topdc-aosecxk64qwac.avassa.dev

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:2e:a4:71:dd:60:ec:ad:bc:e0:1c:f0:2e:72:65:2a was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=topdc-aosecxk64qwac.avassa.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:2e:a4:71:dd:60:ec:ad:bc:e0:1c:f0:2e:72:65:2a
Serial Number (int): 8217548966672822026741777081285371178
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c4:8c:92:22:d2:ab:9d:44:59:59:8d:af:a6:e9:b4:b5:8d:88:f1:0a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): ed:b3:bb:db:62:da:4f:b3:1c:e7:75:7d:39:88:27:d3:6b:3c:c2:f8
Fingerprint (sha256): 1d:62:9b:14:f8:b1:5a:14:47:1a:a2:5f:c5:3b:9a:3c:93:83:16:5e:28:40:b2:e1:1b:dd:1a:ec:c1:da:8b:97

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate topdc-aosecxk64qwac.avassa.dev

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for topdc-aosecxk64qwac.avassa.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

topdc-aosecxk64qwac.avassa.dev
*.topdc-aosecxk64qwac.avassa.dev

Other certificates including the domain name avassa.dev

(limited to 100 certificates)
sitestorm.mattias-korvkiosk.avassa.dev
devtest.mattias-korvkiosk.avassa.dev
topdc-j3y5yg1qvv36o.avassa.dev
dec08t1dev.pingu.avassa.dev
topdc-4pt8psxspxtgq.avassa.dev
dev.mattias-korvkiosk.avassa.dev
topdc-ccwogn2ltu8dn.avassa.dev
topdc-1txspmnksch54.avassa.dev
topdc-8zlwtv5fttcyk.avassa.dev
topdc-nvrifp3cgxp7f.avassa.dev
e2e-5657129.hodr-son-of-odin.avassa.dev
obelix.merovingian.avassa.dev
topdc-khpqwcu6oyanc.avassa.dev
topdc-94jfgz0mckx9q.avassa.dev
topdc-394z9fr28ng38.avassa.dev
dec6t3.pingu-ab.avassa.dev
topdc-feul9jycugmbg.avassa.dev
topdc-ppro9fvw6k3m2.avassa.dev
topdc-aosecxk64qwac.avassa.dev
hangman.merovingian.avassa.dev
dec6t2.pingu-ab.avassa.dev
topdc-296k80z0sdifm.avassa.dev
topdc-a5b7uxiwfvl3y.avassa.dev
topdc-z5pez17e60kfj.avassa.dev
topdc-a8lbzmej9377g.avassa.dev
topdc-unnjxrx817fxl.avassa.dev
topdc-e1o7ddijmodoi.avassa.dev
topdc-soj4wobzi6lpl.avassa.dev
development.mattias-korvkiosk.avassa.dev
e2e-4518140.hodr-son-of-odin.avassa.dev
topdc-rb6soadngvf0z.avassa.dev
topdc-c6a8mo94o7gpp.avassa.dev
topdc-amxj5o2h224q3.avassa.dev
topdc-owss8ktvlhx12.avassa.dev
e2e-14119.hodr-son-of-odin.avassa.dev
topdc-gbbxz6jiqn9r6.avassa.dev
krokodil.rotmos-och-elektronik.avassa.dev
topdc-ms1io3rizr5j3.avassa.dev
ma-0523.mattias-korvkiosk.avassa.dev
topdc-z5mtlhuanhsbh.avassa.dev
topdc-wyxbripxvw6oa.avassa.dev
blubb.helmut-kohl-ab.avassa.dev
topdc-fhdyox0i6t7mh.avassa.dev
cluster-test.the-company.avassa.dev
topdc-8yrvnc0ji0om5.avassa.dev
topdc-uyjum55kmxmq6.avassa.dev
topdc-tyd4aghudygel.avassa.dev
e2e-518204.yet-an-org.avassa.dev
topdc-w8hih701hegot.avassa.dev
topdc-ubcbe74em5rg1.avassa.dev
washme.eveon.avassa.dev
topdc-ca2x9w3oo8eip.avassa.dev
topdc-liatbjn0hmv2f.avassa.dev
topdc-o7z8hbvrsezrv.avassa.dev
topdc-vrnfeg55sb6ea.avassa.dev
dec3prod2.yet-an-org.avassa.dev
topdc-8r7h7bqwlsfi9.avassa.dev
washme2.eveon.avassa.dev
topdc-wpy7lw86c0o3r.avassa.dev
topdc-k754303lg72je.avassa.dev
topdc-j482hsj1f3tev.avassa.dev
topdc-u45xcksu4u821.avassa.dev
topdc-kz1a4f6zb32ou.avassa.dev
topdc-xwdkl04v7pf37.avassa.dev
sdf.eveon.avassa.dev
m23.strollonet.avassa.dev
topdc-e6p2sa9rht1xx.avassa.dev
dec3.yet-an-org.avassa.dev
topdc-pdlyhwyz36uj8.avassa.dev
d14.strollonet.avassa.dev
10000.mattias-korvkiosk.avassa.dev
dec6p2.pingu-ab.avassa.dev
topdc-ncnq53djjg0o0.avassa.dev
topdc-7cgn9ns2qamxp.avassa.dev
topdc-x2c2zofqxjvna.avassa.dev
topdc-wvagl2qkragf6.avassa.dev
tjohej.tomas-fisk.avassa.dev
topdc-5c3pz9dmbvaff.avassa.dev
demo-2.the-company.avassa.dev
detest.mattias-korvkiosk.avassa.dev
topdc-immtf2j3dfb0v.avassa.dev
development.mattias-korvkiosk.avassa.dev
tport.bi.avassa.dev
100.bi.avassa.dev
e2e-406316.yet-an-org.avassa.dev
topdc-pikizn91ohflr.avassa.dev
6nov1.wadsten-alltannat.avassa.dev
topdc-3sp6s3emgbfhp.avassa.dev
topdc-y6xcd1yf3d6r2.avassa.dev
topdc-m7ac195mt72wo.avassa.dev
werr.eveon.avassa.dev
dec3trial1.yet-an-org.avassa.dev
dec6p1.pingu-ab.avassa.dev
dec3t3.yet-an-org.avassa.dev
e2e-4424349.hodr-son-of-odin.avassa.dev
topdc-24ga5y9rptsaq.avassa.dev
topdc-qukv3u8lhwrce.avassa.dev
demo-3.the-company.avassa.dev
topdc-lbakcwr2d0q92.avassa.dev
topdc-fhox1qc2dz427.avassa.dev

Certificate

The complete raw certificate details for topdc-aosecxk64qwac.avassa.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2et/hNsBxhf/UymYXRB
UMbMWS0RvESE3st+hQwuL3XTdKC31W0l36BaRQl+tEiNmMseh+pH8kZ7vlnDxUuZ
YunoguFNlHSzcURXZ0wbdZtFQMPJcVvfRhdqWzNaMxXz7Ip9Za7tMLToBAHvd9X/
c8tay+dG6OYS5XO5C0Cqu7yGYbv1pej4XchJ83vyj7GaQUrZrrsrGvVYSoTPugzm
WmYCzA8kd3t7fTr/A/0f4S8bZPq/Wrn7Bq1GtdlpUDADusFC8x2MT5hIJGOXxFme
mwD71LpmDalvSiRiX7rlkp5JvejgGk5VYOZOaAjOByO+fKK2znj4mhneBgjpBxtp
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8217548966672822026741777081285371178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'topdc-aosecxk64qwac.avassa.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19618063614672921941566856071460428604511578947281294764560550507656034653861262832499996684578003823537313836170624833307723618390343828742860952418306789446208293438630487068394261771583059268166400130328182287277064162265458927611634231261768884926009268801765465080316758114123849620645939219744142009888867385037062183313353133255917712720413909214872066425222762098621642742655078769522126847271624207329848084780776439706246977722858218338592349303858634210723448165652377711997617036070911366179428110652409281545355454947807910502194218365515720604058826914554728031237414209941886094471248910145140874242409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c48c9222d2ab9d4459598dafa6e9b4b58d88f10a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topdc-aosecxk64qwac.avassa.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topdc-aosecxk64qwac.avassa.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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