default.development.cip-paas.tax.service.gov.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:14:04:ef:97:a7:d7:88:54:e8:ea:66:85:35:76:17 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=default.development.cip-paas.tax.service.gov.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:14:04:ef:97:a7:d7:88:54:e8:ea:66:85:35:76:17
Serial Number (int): 5420858032414760478612376081378145815
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f5:f7:c5:75:b7:26:60:85:63:59:75:44:66:7c:86:38:58:b6:1b:98
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 3c:be:ee:bd:03:0c:61:72:ce:43:fd:ed:64:64:41:67:99:c6:8e:b2
Fingerprint (sha256): 14:ac:18:6a:78:7d:8e:50:53:d8:e2:d2:12:3b:8a:f6:0a:a9:27:6a:ba:16:2b:47:a9:a0:50:aa:a4:5c:53:69

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate default.development.cip-paas.tax.service.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for default.development.cip-paas.tax.service.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

default.development.cip-paas.tax.service.gov.uk

Other certificates including the domain name tax.service.gov.uk

(limited to 100 certificates)
landscape.production.tools.tax.service.gov.uk
developer.service.hmrc.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
admin.staging.tax.service.gov.uk
api.externaltest.tax.service.gov.uk
api.development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
open.artefacts.tax.service.gov.uk
cip-canary-service-10-42.development.cip-paas.tax.service.gov.uk
dis.tax.service.gov.uk
childcare.tax.service.gov.uk
childcare.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
*.development.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
lab02.build.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
platapps-live.tax.service.gov.uk
www.prototypes.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
kibana.internal-lab04.telemetry.tax.service.gov.uk
maps-11-987.development.cip-paas.tax.service.gov.uk
*.live.platops.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-8-55.development.cip-paas.tax.service.gov.uk
online.hmrc.gov.uk
www.staging.tax.service.gov.uk
cname-acs-fast-stream.development.tax.service.gov.uk
development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
status-tool.internal-lab01.telemetry.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
mdtp-system.platapps-labs.tax.service.gov.uk
confluence.staging.tools.tax.service.gov.uk
grafana-alerting.internal-lab01.telemetry.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk
elasticsearch.internal-staging.telemetry.tax.service.gov.uk
selfservice.staging.tools.tax.service.gov.uk
*.tax.service.gov.uk
online.hmrc.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
*.internal-lab03.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
elasticsearch.internal-lab01.telemetry.tax.service.gov.uk
jira.staging.tools.tax.service.gov.uk
dis.qa.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
bank-account-insights.staging.cip-app.tax.service.gov.uk
platapps-labs.tax.service.gov.uk
test-transaction-engine.tax.service.gov.uk
cname-jons-ccn2.integration.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
cip-canary-service-2-38.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
dis.qa.tax.service.gov.uk
*.integration.tax.service.gov.uk
maps-16-567.development.cip-paas.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
qa.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
paas-sample-2-11.development.cip-paas.tax.service.gov.uk
lab02.artefacts.tax.service.gov.uk
cname-jons-transaction-engine.integration.tax.service.gov.uk
api.integration.tax.service.gov.uk
elasticsearch.internal-lab04.telemetry.tax.service.gov.uk
paas-sample-15-80.development.cip-paas.tax.service.gov.uk
cip-credential-risking.development.cip-paas.tax.service.gov.uk
data-product-registry.development.cip-paas.tax.service.gov.uk
paas-sample-2732-150.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
kibana.internal-lab01.telemetry.tax.service.gov.uk
api.service.hmrc.gov.uk
default.development.cip-paas.tax.service.gov.uk
design.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
grafana.internal-lab02.telemetry.tax.service.gov.uk
paas-sample-2-38.development.cip-paas.tax.service.gov.uk
platapps-platops-sandbox.tax.service.gov.uk
kibana.mdtp-staging.telemetry.tax.service.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
kibana.internal-lab03.telemetry.tax.service.gov.uk
*.tax.service.gov.uk
lab03.artefacts.tax.service.gov.uk
paas-sample-2703-144.development.cip-paas.tax.service.gov.uk
lab03.externaltest.testing.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
cip-canary-service-5-23.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
api.staging.tax.service.gov.uk
trigger.lab03.prototypes.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
status-tool.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-11-73.development.cip-paas.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk

Certificate

The complete raw certificate details for default.development.cip-paas.tax.service.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVBFHIeIkxlCZJvDibTf
BPphzTa/0NDFaNtz5ZBmFo2H5FY69aBsZGLmpxbdGI/UkGrROfXtTU/gD5NXgfNX
4FqNjHEA6UjnY3xml0MWykd3VuxQaRkR5jabLF8Op9uxyorOSckcmhaepS/++Dp1
MYrgu1hB3fer3MSvKw++d34T9Grte4yvHLhGokpwbc6rwp3Ti4LewsD5ce7txHaU
1C5U+l/ZmcFsYL6BRpjLuYSlZpoe5DuBFHmke67rJLFl6bjIIx/yqjT/rjwbS42W
Xe0Mj3WNukM6900bbsdzo6SBP9JNyfSolqP+6j3LguIUBlerdbYdEFoK2PKKUUgs
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5420858032414760478612376081378145815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'default.development.cip-paas.tax.service.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19354043255588412686098570392318490592681483496136400384273165265598494806895281237410931998107434630449000405462081128747193862853212879052727958266949182970745202823574248638635725929259589011841333355025688450308857503426583814172338193360865501427658560015938010314317312098157843717074963284496420445067001269540474918989509733498275795843132547131602185840294304252427226003142551706401007563671113220888954285000517628052562490162832507489668626505699338224489014426829935923722491461554976385667955163834755078469028390892726106194819224730302274617412573730771169190593902720078861846736968784692687447534741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5f7c575b726608563597544667c863858b61b98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'default.development.cip-paas.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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