firmapp.ncrec.gov

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:eb:b9:67:4c:6b:31:65:9d:a7:33:fb:8f:2f:d6:3b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=firmapp.ncrec.gov

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:eb:b9:67:4c:6b:31:65:9d:a7:33:fb:8f:2f:d6:3b
Serial Number (int): 10528546162177959210846426778498487867
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 25:cd:17:db:e8:18:c3:0c:81:8b:74:db:59:0e:37:ec:39:eb:44:58
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 40:b0:98:c7:65:f8:46:c0:b2:3f:2f:ef:32:bc:0f:c3:00:18:f2:d5
Fingerprint (sha256): 1b:a5:23:d3:4c:e3:2a:cb:fb:5a:19:b7:f1:8f:fe:aa:63:3a:94:c7:8d:fd:6c:7a:e4:b6:86:e7:a1:11:e0:d1

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate firmapp.ncrec.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firmapp.ncrec.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firmapp.ncrec.gov
www.firmapp.ncrec.gov

Other certificates including the domain name ncrec.gov

(limited to 100 certificates)
ncrec-ex-01.ncrec.state.nc.us
www.rem.ncrec.gov
ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.test.ncrec.gov
www.test.ncrec.gov
*.ncrec.gov
bulletins.ncrec.gov
firmapp.ncrec.gov
www.ncrec.gov
bulletins.ncrec.gov
www.ncrec.gov
www.ncrec.gov
ncrec.gov
firmapp.ncrec.gov
instructor.ncrec.gov
firmapp.ncrec.gov
mail.ncrec.gov
firmapp.ncrec.gov
firmapp.ncrec.gov
www.test.ncrec.gov
bulletins.ncrec.gov
mail.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
ncrec-ex.ncrec.state.nc.us
instructortest.ncrec.gov
*.ncrec.state.nc.us
*.ncrec.gov
bulletins.ncrec.gov
www.rem.ncrec.gov
www.ncrec.gov
www.ncrec.gov
*.ncrec.gov
www.ncrec.gov
*.ncrec.gov
*.ncrec.gov
www.ncrec.gov
instructor.ncrec.gov
instructor.ncrec.gov
ncrec.gov
ncrec.gov
bulletins.ncrec.gov
*.ncrec.state.nc.us
awstest.ncrec.gov
rem.ncrec.gov
www.ncrec.gov
www.phones.ncrec.gov
firmapp.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
*.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
rem.ncrec.gov
bulletins.ncrec.gov
*.ogletree.com
bulletins.ncrec.gov
www.remtest.ncrec.gov
firmapp.ncrec.gov
www.test.ncrec.gov
*.ncrec.gov
www.ncrec.gov
www.ncrec.gov
mail.ncrec.gov
www.remtest.ncrec.gov
firmapptest.ncrec.gov
bulletins.ncrec.gov
*.ogletree.com
www.ncrec.gov
instructor.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
instructortest.ncrec.gov
mail.ncrec.gov
mail.ncrec.gov
www.ncrec.gov
instructor.ncrec.gov
bulletins.ncrec.gov
www.ncrec.gov
bulletins.ncrec.gov

Certificate

The complete raw certificate details for firmapp.ncrec.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAlMg+oyxBpd9BQxOUx6
gQ4qRTZW3GnU1Pdu77F9aaeAL3yNrUUvpJJI00YWfBjHs8U6mdQfl6ncaoxi92aW
q2W9+mznWmx3nY/Zux8zRjtJWtAhUxb9ZAt86fNK+Hq0hyLYRZedIrTCHzxM6Z8X
M7aMNkyTX009y2L5ckdNrw5iA/6Ik4xJgwekc0+8wD+g9aPdMvlyHjISW4ixCuNX
o2JbYYMs9IVWy4DWoDJCm2NRQPSxfb3sF8ShnhZdQ+3A1/bplQA8+eUj23aUuZN8
HJvbZ+9XfUbnS6BDnvmcMxHLo1m/f/aeh4EojfLSuL8aE5Sy0o6qSXA0RUTW8RA3
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10528546162177959210846426778498487867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'firmapp.ncrec.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20202714247075633229987735724828792820951466203367776415199410220011477928775969255781979434079488009098867097033846625143259775852791730391649057811032586653542054568475167090415772069429237353042271773309228416670351939293317681418579491645457626339053015513333446246178142124835764747496651074241027373699942973060451062366467908071982495787324344640363904773443529551747407920419701492131071572860393088779457763068617633232025826743037973865164801805215543680864331760567104598632833981525662953408978275877240202832925006826903407241836090335191935911254376381751102099999944074705219584770092831254357820323661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25cd17dbe818c30c818b74db590e37ec39eb4458
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firmapp.ncrec.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firmapp.ncrec.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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