thinkport.digital

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:da:a5:73:f9:2c:59:de:58:22:4d:41:a4:b7:00:bb was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thinkport.digital

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:da:a5:73:f9:2c:59:de:58:22:4d:41:a4:b7:00:bb
Serial Number (int): 19744468442088090883414570524690809019
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ba:62:3e:b5:b0:93:1d:cb:2a:80:0a:46:0b:3b:80:5a:10:a5:75:10
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b6:0c:cf:13:b8:a3:08:3d:61:0c:44:e3:fd:98:db:98:d5:6b:40:83
Fingerprint (sha256): 11:b2:02:02:f1:14:68:92:4e:0b:48:d6:cb:da:a4:03:eb:6b:bd:bd:c2:58:0d:70:99:ed:28:76:ed:fc:3c:49

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate thinkport.digital

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thinkport.digital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thinkport.digital

Other certificates including the domain name thinkport.digital

(limited to 100 certificates)
recruits.elgeadi.es
formacion.nubexo.com
recruits.elgeadi.es
recruits.elgeadi.es
learn.thinkport.digital
recruits.elgeadi.es
careers.dizplai.com
termin.zweihorn.org
recruits.elgeadi.es
thinkport.digital
career.heritage-staffing.ch
recruits.elgeadi.es
jobportal.digitalhrecosystem.ch
careers.dizplai.com
termin.zweihorn.org
learn.thinkport.digital
learn.croppedmedia.co.uk
careers.dizplai.com
recruits.elgeadi.es
recruits.elgeadi.es
careers.dizplai.com
careers.thehandyteam.net
learn.atlastech.group
freietermine.ruhrpott-digital-agentur.de
learn.oaknet.io
learn.vivio.co.uk
learn.thinkport.digital
learn.thinkport.digital
careers.xeotek.com
learn.oaknet.io
careers.dizplai.com
www.thinkport.digital
vidensbase.awork.dk
career.heritage-staffing.ch
learn.thinkport.digital
learn.thinkport.digital
thinkport.digital
termin.zweihorn.org
jobportal.digitalhrecosystem.ch
learn.thinkport.digital
recruits.elgeadi.es
careers.dizplai.com
learn.croppedmedia.co.uk
careers.xeotek.com
careers.dizplai.com
meet.verdom.ro
careers.comex2000uk.com
learn.thinkport.digital
bookings.ksijdar.org
bookings.ksijdar.org
learn.thinkport.digital
formacion.nubexo.com
careers.novasatus.global
people.cajobunig.com
recruits.elgeadi.es
careers.dizplai.com
career.nordlicht-it.com
afspraak.hanspunt.com
calendar.newtonbates.com
jobportal.digitalhrecosystem.ch
jobs.fiolegal.com
recruits.elgeadi.es
careers.dizplai.com
career.heritage-staffing.ch
learn.gotaxrefund.co.uk
jobs.fiolegal.com
recruits.elgeadi.es
recruits.elgeadi.es
careers.xeotek.com
termin.zweihorn.org
formacion.nubexo.com
learn.thinkport.digital
termin.zweihorn.org
learn.thinkport.digital
careers.novasatus.global
apprenticeship.ncauk.org
careers.dizplai.com
learn.thinkport.digital
careers.dizplai.com
careers.comex2000uk.com
jobs.fiolegal.com
careers.dizplai.com
docs.acmotos.com
careers.dizplai.com
www.thinkport.digital
meet.pbmconsulting.info
recruits.elgeadi.es
academy.polarbearcnc.com
careers.dizplai.com
jobs.uspi-formation.ch
vidensbase.awork.dk
learn.vivio.co.uk
vidensbase.awork.dk
learn.croppedmedia.co.uk
careers.dizplai.com
expense.dyrtyinc.com
www.thinkport.digital
careers.roambee.com
learn.thinkport.digital
learn.thinkport.digital

Certificate

The complete raw certificate details for thinkport.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWtgNHMNzFsfp/J6QLfd
Fku33uypV1y1Ig8k/rkUv4WaYXxDSgupQ66MfH0Fvx7KYvTblgfu8mbzUHFFEbbb
JhuguKSVM82jCnuUVAgUmkZ2O0PL05dOM+MfbAeg/nJrsTZ4QsRDEubSwNUb6yp9
NCotrbe1hn/9xz94wPQuRLvtsk8Guh2ZzsSx2NR7Y/scwqFJnT4GenwG/IBDeYUd
xuAZE7VNYWhUWTX6AbZxCN30MEv/ux1WbXSDo3bz34F3Tdnswk5Hs7i+Hk62Uxyy
Nd28PUaBjcBdZIRaCFTeeR1M/GCkVweizmhwAhY8EQ9EhNsA0GXeDPeLQd/yhXRX
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19744468442088090883414570524690809019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinkport.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23911988619155827913104894088006141548815696178873736080511804616567629557569761466978213761971770033220217835716343756848731790219487074875629901781878542295684589357037553217238930043280946887859334513215760374265528662750997143056265192560246322537090249460490421445275888272414458979939405387737808898029768163655740098598276256481842505951685805480934728183396128212241111064669931266726233749387369506339012772298575487597109690935608333086024551191613080546629390376541440679949577197787384044007862907001289985401339828653916171702659534262358427659656003695235169982596315737247463087398611693586378072020769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba623eb5b0931dcb2a800a460b3b805a10a57510
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkport.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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