx.dht.live
static.showtime5-sbx.dht.live
docs.showtime8-sbx.dht.live
green-envoymq-hub.messaging2-amr-stg.dht.live
green-iot-mds-a.airview-messaging-stg.dht.live

Certificate

The complete raw certificate details for green-iot-avx-e.airview-messaging-stg.dht.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmTC5dkqckP/hvjHM/Id
xCq+3B8o/zBaVimyX2vY17Iv2zNhcpDn8extbeto0UGyYKc0LMJO0oMuCHttCzGX
hHo4r3n8yYA8Pw5xUT0tpnJf+DHyhXxrEwx1WvWTxoDpS7epUBvwlRpyInvop+5b
I1gO2BxzvzV/9CQ8lGR0Jq7G/av1HazzAPO9zbKc3a7VegcoJzt8jWsrVq7OhD3x
iCOib9Huyvec7TJz7ozK4aFJO6541som7H0am9jPtlyF+0m+LdHWIP2mxsRp1gSE
s1BlyFzyfm8qfQex7V5tYmocSOAfZi24vrZCHYdMW4OPtUKORQWquQYvFwU6WNvs
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12700656076801209729593268218742497904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'green-iot-avx-e.airview-messaging-stg.dht.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25044871641896512633541088539210645882967145745421560345395755268147362079834862523465518524793146546263870922547107777705436941585248785033227596504944082503252491508392835842805931537371957348653775460284059594930756308858703481679495345759111156321982380651989111665207001250401566582731552619851195711047874714920240157081543582143111485473430867279765261344161988132693335886379043273665790912151226271574915328841128994012766109520404162224352372849482959763797944352514044056052017856634804334279038242429528114252682035545846421944588298174971193921158420713458269227687223646105936205939067421800919283264563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7b1807a5008d7ba885f03466a2c1291abfc101c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-iot-avx-e.airview-messaging-stg.dht.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.green-iot-avx-e.airview-messaging-stg.dht.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008633ab1b0a2528ab0d41c55010ddb66f1ae10aa512db7594c3b7b14c14635f991a197ecf5de5df3ab308867a95f638e0434bfa7718e8ece13792ae27bb1e533fb646a3b867b63b04303be169aa92e69d1ec7d204a525170db20db67fd63615150b148cfb6c503c0cc0a3c6a22c5d4361710e51e76d1f54f442228d1ca006be4ea7f7d213acc8355b1e982d8687760e92752cd6e18f233ebd274b48cc20fa0ed9f6c06938498176e6f54fa987c88ae38253dc72f4cc147c5a8118742efd99ecc9b8069e1c5116f765ae3a2ffda3934b76aa7b55e99f3d590481f53f418f967d6722aeaa52e8aaa03afe2e1c12e2ec6af1c59e079885cd16f682936eb6d0ec2653