effectivehealthcare.ahrq.gov

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:88:64:56:c3:96:12:4a:fc:9c:15:08:5b:5a:42:ab was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=effectivehealthcare.ahrq.gov

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:88:64:56:c3:96:12:4a:fc:9c:15:08:5b:5a:42:ab
Serial Number (int): 7354327466798659489737293377304150699
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:2f:3d:c3:93:5a:76:63:d9:90:85:15:99:21:a7:a5:f9:47:f6:f3
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e6:c4:2f:04:65:8e:61:c7:7e:a3:6e:3e:91:73:74:cb:f4:0f:dd:87
Fingerprint (sha256): 12:c9:3b:79:02:ee:f8:ed:69:7b:81:32:c5:4a:c7:47:41:b4:0e:17:11:09:1a:2e:13:83:bc:56:a1:6e:9f:61

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate effectivehealthcare.ahrq.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for effectivehealthcare.ahrq.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

effectivehealthcare.ahrq.gov
www.effectivehealthcare.ahrq.gov

Other certificates including the domain name ahrq.gov

(limited to 100 certificates)
*.ahrq.gov
owa.hhs.gov
dataviz.ahrq.gov
innovations.ahrq.gov
qualityindicators.ahrq.gov
lhspilot.ahrq.gov
www.hcup-us.ahrq.gov
www.ahrq.gov
arrs.ahrq.gov
hcupnet-archive.ahrq.gov
sdc3.ahrq.gov
srdr.training.ahrq.gov
*.ahrq.gov
www.cahps.ahrq.gov
www.ahrq.gov
info.ahrq.gov
nhqrnet.ahrq.gov
www.ahrq.gov
sopsdatabase.ahrq.gov
subscriptions.ahrq.gov
distributor.hcup-us.ahrq.gov
*.ahrq.gov
voltage-pp-0000.ahrq.gov
dam.ahrq.gov
gold.ahrq.gov
pso.ahrq.gov
ce.ahrq.gov
meps.ahrq.gov
ocdashboard.ahrq.gov
iqdnet.ahrq.gov
pso.ahrq.gov
srdrplus.ahrq.gov
sdc3.ahrq.gov
patientregistry.ahrq.gov
owa.hhs.gov
www.ahrq.gov
qsrs.ahrq.gov
arrs.ahrq.gov
effectivehealthcare.ahrq.gov
stage.ahrq.gov
www.ahrq.gov
www.ahrq.gov
owa.hhs.gov
ahrqivedhcupnet.ahrq.gov
epc-src.ahrq.gov
epssdata.ahrq.gov
innovations.ahrq.gov
accounts.ahrq.gov
iqdnet.ahrq.gov
cma.ahrq.gov
iqdnet.ahrq.gov
staging-nhqrnet.ahrq.gov
journal.ahrq.gov
jira.ahrq.gov
lhslc.ahrq.gov
info.ahrq.gov
cahpsdatabase.ahrq.gov
epc-src.ahrq.gov
gold.ahrq.gov
effectivehealthcare.ahrq.gov
jira.ahrq.gov
epssdata.ahrq.gov
www.hcup-us.ahrq.gov
www.hcup-us.ahrq.gov
qualitymeasures.ahrq.gov
jira.ahrq.gov
ahrq.gov
meps.ahrq.gov
*.ahrq.gov
ahrqpubs.ahrq.gov
confluence.ahrq.gov
cds-pass.ahrq.gov
ahrq.gov
subscriptions.ahrq.gov
confluence.ahrq.gov
www.ahrq.gov
www.distributor.hcup-us.ahrq.gov
docs.ahrq.gov
arrs.ahrq.gov
owa.hhs.gov
info.ahrq.gov
accounts.ahrq.gov
staging-nhqrnet.ahrq.gov
sopsdatabase.ahrq.gov
www.distributor.hcup-us.ahrq.gov
srdr.ahrq.gov
cahpsdatabase.ahrq.gov
www.hcup-us.ahrq.gov
ahrqpubs.ahrq.gov
www.ahrq.gov
primarycaremeasures.ahrq.gov
*.ahrq.gov
Owa.HHS.Gov
accounts.ahrq.gov
admin.ahrq.gov
nhqrnet.ahrq.gov
takeheart.ahrq.gov
www.sopsdatabase.ahrq.gov
search.ahrq.gov
hcupnet.ahrq.gov

Certificate

The complete raw certificate details for effectivehealthcare.ahrq.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYq3vT9eYRf2bqSFM0ed
KFss4m7yy/7+WnpLLvqL1jwRzqc+SwtbykxCJCLt4Sep8fSvX1Hbjx+7YxiLTJyI
KtYl1AofnL8vGYVZXSO+lAkxEZQyxgp/6HhB9Ku5XQEfxRJfUkx9YF1tDcE6bzEG
x+xGPavkCrSFvoRiTZTbWNRBUYQs8PlvBZ/hh1W1ABo9lrrll0n3OQO8q3FT8laH
zuCXaUrQZCvuyLWxw2P9NtryAQuv8sVIPEeKKxjM++i3YwRLQxexfcK2uiTlVOhi
3IroqnbEHaiK4u7JU7LTt3jLt/tdK7XZ7cPzDNSj+oiZTl/BmM0NTP9kEOv/uZ9f
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7354327466798659489737293377304150699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'effectivehealthcare.ahrq.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17363052043183997214068876679414587735961978640354613832954192165932934847470242073209264354588571039004232788501698973305786219995652901296665216475673871792097406474908680543323342087122686243461640096931950629415761756439556258773563276743971296334126841719096273813456489714236477802940239664174720656520764165263899641888702654367474569400012135664485522082975698721147830973988419301453452845500976982570506114397098242549652642292008744204409919715364014934189608683547461438696654587848194971443051455606815170274436920520416235500498316064245207821240603980525252678827628835784222301036760479181297781006231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							832f3dc3935a7663d99085159921a7a5f947f6f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectivehealthcare.ahrq.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.effectivehealthcare.ahrq.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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