omicspmrd-dev.eu-west-1.aws.pmicloud.biz

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 08:86:b5:d4:46:bd:e3:d2:f9:24:a8:bb:fd:42:05:ab was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=omicspmrd-dev.eu-west-1.aws.pmicloud.biz

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:86:b5:d4:46:bd:e3:d2:f9:24:a8:bb:fd:42:05:ab
Serial Number (int): 11333279679725221398201693427348932011
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:ed:5f:65:56:f6:45:42:2d:a4:5e:c2:66:c4:8d:4a:82:8e:64:6c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): b0:99:c4:8b:3c:82:e3:0f:ea:17:d2:e4:62:82:89:63:f3:fd:54:81
Fingerprint (sha256): 1c:35:d1:3b:e7:b6:e9:05:95:2c:37:88:35:28:84:9b:68:c5:f1:4e:11:68:f0:13:8f:f5:bd:27:2a:64:4d:56

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate omicspmrd-dev.eu-west-1.aws.pmicloud.biz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for omicspmrd-dev.eu-west-1.aws.pmicloud.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

omicspmrd-dev.eu-west-1.aws.pmicloud.biz
*.omicspmrd-dev.eu-west-1.aws.pmicloud.biz

Other certificates including the domain name pmicloud.biz

(limited to 100 certificates)
oqzpda.ene-dev.aws.pmicloud.biz
vnkfzj.ene-dev.aws.pmicloud.biz
ambari-qa.ocean.pmicloud.biz
*.cdt.pmicloud.biz
wex5kq.ene-dev.aws.pmicloud.biz
omicspmrd-prd.eu-west-1.aws.pmicloud.biz
9awwbb.ene-dev.aws.pmicloud.biz
ismsza-dev.eu-west-1.aws.pmicloud.biz
dev.elasticsearch.chatbot.pmicloud.biz
tngames.pmicloud.biz
iepm-qa.eu-west-1.aws.pmicloud.biz
*.java-api.chatbot.pmicloud.biz
deep.vault-dev-dev.shared-services.eu-west-1.aws.pmicloud.biz
matillion-dev.pmicloud.biz
adzik-site.ene-dev.aws.pmicloud.biz
whfc-dev.eu-west-1.aws.pmicloud.biz
6ucyoj.ene-dev.aws.pmicloud.biz
dsvct-prd.eu-west-1.aws.pmicloud.biz
rbvcyu.ene-dev.aws.pmicloud.biz
batchevents.dte.pmicloud.biz
websitefactory.pmicloud.biz
ismsre-prd.eu-west-1.aws.pmicloud.biz
gts.pmicloud.biz
qa.crm-sms.pmicloud.biz
xsczcr.ene-dev.aws.pmicloud.biz
y8kqcn.ene-dev.aws.pmicloud.biz
vpnprd.philipmorrisph.pmicloud.biz
ismsbr-prd.eu-west-1.aws.pmicloud.biz
cdra-qa.eu-west-1.aws.pmicloud.biz
rjuhim.ene-dev.aws.pmicloud.biz
vpnprd2.id-da.pmicloud.biz
webadmin.chatbot.pmicloud.biz
task.dte.pmicloud.biz
c2cbzq.ene-dev.aws.pmicloud.biz
*.ocean.pmicloud.biz
vits7u.deepatlapi-dev.eu-west-1.aws.pmicloud.biz
o9yzuv.ene-dev.aws.pmicloud.biz
fbsp2p-prd.eu-west-1.aws.pmicloud.biz
bde-ble.bbf-qa.aws.pmicloud.biz
matillion-dev.pmicloud.biz
www.cdt-dev.pmicloud.biz
tip.pmicloud.biz
svm57x.ene-dev.aws.pmicloud.biz
cjm.pmicloud.biz
wgkdci.ene-dev.aws.pmicloud.biz
dcxd-dev.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
qa.viber.dte.pmicloud.biz
gykenf.ene-dev.aws.pmicloud.biz
fbi-qa.eu-west-1.aws.pmicloud.biz
ssrs-dev.eu-west-1.aws.pmicloud.biz
*.services.ocean.pmicloud.biz
ismshk-dev.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
vpnprd.nexthink.pmicloud.biz
pmjpisbi.pmicloud.biz
csa.cyber.pmicloud.biz
marbph-dev.ap-southeast-1.aws.pmicloud.biz
elastics.chatbot.pmicloud.biz
mirrorpl.pmicloud.biz
*.services.ocean.pmicloud.biz
ow8fhw.ene-dev.aws.pmicloud.biz
juvo6k.ene-dev.aws.pmicloud.biz
mysite.pmicloud.biz
*.ua-ls.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
api-test.mozart-dev.aws.pmicloud.biz
wfiws-dev.eu-west-1.aws.pmicloud.biz
csa-qa.eu-west-1.aws.pmicloud.biz
vpnqa.dwa.pmicloud.biz
adzik-site-terratest.ene-dev.aws.pmicloud.biz
oqoek6.deepatlapi-dev.eu-west-1.aws.pmicloud.biz
bensrq-qa.eu-west-1.aws.pmicloud.biz
chatui2.chatbot.pmicloud.biz
dev.batchevents.dte.pmicloud.biz
ihhvui.ene-dev.aws.pmicloud.biz
app.bbf.aws.pmicloud.biz
clipp-prd.eu-west-1.aws.pmicloud.biz
eipos.pmicloud.biz
pmplrose-qa.aws.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
7fihti.ene-dev.aws.pmicloud.biz
yeevzt.ene-dev.aws.pmicloud.biz
dyo.pmicloud.biz
kibana.chatbot.pmicloud.biz
ismsph-dev.eu-west-1.aws.pmicloud.biz
*.games.ua-ls.pmicloud.biz
*.api.el.ocean.pmicloud.biz
matillion-dev.pmicloud.biz
auth.chatbot.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
elastics.chatbot.pmicloud.biz
entmisteunserewelt.com
ismscz-dev.eu-west-1.aws.pmicloud.biz
mdolz-qa.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
gauntlet.pmicloud.biz
tdisf-qa.eu-west-1.aws.pmicloud.biz
*.booked.pmicloud.biz

Certificate

The complete raw certificate details for omicspmrd-dev.eu-west-1.aws.pmicloud.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mGzwzp5hmZwODQQ36kQ
Z17AW4WrQEN5Tay0M9A7qK+SLPaVqhdQOhK6woT0j430KFUNzGxTygYAVuTIBzLK
szRp0sHYjoIti9WlSkVmGjjLuKj/1m1Nkn0u5SYMyeIdTva/CYDDBZn1tdiuyR6S
DjrdfnFDOrx+zok7xZEHU93u1bp/pcTUfmuEssCjelkfc5jxDd4H1LFa3I/fL3vY
zrwvVFHS0vSWkNs78lpIrKB7yf0nUb3BYsGS9Zd2/tUqlg2yPJYdadSEPbkg1RxT
i5MAQGI8eh+jn7xxCDK7nsMM4cOc0wyZybFhWKTlAmscDiddJUWXuPYYaT1S/zIF
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11333279679725221398201693427348932011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'omicspmrd-dev.eu-west-1.aws.pmicloud.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27568129231932848855786072349401956647693038783468472176900070174226524145550566785171808139033540349970388717327402259135387499954287966729824230398118677919671285982664600891505552445154878976543201145979486355712586988609143425730889750585099761011517144950904295100917194845390264955234894585171435911038523291618003921352585404251984756640041569075665609800707349583834159515547335519622060493671803495748614090412825296391329119303202956669290288980943569902510232240960998328947391095794448965475867715409344736643300406058960745693084656422543922797248322080901408043135401969741225867955008044814766168999179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1ed5f6556f645422da45ec266c48d4a828e646c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omicspmrd-dev.eu-west-1.aws.pmicloud.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omicspmrd-dev.eu-west-1.aws.pmicloud.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d30a147ba6bf560a2d226611bd6a33841e8856311f931970320e2c2537d55faba81061a8c714825badeaf32d07c82726122318ca7b08f63094f47fcdeeb298ea99e5700a55d036f1ce937b1b7e46a6b312c84f3c4ebbc3a038a20e3154dbfc0ba20c3315ba1ab07effdbc2a5e712a965f31e06dc3fc90a528f21a9c6c32258ac0223f69177a3ef98c09ca950a1ee9915e5958ab01673c2850d733780a48d2a3d0b42ca75185501f2213e963110eb11d6eac5f7cfff3f8d3ea8a44f9f1f2a9e21776da66902718f400e7b5f3e0d2df868a664dd5959dbec4cdcfa9a8a0eb92a5bff419fd7d78d3cd830b2f53b161ff7e4a3a9e26aa35361a092d667b1a8a7974