jfs-seattle-oa.edge.targetedaction.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:51:c8:57:26:9b:67:4f:17:41:47:8a:4f:b2:09:81 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jfs-seattle-oa.edge.targetedaction.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:51:c8:57:26:9b:67:4f:17:41:47:8a:4f:b2:09:81
Serial Number (int): 4412323419615239469672148197948131713
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3a:cc:f1:50:c5:ea:b4:77:a6:c4:b7:b5:5a:eb:29:3d:74:0a:14:d6
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 6e:85:19:58:e1:ad:67:62:d4:f7:f3:fe:94:4c:ee:fa:f3:6d:61:52
Fingerprint (sha256): 14:c3:5b:6a:62:28:a6:75:d4:e1:50:da:1f:33:89:df:30:a5:69:24:81:18:e9:9e:fa:58:8a:ed:9f:66:fd:2a

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate jfs-seattle-oa.edge.targetedaction.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jfs-seattle-oa.edge.targetedaction.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jfs-seattle-oa.edge.targetedaction.net
act.jfsseattle.org

Other certificates including the domain name targetedaction.net

(limited to 100 certificates)
cultural-alliance-maine-oa.edge.targetedaction.net
price-david-nc-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
assets-staging.targetedaction.net
operation-homefront-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
mcgovernjimma-oa.edge.targetedaction.net
edf-mcaf-oa.edge.targetedaction.net
mcbathlucyga-oa.edge.targetedaction.net
mann-christopher-ks-oa.edge.targetedaction.net
equalityflorida-oa.edge.targetedaction.net
cultural-alliance-maine-oa.edge.targetedaction.net
bass-karen-ca-oa.edge.targetedaction.net
911-health-watch-oa.edge.targetedaction.net
save-children-action-network-oa.edge.targetedaction.net
mobilizeus-oa.edge.targetedaction.net
jfs-seattle-oa.edge.targetedaction.net
act.bencrump.com
mobilizeus-oa.edge.targetedaction.net
national-council-on-aging-oa.edge.targetedaction.net
ndrc-oa.edge.targetedaction.net
911-memorial-and-museum-oa.edge.targetedaction.net
colon-brian-nm-oa.edge.targetedaction.net
national-womens-law-center-oa.edge.targetedaction.net
natl-wildlife-refuge-assoc-oa.edge.targetedaction.net
naralmm-oa.edge.targetedaction.net
national-womens-law-center-oa.edge.targetedaction.net
ferguson-bob-wa-oa.edge.targetedaction.net
nylcv-oa.edge.targetedaction.net
warnockraphaelga-oa.edge.targetedaction.net
cranleyjohnoh-oa.edge.targetedaction.net
national-womens-law-center-oa.edge.targetedaction.net
merritt-academy-oa.edge.targetedaction.net
blumenauerearlor-oa.edge.targetedaction.net
rei-cooperative-action-fund-oa.edge.targetedaction.net
tennessee-wildlife-federation-oa.edge.targetedaction.net
buildbackbetter-oa.edge.targetedaction.net
pogo-oa.edge.targetedaction.net
tropical-audubon-society-oa.edge.targetedaction.net
special-olympics-oa.edge.targetedaction.net
christian-appalachian-project-oa.edge.targetedaction.net
cair-oa.edge.targetedaction.net
hobbs-katie-az-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
larsenrickwa-oa.edge.targetedaction.net
oregonfoodbank-oa.edge.targetedaction.net
edf-cama-oa.edge.targetedaction.net
ceasefire-pennsylvania-oa.edge.targetedaction.net
habitatforhumanityintl3-oa.edge.targetedaction.net
mobilizeus-oa.edge.targetedaction.net
assets.targetedaction.net
degette-diana-co-oa.edge.targetedaction.net
nationalpatientadvocatefound-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
bullock-steve-mt-oa.edge.targetedaction.net
snid04bgl.wpc.edgecastcdn.net
cummings-zach-va-oa.edge.targetedaction.net
newyorkdepartmentofstate-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
presley-brandon-ms-oa.edge.targetedaction.net
naacpldf-oa.edge.targetedaction.net
airport-workers-united-oa.edge.targetedaction.net
wnet-oa.edge.targetedaction.net
population-connection-oa.edge.targetedaction.net
warrenelizabethma-oa.edge.targetedaction.net
stand-for-children-oa.edge.targetedaction.net
egpaf-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
eat-real-oa.edge.targetedaction.net
mobilizeus-oa.edge.targetedaction.net
naacpldf-oa.edge.targetedaction.net
joe-biden-oa.edge.targetedaction.net
alliance-for-safety-andjustice-oa.edge.targetedaction.net
cair-oa.edge.targetedaction.net
nationaldomesticworkersalli-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
equality-california-oa.edge.targetedaction.net
ippf-oa.edge.targetedaction.net
mobilizeus-oa.edge.targetedaction.net
wydenronor-oa.edge.targetedaction.net
warmington-cinde-nh-oa.edge.targetedaction.net
unionofconcernedscientists-oa.edge.targetedaction.net
theclimaterealityproject-oa.edge.targetedaction.net
airalliancehouston-oa.edge.targetedaction.net
sunrisemovementc4-oa.edge.targetedaction.net
conservationinternational-oa.edge.targetedaction.net
muhlbauerdavidia-oa.edge.targetedaction.net
st-johns-health-foundation-oa.edge.targetedaction.net
california-democratic-party-oa.edge.targetedaction.net
americanbirdconservancy-oa.edge.targetedaction.net
merritt-academy-oa.edge.targetedaction.net
welcomeus-oa.edge.targetedaction.net
progress-texas-oa.edge.targetedaction.net
unitedwayworldwide-oa.edge.targetedaction.net
9-11-memorial-museum-oa.edge.targetedaction.net
warnockraphaelga-oa.edge.targetedaction.net
california-state-parks-oa.edge.targetedaction.net
turnerninaoh-oa.edge.targetedaction.net
sa512gl.wpc.edgecastcdn.net
delbenesuzanwa-oa.edge.targetedaction.net

Certificate

The complete raw certificate details for jfs-seattle-oa.edge.targetedaction.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh1Y5Gil5zY08LBOsrwT
O3Eo9u+50PzAkMga1URTmNtVtXLIKnUiDAeJDAPBK3T7WrL+qFXKHb/Pxkjzz5wu
6e2uu5UzTVqtzHMmnJT0l/pFA84gihmPY5CbxSJlauxpwaHA55sjCPzt+2qtMokk
b8xr9N+iYHgSoKKpXj56nK69uUwvJ1GvbMFQoII3YJibfwosBH+ybvhH5KLmpf7q
zW52ULMY2LWoTJ3pdw9ORh6Aezi84GHmFXyu3/i4It1M2Pyw0KsS0NZW+ZUnoFxD
tseSRZ1g3RviqjPtqHSmql7J+IytTSKZS8CzYBu/fYyCfBLt3tlYU7hZPODNiPHO
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4412323419615239469672148197948131713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jfs-seattle-oa.edge.targetedaction.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19960123845700999107214923038577678796529234811998838809292163542999125544723020165689537528438885261278703175189497086877798249096179723750522493272793799082104124762475207520706111336500839090952233754443676776279909554117011428674852844897303578192025039729121210807154150404681854655080826773920031764804563791418603894145662887761008467196039168266240848972069558616226199207871018565050354943841980580526187840082193471917871481071481705184819838159652347442408393778610196968214586308140510510844233777138632155903110740207504298080729062455335531260157881520960631175596676551017660113741136301000519830326981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3accf150c5eab477a6c4b7b55aeb293d740a14d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfs-seattle-oa.edge.targetedaction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jfsseattle.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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