*.wrd-aws.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:3a:f8:98:e4:d5:4e:2f:d5:2d:fb:b3:75:2d:35:45 was issued on by Amazon.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.wrd-aws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:3a:f8:98:e4:d5:4e:2f:d5:2d:fb:b3:75:2d:35:45
Serial Number (int): 2964651360447712196495273677007172933
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 47:07:d2:58:04:41:1e:d0:f8:2a:f5:ec:39:30:7f:20:fe:92:14:77
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 20:71:80:b6:83:49:ed:8d:cc:33:da:25:d6:3f:48:9d:8f:03:a3:a8
Fingerprint (sha256): 15:23:59:82:70:ab:51:74:06:e1:f4:57:b0:70:f1:81:21:d0:29:65:fc:1a:7c:27:48:7e:11:d5:ec:ec:a8:79

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.wrd-aws.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wrd-aws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wrd-aws.com
www.myr-nl.renault.be
www.nl.renault.be
www.professionals.renault.be
www.fr.renault.be
renew.auto
*.renault.be
www.myr-be.renault.be
www.professionnels.renault.be
www.myrenault.be
www.outlet.renault.be
renault.be
myrenault.be
*.renew.auto

Other certificates including the domain name wrd-aws.com

(limited to 100 certificates)
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
ren-it-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.public-alb-k8sone-dev-1-euw1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
static-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.internal.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com

Certificate

The complete raw certificate details for *.wrd-aws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IVy3XOFqHEMQ+FP/6j7
1KR1qo2eit+YmncGS8GE9bd4odHOkP9fBbGHo/yjJUH+uFO2C7wc+KJqgLc2XBoP
RNbEFANrDe9FlwLKWyD0rKuSbt2R/SPAxNLZgqFl4h2EicmWvRlKH7UsYuAOeS8t
FjOcFc0X5D2BGYLXI95ZR+0ZBCQZhRI+ZKquaaUxAiaWoCF2a10V/TKThkRyaB/v
/vcOj7TENlIq38KV/h5DQ3WxnNE8tXlrpG89NL7klu3ui0nCpdi2b6OXk8Z1se/A
6KEHRPNSkR2SVg1qthb1WtL5M21LWTI1mm6t05tJUvUO/delBYFq3A+WbKPoh4Wj
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2964651360447712196495273677007172933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wrd-aws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31372905634022966789196544009752501811573853788611199207461642511454874723963093063475149163829711033386969935691768650800441874534604711632732876517383730907110740726253043551619738667231737519746493790987747037734422320826870495046264667169415277040339013741748345888670789203991056120014360051252906200479799023641872834102992885679481361451199193769583622618462042486193019241708786414122793739352059513096285667396718496070876451521333074375987952648861893805789600793336813164439620428828150887307197481183363439855299791686878551304393765422726763551037868725445913851167052199664447656265644539857745341686547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4707d25804411ed0f82af5ec39307f20fe921477
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrd-aws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-nl.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nl.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professionals.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renew.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-be.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professionnels.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myrenault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outlet.renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrenault.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renew.auto'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018e410d6ac6000004030046304402204755eac4aec84291efda1a719f3b28a50137ca91bd9550b84bb8a32ca434c9d902202f5c6da447d251d21dd067786ff53c2936a2e7e50ddd8918adec4bb471790b900076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e410d6a8600000403004730450220588e5979eaa4a306f257bfcad05f830f4ea2313d6de90218f48b6456f31e12d4022100e6af48cec07091fb502cfc18cbce8b371ef6a0c1e308a5f9dfb826c69ede62de007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e410d6a990000040300473045022100c931ba0a82dc84704d2a6b4c46e3f2ffe2919b72569a957784e7dd0b910731fb022053af30c12f92038905ce9bcaf21a3aa6e93c1f5976f544a6a77967058cf00baf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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