api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:47:d4:52:6d:05:b1:10:61:b6:78:85:a4:91:dc:61 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:47:d4:52:6d:05:b1:10:61:b6:78:85:a4:91:dc:61
Serial Number (int): 16323695427661010420957915776872995937
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:16:80:b2:51:3b:d5:81:61:a9:c8:cf:1a:e0:2b:f2:3d:10:2d:2b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 08:d6:83:4c:15:80:62:d7:bb:3c:cc:6e:70:d1:69:51:fd:58:4c:a9
Fingerprint (sha256): 16:cc:ac:c7:9b:d0:d6:50:fe:f8:4c:06:2a:63:77:f1:05:f9:3f:d0:c7:4d:c4:a7:53:0f:61:b0:2c:e8:ee:d7

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net

Other certificates including the domain name tivoservice.net

(limited to 100 certificates)
api-cloudcore-bookmarks-internal-pr-11-5.dev.tivoservice.net
api-mserver-core-pr-34-2-us-east-1.dev.tivoservice.net
api-channels-service-internal-pr-152-64.dev.tivoservice.net
api-channels-service-internal-pr-154-5.dev.tivoservice.net
api-onepass-odau-service-pr-114-1-1-int.dev.tivoservice.net
api-callback-policy-pr-71-1.dev.tivoservice.net
vewd-cloud-integration-device-updates.dev.tivoservice.net
api-cc-lookup-service-pr-21-7.dev.tivoservice.net
api-cloudcore-recordings-status-lmaniu.dev.tivoservice.net
entitlement-dispatcher-master-52.dev.tivoservice.net
api-cloudcore-partnerinfo-lambda-pr-57-5-1.dev.tivoservice.net
api-channels-service-internal-pr-108-35.dev.tivoservice.net
api-cloudcore-recordings-status-pr-42-27.dev.tivoservice.net
cc-branding-service-pr-192-4.dev.tivoservice.net
saziz-mock.anon-apigw.dev.tivoservice.net
api-cc-lookup-service-mohits.dev.tivoservice.net
api-callback-policy-pr-67-1.dev.tivoservice.net
api-service-registry-internal-pr-189-2.dev.tivoservice.net
api-cloudcore-onepass-internal-snemtisor.dev.tivoservice.net
api-febodyinfo-pr-49-2.dev.tivoservice.net
api-cloudcore-bookmarks-internal-main-51.dev.tivoservice.net
api-channels-service-internal-pr-137-14.dev.tivoservice.net
master-184.anon.dev.tivoservice.net
entitlement-dispatcher-pr-59-1.dev.tivoservice.net
entitlement-dispatcher-master-64.dev.tivoservice.net
api-channels-service-internal-rvk.dev.tivoservice.net
api-fe-prov-data-migration-main-220.dev.tivoservice.net
api-cloudcore-recordings-internal-pr-175-1.dev.tivoservice.net
api-fe-prov-data-migration-pr-221-1.dev.tivoservice.net
api-episode-guide-service-pr-60-9-1-int.dev.tivoservice.net
entitlement-dispatcher-pr-125-9.dev.tivoservice.net
api-service-registry-internal-pr-232-2.dev.tivoservice.net
api-channels-service-internal-pr-142-13.dev.tivoservice.net
pr-80-7-mock.anon-apigw.dev.tivoservice.net
api-cc-lookup-service-pr-58-4.dev.tivoservice.net
api-softclient-cert-olvova-private.dev.tivoservice.net
api-service-registry-internal-pr-8-1.dev.tivoservice.net
pr-190-53-mock.anon-apigw.dev.tivoservice.net
api-excluded-partners-int-pr-93-36.dev.tivoservice.net
api-cloudcore-recordings-status-pr-42-2.dev.tivoservice.net
api-service-registry-internal-mhall.dev.tivoservice.net
fanhattan.tivoservice.net
api-callback-policy-master-84.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-45-4.dev.tivoservice.net
api-cc-lookup-service-master-24.dev.tivoservice.net
api-service-registry-internal-jcheng.dev.tivoservice.net
entitlement-dispatcher-pr-65-1.dev.tivoservice.net
grafana-test.ops.tivoservice.net
api-episode-guide-service-pr-23-15-1-int.dev.tivoservice.net
api-channels-service-internal-pr-96-5.dev.tivoservice.net
api-service-registry-internal-pr-176-1.dev.tivoservice.net
api-service-registry-internal-pr-242-2.dev.tivoservice.net
api-callback-policy-pr-66-2.dev.tivoservice.net
api-channels-service-internal-pr-152-4.dev.tivoservice.net
api-service-registry-internal-pr-192-1.dev.tivoservice.net
api-watch-stickiness-pr-212-2.dev.tivoservice.net
pr-93-39-mock.anon-apigw.dev.tivoservice.net
entitlement-dispatcher-rvalsakumar.dev.tivoservice.net
api-cloudcore-recordings-status-lmaniu.dev.tivoservice.net
api-service-registry-internal-pr-187-2.dev.tivoservice.net
api-onepass-odau-service-pr-102-3-1-int.dev.tivoservice.net
api-channels-service-internal-rvk.dev.tivoservice.net
api-excluded-partners-int-master-72.dev.tivoservice.net
vewd-cloud-integration-device-commands.dev.tivoservice.net
api-cloudcore-vod-ondemand-rsingal.dev.tivoservice.net
api-service-registry-internal-main-255.dev.tivoservice.net
api-cloudcore-vod-data-service-skori.dev.tivoservice.net
api-service-registry-internal-pr-351-6.dev.tivoservice.net
api-service-registry-internal-pr-42-11.dev.tivoservice.net
tdc-mock.anon-apigw.dev.tivoservice.net
api-watch-stickiness-pr-190-47.dev.tivoservice.net
api-cloudcore-bookmarks-internal-vprakash.dev.tivoservice.net
api-service-registry-internal-pr-182-2.dev.tivoservice.net
package-inventory.dev.tivoservice.net
saziz-mock.anon-apigw.dev.tivoservice.net
vewd-cloud-integration-certifier.dev.tivoservice.net
api-cloudcore-onepass-status-pr-2-1.dev.tivoservice.net
vewd-cloud-integration-auth-baker.dev.tivoservice.net
pr-95-15-mock.anon-apigw.dev.tivoservice.net
api-channels-service-internal-pr-151-5.dev.tivoservice.net
api-cloudcore-recordings-internal-pr-170-3.dev.tivoservice.net
mhall-mock.anon-apigw.dev.tivoservice.net
lenses-tpa3.tek2.dev.tivoservice.net
api-service-registry-internal-pr-222-2.dev.tivoservice.net
vewd-cloud-test-vewd-vault.dev.tivoservice.net
pr-96-6-mock.anon-apigw.dev.tivoservice.net
api-service-registry-internal-pr-405-2.dev.tivoservice.net
lenses-qea1.tek1.dev.tivoservice.net
api-onepass-odau-service-pr-117-1-1-int.dev.tivoservice.net
vewd-cloud-test-vewd-apicurio.dev.tivoservice.net
api-service-registry-internal-pr-396-1.dev.tivoservice.net
cc-branding-service-usharma.dev.tivoservice.net
main-298-mock.anon-apigw.dev.tivoservice.net
api-channels-service-internal-pr-96-95.dev.tivoservice.net
entitlement-dispatcher-pr-140-9.dev.tivoservice.net
api-service-registry-internal-main-254.dev.tivoservice.net
api-cc-lookup-service-pr-21-9.dev.tivoservice.net
pr-85-4-mock.anon-apigw.dev.tivoservice.net
api-onepass-odau-service-pr-111-3-1-int.dev.tivoservice.net
api-cloudcore-recordings-internal-pr-180-3.dev.tivoservice.net

Certificate

The complete raw certificate details for api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtshNbUb3JRAGA8QK7TJV
Xyw0+jYRtGxA+Y0p0UYKou41EdbPPB9zEAX9gnXbZCFLNqSi0KUdE+8iqZK7o8Ex
wS5cFjIvXnkanBdq2GkA93QdNA3yPoApVEa6oNDbKKSp7ty+qSfgskSCq8d+nqD/
vR2u4zw+tR/tK6jh/IWPRoMqDEHLeGTB8zhtEPN4F/W61KTU7VJ91EYqCVdktMPW
sPHS5huXaVnfaj2l/OyTiE0GuW0FBi9LydqvWKuhYWV6X1Fs4vdpBptgoKJ9YFhm
vdXz+qkkmhcgTqpRN+mTtVGY3zHjqsLWIqghZYIonFeMOa+dLlKdoXS6zzSaeHgK
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16323695427661010420957915776872995937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23074144322584030100506626404307399906616543640410780815357593115749121642526172299487559341389728964061697809506263754650777549452781965197857426824467905484540513378955868907845996657642556345915488524283819158367303243484747566917121540520136622966019085394146252500516094300725941475630693667378158080168707870562601000375647192949962048046368960178002934498399841297320543004912466199855568203164764557255385619287649199287855756294507158309758271223629624586102826364806347041861084818167672726028564766757045315617642994755790567742779108011105870377993516910335966950745282126805434221855289540863940598696537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c1680b2513bd58161a9c8cf1ae02bf23d102d2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-onepass-odau-service-pr-8-4-1-int.dev.tivoservice.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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