*.ocala.staging.avant.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:43:49:bb:2c:ae:a8:b3:d9:b0:6e:59:ec:45:b2:67 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ocala.staging.avant.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:43:49:bb:2c:ae:a8:b3:d9:b0:6e:59:ec:45:b2:67
Serial Number (int): 14970887288551854992400097688525582951
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:dd:08:37:4a:22:17:6c:36:0b:e6:3b:70:11:29:03:0b:83:0c:38
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 7f:1e:2f:61:2a:eb:09:bd:2d:bd:a9:45:eb:32:b0:54:6b:ae:0d:d7
Fingerprint (sha256): 1a:96:57:73:3b:96:46:74:03:66:5e:1f:b1:c8:94:11:37:ee:12:11:3b:fd:29:56:70:1f:13:2b:cd:c8:b2:3d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.ocala.staging.avant.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ocala.staging.avant.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ocala.staging.avant.com

Other certificates including the domain name avant.com

(limited to 100 certificates)
msan3.myabsorb.com
msan3.myabsorb.com
ldap-looker.global.avant.com
test.partner01.data.avant.com
msan3.myabsorb.com
*.lb.avant.com
wiki.ad.avant.com
dashboard.avant.com
policy.avant.com
*.avant.com
*.k8s.services.global.avant.com
income-en-us-2-0.prd.partner01.data.avant.com
vault.global.avant.com
msan3.myabsorb.com
default-en-us-5-2-xgb.uat.partner01.data.avant.com
avant.com
support.avant.com
ssl897679.cloudflaressl.com
msan3.myabsorb.com
avant.com
shared.partner01.data.avant.com
*.int.avant.com
policy.avant.com
uat.global.avant.com
ldap.global.avant.com
datarobot.services.global.avant.com
it.global.avant.com
*.ocala.staging.avant.com
services.global.avant.com
dremio.shared.partner01.data.avant.com
support.avant.com
*.int.avant.com
default-transunion-1-0-4.uat.partner01.data.avant.com
msan3.myabsorb.com
default-en-us-5-1-0-lin1.uat.partner01.data.avant.com
bankruptcy-en-us-2-0-0.prd.partner01.data.avant.com
msan3.myabsorb.com
sni.cloudflaressl.com
*.avant.com
stg.avant.com
msan3.myabsorb.com
prd.global.avant.com
msan3.myabsorb.com
support.avant.com
global.avant.com
img2.avant.com
msan3.myabsorb.com
refer.avant.com
msan3.myabsorb.com
msan3.myabsorb.com
msan3.myabsorb.com
msan3.myabsorb.com
gvbl-basic.ocala.k8s.dev.global.avant.com
us-avpl-st-al-1-0.uat.partner01.data.avant.com
*.int.avant.com
partner02.data.avant.com
msan3.myabsorb.com
vpn.avant.com
default-en-us-prime-1-0.prd.partner01.data.avant.com
support.avant.com
support.avant.com
ldap.global.avant.com
msan3.myabsorb.com
*.avant.com
dremio-looker.shared.partner01.data.avant.com
msan3.myabsorb.com
*.avant.com
msan3.myabsorb.com
default-en-us-5-1-0-xgb.uat.partner01.data.avant.com
msan3.myabsorb.com
policy.avant.com
policy.avant.com
policy.avant.com
policy.avant.com
msan3.myabsorb.com
msan3.myabsorb.com
artifactory.avant.com
datarobot.global.avant.com
avant.com
efault-en-us-prime-1-0.prd.partner01.data.avant.com
*.avant.com
e.avant.com
domino.avant.com
datarobot.global.avant.com
www.e.avant.com
msan3.myabsorb.com
msan3.myabsorb.com
income-avpl-3-0.uat.partner01.data.avant.com
rapid7.prd.global.avant.com
msan3.myabsorb.com
support.avant.com
msan3.myabsorb.com
wiki.ad.avant.com
img2.avant.com
support.avant.com
ssl897680.cloudflaressl.com
default-en-us-5-1-0-xgb.dev.global.avant.com
msan3.myabsorb.com
shared.partner02.data.avant.com
msan3.myabsorb.com

Certificate

The complete raw certificate details for *.ocala.staging.avant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEcTCCA1mgAwIBAgIQC0NJuyyuqLPZsG5Z7EWyZzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDUyMzAwMDAwMFoXDTI0MDYyMDIzNTk1OVowJDEi
MCAGA1UEAwwZKi5vY2FsYS5zdGFnaW5nLmF2YW50LmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMg/iHLur6mp209uQeYc0bfG97xbKxcPdQ5eNT4Y
hmUm3gjlEJKLynsWS5/vkid4D5JWtOw2WumptKD45RZN/5ZVWFtxkA/C6RL9M4i3
ZF4Uh8w3GrO2cWMK0+KNxPI+Y5E8uQiUJN1LSDUhd65k93WIQUeMMzprUjgY0IVu
9EXCvgTcUsJHN2c+isbN+XKwuKJZvafALLACOjVUVVA1oIQOOR0XvytLTifSFNtI
jghDJd9Xl3f8hy737ZToknAHTUcKgthEsVQlJojFlgcqcrGuud96pu6vAkIhb6nr
f7QTf/RIRzAjwCy9o1NyjgH7CZm9SBG1qWiXN3sqczUHl3MCAwEAAaOCAYUwggGB
MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBSm3Qg3
SiIXbDYL5jtwESkDC4MMODAkBgNVHREEHTAbghkqLm9jYWxhLnN0YWdpbmcuYXZh
bnQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250
cnVzdC5jb20vcjJtMDIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0
LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAQW6pFeUNjoXWEe4d2XnsuhVw+cmZW9RyEgc/
/yXuIAgQyx5+9XkUb/L5Hae8tEmxkFNrP4b454mea2PaudNzpOQRak1lcVvaCbAe
JJ5quMAPG2yJsbMxqNNgwa+GudC6cFoKwhIPjK/4ZTH2Mc7U7ZwCMcJ/BeiTJihr
62P4FMAKsrVPkcO73849hEKTf9y9sCwHiwkwwxo/KOY9seA5vOYqse09+NqFWjgE
hSD7wZmGo/dPUvPGNvtg2qbRmU0dbBDiVYTYHz0bKhPHhBge62YyBaU6SPxbhtoJ
skQk/xRBt5FUuMkUPPYdJnanFpv7fjrT5KrQw4+TsTmI0XYzqQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD+Icu6vqanbT25B5hzR
t8b3vFsrFw91Dl41PhiGZSbeCOUQkovKexZLn++SJ3gPkla07DZa6am0oPjlFk3/
llVYW3GQD8LpEv0ziLdkXhSHzDcas7ZxYwrT4o3E8j5jkTy5CJQk3UtINSF3rmT3
dYhBR4wzOmtSOBjQhW70RcK+BNxSwkc3Zz6Kxs35crC4olm9p8AssAI6NVRVUDWg
hA45HRe/K0tOJ9IU20iOCEMl31eXd/yHLvftlOiScAdNRwqC2ESxVCUmiMWWBypy
sa6533qm7q8CQiFvqet/tBN/9EhHMCPALL2jU3KOAfsJmb1IEbWpaJc3eypzNQeX
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14970887288551854992400097688525582951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ocala.staging.avant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25278990285009071031181359792699645352901818334560749524135877348333897844708765025886427215391120424679681913959956007948530325007268362666238942228028169832354490394880706736962032689593363598650784222277735174686775796053198187874880374249682125451571428528969568491546888955620997808688632617510348212579460681094444451798365627180180616427357853710861406971285306442565530105712988120195407595791631685709165894052359384430764095204379270511697981307307125169491352542386659996738024730715137449931007001020432530402442370121271620742995912094931470180501754891106092863829023468871826157845080278836934827546483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6dd08374a22176c360be63b701129030b830c38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocala.staging.avant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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