gavs-dev.eu-west-1.aws.pmicloud.biz

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:e4:e7:90:29:a6:56:88:eb:2a:a1:cb:02:05:33:73 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gavs-dev.eu-west-1.aws.pmicloud.biz

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:e4:e7:90:29:a6:56:88:eb:2a:a1:cb:02:05:33:73
Serial Number (int): 9163908316819257264611772326044054387
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ae:69:64:a9:9e:93:86:8e:eb:9b:ea:cb:ec:6b:8e:fd:b7:5b:8f:75
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): c3:9b:0f:a4:ab:62:db:be:ce:15:bb:71:0c:47:82:24:42:6a:fb:6a
Fingerprint (sha256): 13:0c:64:7a:9f:62:8e:c2:3f:70:c5:30:76:13:18:db:74:c8:e8:fd:57:3b:0b:bf:60:9f:6f:72:7c:ce:2f:0a

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate gavs-dev.eu-west-1.aws.pmicloud.biz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gavs-dev.eu-west-1.aws.pmicloud.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gavs-dev.eu-west-1.aws.pmicloud.biz
*.gavs-dev.eu-west-1.aws.pmicloud.biz

Other certificates including the domain name pmicloud.biz

(limited to 100 certificates)
ambari-qa.ocean.pmicloud.biz
*.cdt.pmicloud.biz
dev.elasticsearch.chatbot.pmicloud.biz
tngames.pmicloud.biz
iepm-qa.eu-west-1.aws.pmicloud.biz
*.java-api.chatbot.pmicloud.biz
deep.vault-dev-dev.shared-services.eu-west-1.aws.pmicloud.biz
whfc-dev.eu-west-1.aws.pmicloud.biz
dsvct-prd.eu-west-1.aws.pmicloud.biz
batchevents.dte.pmicloud.biz
websitefactory.pmicloud.biz
gts.pmicloud.biz
qa.crm-sms.pmicloud.biz
vpnprd.philipmorrisph.pmicloud.biz
ismsbr-prd.eu-west-1.aws.pmicloud.biz
cdra-qa.eu-west-1.aws.pmicloud.biz
vpnprd2.id-da.pmicloud.biz
webadmin.chatbot.pmicloud.biz
task.dte.pmicloud.biz
*.ocean.pmicloud.biz
www.cdt-dev.pmicloud.biz
tip.pmicloud.biz
cjm.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
qa.viber.dte.pmicloud.biz
fbi-qa.eu-west-1.aws.pmicloud.biz
ssrs-dev.eu-west-1.aws.pmicloud.biz
*.services.ocean.pmicloud.biz
vpnprd.nexthink.pmicloud.biz
pmjpisbi.pmicloud.biz
csa.cyber.pmicloud.biz
elastics.chatbot.pmicloud.biz
mirrorpl.pmicloud.biz
*.services.ocean.pmicloud.biz
mysite.pmicloud.biz
*.ua-ls.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
api-test.mozart-dev.aws.pmicloud.biz
wfiws-dev.eu-west-1.aws.pmicloud.biz
csa-qa.eu-west-1.aws.pmicloud.biz
vpnqa.dwa.pmicloud.biz
bensrq-qa.eu-west-1.aws.pmicloud.biz
chatui2.chatbot.pmicloud.biz
dev.batchevents.dte.pmicloud.biz
clipp-prd.eu-west-1.aws.pmicloud.biz
eipos.pmicloud.biz
pmplrose-qa.aws.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
dyo.pmicloud.biz
kibana.chatbot.pmicloud.biz
ismsph-dev.eu-west-1.aws.pmicloud.biz
*.games.ua-ls.pmicloud.biz
*.api.el.ocean.pmicloud.biz
auth.chatbot.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
elastics.chatbot.pmicloud.biz
entmisteunserewelt.com
ismscz-dev.eu-west-1.aws.pmicloud.biz
mdolz-qa.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
gauntlet.pmicloud.biz
tdisf-qa.eu-west-1.aws.pmicloud.biz
*.booked.pmicloud.biz
ambari-server-ds.ocean.pmicloud.biz
pse-dev.eu-west-1.aws.pmicloud.biz
dev.dyo.pmicloud.biz
iqos-id.pmicloud.biz
uaposmart.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
molecule.dte.pmicloud.biz
*.ocean.pmicloud.biz
iqossvcqas.pmicloud.biz
dyo.pmicloud.biz
bapsrq-dev.aws.pmicloud.biz
*.atool.pmicloud.biz
test.grafana.mirrorpl.pmicloud.biz
iqossvc.pmicloud.biz
vpn.iqossvcqas.pmicloud.biz
dev.dyo.pmicloud.biz
*.cjm.pmicloud.biz
vpn.gts.pmicloud.biz
celonis-prd.eu-west-1.aws.pmicloud.biz
dct.pmicloud.biz
vpnprd.ski.pmicloud.biz
unlitter.pmicloud.biz
cfghub.aws.pmicloud.biz
infrabackup9-prd.eu-west-1.aws.pmicloud.biz
gafp-prd.eu-west-1.aws.pmicloud.biz
hsrpt-qa.aws.pmicloud.biz
talmfpqa.rp.pmicloud.biz
amild-id.pmicloud.biz
vpnqa.setc.pmicloud.biz
*.games.ua-ls.pmicloud.biz
vpndev1.philipmorrisph.pmicloud.biz
auth.chatbot.pmicloud.biz
tkyvpn.tpe.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
messenger.chatbot.pmicloud.biz
hkchq-prd.eu-west-1.aws.pmicloud.biz

Certificate

The complete raw certificate details for gavs-dev.eu-west-1.aws.pmicloud.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NAw6peM3Qo5wz9BDBDP
JMP5OZuHTfSnCX1HYsXkFyBM28bgx73j8XxC448T6I2UobcQrITcV2Hfby2AY8W8
9NOUNiH/1BB+F4KKoa2gSAM26Abo6O56+A4rz7Bl+BcbAKEmZ7lLgZ8AauQqJF5P
TZevh0cYlP33nLZ52W+iVocnnsKPxocnx61CYgSpG5bjYzjsXFcbgdKdYN1paxfz
Kgkwxmjuaaxh8AKVPPrauC2kcTCMALlUkbEzlAQBu4F5wsL+chNebniqOAVHe+5q
QbuQACuDBWJ27fCZ7qbrFg7t1nlSyOShoJzl6nKkJe6LJvfSaqEL4PRHTn0he54G
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9163908316819257264611772326044054387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gavs-dev.eu-west-1.aws.pmicloud.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26865183500446859537784572142443556596262194336164787747767580202855989241132940482752709047467875874032477176603378065714938233709094787016397936762571612053218301596024415702821819498801885779676507913690507173302717694882715326839226339587206808085086373137773406342398411851731045167933942162996645574569060121551103052072229268594837472892399729783743179850659471163713316568771658605843316944708154452888056332191481995641742021167464163499610971328700518435870508312566824686678827999029413906086789167808295173252525954589727890523028184768514235317402231677037416734720039513444883280047802682141677753075379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae6964a99e93868eeb9beacbec6b8efdb75b8f75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gavs-dev.eu-west-1.aws.pmicloud.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gavs-dev.eu-west-1.aws.pmicloud.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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