*.nightlyma.t01.dup.dev.forcepoint.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:30:b0:ed:1c:51:bf:8c:d9:8f:ad:8a:e4:0b:5d:fc was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.nightlyma.t01.dup.dev.forcepoint.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:30:b0:ed:1c:51:bf:8c:d9:8f:ad:8a:e4:0b:5d:fc
Serial Number (int): 6898958718063417501936908460307996156
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 06:39:1c:ce:2c:26:84:19:3b:d8:8e:79:5e:c3:84:4f:23:d8:f7:24
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 6b:2b:2c:58:9e:98:02:95:1e:1c:ea:5b:d1:aa:5e:5b:a6:8b:b9:97
Fingerprint (sha256): 12:04:e9:18:88:76:c0:62:5a:f1:ae:69:5e:bd:a8:91:39:8e:ff:ae:47:5d:6e:27:83:7b:8e:4b:e4:76:1f:22

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.nightlyma.t01.dup.dev.forcepoint.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nightlyma.t01.dup.dev.forcepoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nightlyma.t01.dup.dev.forcepoint.com
*.t01.dup.dev.forcepoint.com
*.nightlyma.us-east-1.t01.dup.dev.forcepoint.com

Other certificates including the domain name forcepoint.com

(limited to 100 certificates)
*.nightly1102.neo.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly1017.dup.dev.forcepoint.com
*.nightlyma.neo.dev.forcepoint.com
*.nightly1220.dup.dev.forcepoint.com
j3.shared.global.fastly.net
hello.forcepoint.com
5635999187075072-fe3.pantheonsite.io
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
ceros1.map.fastly.net
bemol-status.linxcommerce.com.br
analyticsssl.forcepoint.com
*.nightly0824.dup.dev.forcepoint.com
*.nightly1217.neo.dev.forcepoint.com
*.nightly1207.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.devops.neo.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
webmailgov.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
passthrough.forcepoint.com
*.nightly.neo.dev.forcepoint.com
csg.status.forcepoint.com
csg.status.forcepoint.com
*.nightly1028.dup.dev.forcepoint.com
one.cvpn.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly0216.neo.dev.forcepoint.com
*.nightly1214.dup.dev.forcepoint.com
go.forcepoint.com
bemol-status.linxcommerce.com.br
*.dev03.neo.dev.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightly.neo.dev.forcepoint.com
*.nightly0113.neo.dev.forcepoint.com
5686147871145984-fe1.pantheonsite.io
ceros1.map.fastly.net
*.nightly0430.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.forcepoint.com
*.nightly0206.dup.dev.forcepoint.com
webmailgov.forcepoint.com
*.nightly.dup.dev.forcepoint.com
ceros1.map.fastly.net
vhfptwddlb.hec.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightly1205.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.nightly.dup.dev.forcepoint.com
*.prd01.neo.forcepoint.com
analyticsssl.forcepoint.com
bemol-status.linxcommerce.com.br
fptqa.hec.forcepoint.com
*.nightly0412.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.nightlyma.t01.dup.dev.forcepoint.com
*.nightly1219.dup.dev.forcepoint.com
*.nightly1211.neo.dev.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightly0320.neo.dev.forcepoint.com
*.nightly1208.dup.dev.forcepoint.com
j3.shared.global.fastly.net
www.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightlyma.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly1113.dup.dev.forcepoint.com
*.nightly0116.dup.dev.forcepoint.com
*.nightly1209.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.t01.dup.dev.forcepoint.com
*.nightly0314.dup.dev.forcepoint.com
5635999187075072-fe3.pantheonsite.io
analyticsssl.forcepoint.com
*.nightly1115.neo.dev.forcepoint.com
j3.shared.global.fastly.net
skyfencenet.com
go.forcepoint.com
*.nightly1225.neo.dev.forcepoint.com
*.nightly0328.dup.dev.forcepoint.com
*.nightly0907.dup.dev.forcepoint.com
*.nightly1213.neo.dev.forcepoint.com
*.applications.policytest.ngfw.forcepoint.com
*.nightlyma.neo.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly0406.neo.dev.forcepoint.com
*.nightly0102.neo.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
5686147871145984-fe1.pantheonsite.io
secure.forcepoint.com
*.download.forcepoint.com
*.nightly.dup.dev.forcepoint.com

Certificate

The complete raw certificate details for *.nightlyma.t01.dup.dev.forcepoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkhPxcfYQyFmV8ctiKnx
l8MzXWdbDZHaL+ETZO3K4lnIcpOJSC+w0CubGOmlY6lWVT4ZS1eLF8m4dWrDYWv8
l2kjs7edFCrZxGF02XuJ3BWNmUT9sOexWLXWwbj3bh4RIluM1BmQcECjTEBHXg+Y
X/dtal9AA9R91n7KVTVaRAdAZIQWcihdVJWBea0RFZwZ0Wkereljx2t76XE068aO
LbqWqB56PTez4FI/QqGy8QXcnBBMnkGOFv7dSiPdMb0citbq3/cuBL3uObvVUZKU
jbuzVpgb4vCegRzIkpEjOWUTBCEWcmTSTB3QuXWs+jJkUV+yY+8oYa900UXrIXlN
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6898958718063417501936908460307996156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nightlyma.t01.dup.dev.forcepoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23011029688522636607001675296287122131476229426154896871745845214466425028770897783461872129329347865498100318478616290619959403286407957003044200416923218633545976090949772914104913302369497348551968552328321393489767837507496409919037311755626123295305283585829767104226374562928754745214021582584535429817680796491138208946472290464829218762092649342326506274458008027072331309866572733430482160724640301096906165651752566265158505016094822892637026709216186322713104644963135407376896019184719587453372531710110619204551348236737047752073787500371272324207413491863201404798698611521860621802372465342678149189073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06391cce2c2684193bd88e795ec3844f23d8f724
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nightlyma.t01.dup.dev.forcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t01.dup.dev.forcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nightlyma.us-east-1.t01.dup.dev.forcepoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00863f7f1de46c5af9dd8a1a07522bb6c30b3f29ba8ea5a2d8111025a8a18c9d9e8e25c32118eb02c43c57376c1b12ca806e8badbe49847881d69292cc631f7a0abc7c9882f9e80a2514152b4ce5e2c6e055ea65361d040af05b68a859b8c8327c98be89934eee1231004d97fe130d81ae6523e982c5e382d81943d35105ce225df3f630d69a5c3b3e325696745749d6af90f171088fb107dbc2cd41eb75f664a64a29c7f0e94a19145c04dad0a013968859da094d92c83daaafaeec8cecc3c24680caf3f365419031ac34cc13a36f5f6a7527c98b1367e908ad3bd3c29685750c1d4c81949135006e8cbd4dff75f1867a6daf39e9b60b77019d0bececd2b036bf