*.altium.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:a7:b8:a9:65:d0:14:a3:8c:76:d3:30:f4:30:51:66 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.altium.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:a7:b8:a9:65:d0:14:a3:8c:76:d3:30:f4:30:51:66
Serial Number (int): 15492366913445467660643675790101205350
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:b6:31:4f:05:37:fd:87:3d:48:f3:bb:72:5b:59:72:f5:b1:28:1a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d4:25:8c:f7:e6:64:83:23:a2:78:ee:23:0c:a8:49:1b:b5:6b:69:3e
Fingerprint (sha256): 11:d3:77:f5:4f:5e:7e:7e:b7:17:5f:49:4d:28:9a:c5:51:c9:c1:75:32:33:5d:7b:77:8b:db:19:08:88:49:cf

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.altium.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.altium.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.altium.com
altium.com

Other certificates including the domain name altium.com

(limited to 100 certificates)
*.ccv-45da939a-9553-4390-88a4-f841daf31f45.cte.dev1.altium.com
*.ccv-f2b9a429-b38c-441d-bf83-bbcd2398e3c3.cte.dev1.altium.com
*.cte-branches-afs-jprc5t.cte.dev1.altium.com
*.ccv-916996b6-8606-4710-9e03-254f816bb65e.cte.dev1.altium.com
*.bn-test.cte.dev1.altium.com
*.afs-26415-harness.cte.dev1.altium.com
*.is-dev-lwt-u50-5.cte.dev1.altium.com
*.cte-branches-afs-n1ryim.cte.dev1.altium.com
sslvs03.igloosoftware.com
*.afs-21243-banner-mechanism.cte.dev1.altium.com
*.20524-dwf-gen-handle-ui-fix-take-2.cte.dev1.altium.com
*.live.altium.com
sslvs03.igloosoftware.com
lhv.status.insly.com
bare-metal-servers.status-ovhcloud.com
*.aabrosimov-01.cte.dev1.altium.com
bare-metal-servers.status-ovhcloud.com
*.altium.com
*.ccv-802f8886-73da-4b21-998f-120ef166bf8a.cte.dev1.altium.com
bare-metal-servers.status-ovhcloud.com
*.lkieres3.cte.dev1.altium.com
bare-metal-servers.status-ovhcloud.com
lhv.status.insly.com
*.afs-21982-broken-row-click.cte.dev1.altium.com
sslvs03.igloosoftware.com
bare-metal-servers.status-ovhcloud.com
lhv.status.insly.com
*.pg.cte.dev1.altium.com
sslvs03.igloosoftware.com
*.devops-as.cte.dev1.altium.com
*.afs-21395-session.cte.dev1.altium.com
*.afs-u77-dev-afs-20813.cte.dev1.altium.com
*.20524-dwf-gen-handle-ui-fix.cte.dev1.altium.com
bare-metal-servers.status-ovhcloud.com
*.afs-20544-vue3-test-2.cte.dev1.altium.com
*.afs-u73-afs-19631.cte.dev1.altium.com
go.altium.com
*.ag-test.cte.dev1.altium.com
*.cte-branches-afs-zljeu2.cte.dev1.altium.com
lhv.status.insly.com
go.altium.com
*.afs-u78-afs-21547.cte.dev1.altium.com
sslvs03.igloosoftware.com
*.cte-for-regression.cte.dev1.altium.com
*.ag-test.cte.dev1.altium.com
*.cte-branches-afs-p61f0i.cte.dev1.altium.com
vpn-eu.altium.com
sslvs03.igloosoftware.com
*.bn-test.cte.dev1.altium.com
status.altium.com
*.14681.cte.dev1.altium.com
vpn-na.altium.com
*.365.altium.com
bare-metal-servers.status-ovhcloud.com
us-data.altium.com
store.altium.com
*.resources.altium.com
*.atk-test-72.cte.dev1.altium.com
*.afs-u46-test-new-template2-dashboard.cte.dev1.altium.com
*.afs-u74-afs-19480.cte.dev1.altium.com
*.master-21388.cte.dev1.altium.com
*.afs-u79-dev-afs-21584.cte.dev1.altium.com
lhv.status.insly.com
store.altium.com
*.feature-afs-20921-bom-cmp-mail.cte.dev1.altium.com
bare-metal-servers.status-ovhcloud.com
sslvs03.igloosoftware.com
*.afs-20601-background-va.cte.dev1.altium.com
*.api.altium.com
*.ccv-7da3d585-039f-46fc-8417-2f459b78bf0e.cte.dev1.altium.com
*.ccv-016123ad-b0b7-4866-a70c-f18796a80907.cte.dev1.altium.com
*.resources.altium.com
*.cmdev.altium.com
*.manufacture.altium.com
sslvs03.igloosoftware.com
go.altium.com
sslvs03.igloosoftware.com
lhv.status.insly.com
*.ccv-b1478c35-189d-4206-90cc-4696b8e0812e.cte.dev1.altium.com
sslvs03.igloosoftware.com
*.altium.com
darryltesting.atl-css.net
*.altium.com
vpn-eu.altium.com
*.ab-vue3.cte.dev1.altium.com
*.ccv-7a9e827d-2a00-4518-9a4a-e4a0d843a1c8.cte.dev1.altium.com
www.altium.com
sslvs03.igloosoftware.com
*.altium.com
darryltesting.atl-css.net
*.sandbox.beta.altium.com
*.afs-u78-21578.cte.dev1.altium.com
*.afs-u75-afs-20547.cte.dev1.altium.com
go.altium.com
www.strakertranslations.com
*.afs-u74-dev-afs-14310.cte.dev1.altium.com
uat.manufacture.altium.com
*.ashylo-dev.cte.dev1.altium.com
*.afs-21993.cte.dev1.altium.com
*.cte-branches-afs-2n0fsk.cte.dev1.altium.com

Certificate

The complete raw certificate details for *.altium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRME7Kr1Qy8itox/wFv5
+r1PyphgIkxRsZ7+EYAzlPtMIj50QxQt+qzO3taIV+CjspIQDuMZh3jm01FJfahX
E58y7rR/q2Uys/nEUuxyxivKxPm8oCupvHS7zxMk4dyThReo6lnWeNcdG2H0Xlhk
8HcOSvEKlYtOWkaze6lm4OoAvlynYM/L/0WDzvXTjX6UTJ7sWfKsG+VUNxhqIc/J
kQclXbfMML8lqgw9K9xFFBGD9mPq928xE6CUp6WbrxA8t0wZ+0lyVhQy1yDTjWt2
2UrprJhLPSLUxIkOAP7atyh9Xn6+1CJwM1nCdX+k8CHxPumI0v03HiLmgsjPtxQo
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15492366913445467660643675790101205350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.altium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24373371593401386812540731914832492946381916458842568347712743900451013402173350119817988981000750474635393228194278506569491358338909435144313971275230626204253159574135263395547820287353317605489954597422605857133681052401623187582830131673038836079767998802803052871763507855590267285136704382470843801545211556267798621466405991905595784654335893710305532314449345409480460034773688888600662114162370255256806956582079626027924088462804507370260615478689479301974103196823456147186217811085636719773775517003976128993194347539304348041465126173050839920346196598880817871996767172234349849527509116599243348650223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62b6314f0537fd873d48f3bb725b5972f5b1281a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altium.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e4ef208b10000040300463044022057519bbfc0f1e5f21bf8238ae70eae0d22103e6d4a9e41e860272c95b07ad72c0220618d7167faabcf6bfd14c15299aa7b64d19794495637a74f07ed1e87555d01ee0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e4ef2088a000004030046304402202c966c96ba74b564bdf8a19b6ad83fa45b955bdb72aac0a20be3d8fedefbd9870220460b66b74d86cd92437e4af0858b8a440f0a1ec97400244454920e54cdfc09db007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e4ef208ab0000040300473045022100f0c9b78676e9ef32e4530015ff7b2bdef5cb1261ede0d2aeabe8f1e6c631305002205762e4453a2fd75e608a883dc152d64ce06a5761cb6bfa74b9b517df14bcda32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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