cname-transaction-engine.staging.tax.service.gov.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 03:0f:a4:9c:35:30:24:c6:2a:7b:5c:cd:54:01:90:0a was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cname-transaction-engine.staging.tax.service.gov.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:a4:9c:35:30:24:c6:2a:7b:5c:cd:54:01:90:0a
Serial Number (int): 4068907131462028752908213721040523274
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: b7:d0:d2:2c:a1:0c:ac:13:bc:3d:01:74:ec:43:c2:fc:8e:ad:5f:a4
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 87:74:4d:a2:08:14:63:75:5a:36:9b:eb:6f:05:63:2b:98:d9:b6:dd
Fingerprint (sha256): 1d:4b:9e:40:a9:36:dc:90:ac:69:ee:a8:67:46:a9:83:0a:15:d2:d5:1d:34:ab:2b:dc:05:17:35:d2:e3:97:13

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate cname-transaction-engine.staging.tax.service.gov.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cname-transaction-engine.staging.tax.service.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cname-transaction-engine.staging.tax.service.gov.uk
transaction-engine.isc.staging.tax.service.gov.uk
transaction-engine.staging.tax.service.gov.uk
transaction-engine.vpn.staging.tax.service.gov.uk

Other certificates including the domain name tax.service.gov.uk

(limited to 100 certificates)
landscape.production.tools.tax.service.gov.uk
developer.service.hmrc.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
admin.staging.tax.service.gov.uk
api.externaltest.tax.service.gov.uk
api.development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
open.artefacts.tax.service.gov.uk
cip-canary-service-10-42.development.cip-paas.tax.service.gov.uk
dis.tax.service.gov.uk
childcare.tax.service.gov.uk
childcare.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
*.development.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
lab02.build.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
platapps-live.tax.service.gov.uk
www.prototypes.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
kibana.internal-lab04.telemetry.tax.service.gov.uk
maps-11-987.development.cip-paas.tax.service.gov.uk
*.live.platops.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-8-55.development.cip-paas.tax.service.gov.uk
online.hmrc.gov.uk
www.staging.tax.service.gov.uk
cname-acs-fast-stream.development.tax.service.gov.uk
development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
status-tool.internal-lab01.telemetry.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
mdtp-system.platapps-labs.tax.service.gov.uk
confluence.staging.tools.tax.service.gov.uk
grafana-alerting.internal-lab01.telemetry.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk
elasticsearch.internal-staging.telemetry.tax.service.gov.uk
selfservice.staging.tools.tax.service.gov.uk
*.tax.service.gov.uk
online.hmrc.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
*.internal-lab03.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
elasticsearch.internal-lab01.telemetry.tax.service.gov.uk
jira.staging.tools.tax.service.gov.uk
dis.qa.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
bank-account-insights.staging.cip-app.tax.service.gov.uk
platapps-labs.tax.service.gov.uk
test-transaction-engine.tax.service.gov.uk
cname-jons-ccn2.integration.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
cip-canary-service-2-38.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
dis.qa.tax.service.gov.uk
*.integration.tax.service.gov.uk
maps-16-567.development.cip-paas.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
qa.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
paas-sample-2-11.development.cip-paas.tax.service.gov.uk
lab02.artefacts.tax.service.gov.uk
cname-jons-transaction-engine.integration.tax.service.gov.uk
api.integration.tax.service.gov.uk
elasticsearch.internal-lab04.telemetry.tax.service.gov.uk
paas-sample-15-80.development.cip-paas.tax.service.gov.uk
cip-credential-risking.development.cip-paas.tax.service.gov.uk
data-product-registry.development.cip-paas.tax.service.gov.uk
paas-sample-2732-150.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
kibana.internal-lab01.telemetry.tax.service.gov.uk
api.service.hmrc.gov.uk
default.development.cip-paas.tax.service.gov.uk
design.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
grafana.internal-lab02.telemetry.tax.service.gov.uk
paas-sample-2-38.development.cip-paas.tax.service.gov.uk
platapps-platops-sandbox.tax.service.gov.uk
kibana.mdtp-staging.telemetry.tax.service.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
kibana.internal-lab03.telemetry.tax.service.gov.uk
*.tax.service.gov.uk
lab03.artefacts.tax.service.gov.uk
paas-sample-2703-144.development.cip-paas.tax.service.gov.uk
lab03.externaltest.testing.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
cip-canary-service-5-23.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
api.staging.tax.service.gov.uk
trigger.lab03.prototypes.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
status-tool.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-11-73.development.cip-paas.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk

Certificate

The complete raw certificate details for cname-transaction-engine.staging.tax.service.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnerZlfJtJDrAhhlnPMKh
Vkk6+Ogq4rMGBk12LYt6nyMG5hpvkawTgFKTJku9oy930C6NWgTIFUsVETqkrBaq
QD/WAcXI9Cwi2N1DIC33h9ws6q8bprwpFpwHS3q9c9mbJypRV+y15h6KOBLvWQA9
Y0M1Cn3ntevko7QsH9nmp7T+HxX4d3eYa5DkHJgo4zd44r64JgNdyIaVDKWnovDm
/8+/QGoZoxSWswoXd96GRRjhZYGjRvArTxujPHgEmiL9M/CzNTheiVZkpDNbui0F
mUSHzAA3KzG62UuPzitOgkROU6kgRED0dpgtwT2jq11pkkI3o3jIAtLcML4+EP0e
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4068907131462028752908213721040523274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cname-transaction-engine.staging.tax.service.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19935222703439438535608648061501807523412466851558909093497666520215608779519753592589938368099997406773140057545688350839079265291536920699360007415431173438913299284948763060032744603085527119324011518209212297411353088509366380672376177032081969349508609330635234124980412173039369256119285933911067151019778990045218669781109329953269254991505430511943337551166651903760079753225731359732968674322854850554483059278249484268146753754189664966425994801125737264994498031871026498817121874631813434716389838366850101185263737986734956205147488591942216463465810597273525730207835846022360107572531288842419260169881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7d0d22ca10cac13bc3d0174ec43c2fc8ead5fa4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (205 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cname-transaction-engine.staging.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction-engine.isc.staging.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction-engine.staging.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction-engine.vpn.staging.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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