assessments-jp.highbond.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:00:57:ba:7e:44:49:f3:3a:83:d7:a2:d2:0c:68:2f was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assessments-jp.highbond.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:00:57:ba:7e:44:49:f3:3a:83:d7:a2:d2:0c:68:2f
Serial Number (int): 11964831307215655617379722961741441071
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 88:6c:49:dd:df:b4:3e:c2:4a:45:d8:28:be:6f:ad:a5:ac:e9:a9:51
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): b0:2a:61:85:8e:7d:05:12:01:f4:d9:e2:69:b5:a3:f4:a9:fd:a6:4e
Fingerprint (sha256): 20:5c:0e:5c:f3:63:f0:a7:8f:9e:3f:b8:fe:f0:e9:24:12:61:23:f9:6d:de:dc:bb:26:17:58:81:1b:79:a1:c9

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate assessments-jp.highbond.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assessments-jp.highbond.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assessments-jp.highbond.com

Other certificates including the domain name highbond.com

(limited to 100 certificates)
*.projects.highbond.com
api-status.360cities.net
api-status.360cities.net
andrei.sterda.com
*.extractor-sa.highbond.com
highbond-combined-eu.aclgrc.com
captable.highbond.com
api-status.360cities.net
api-status.360cities.net
*.hub-ap.highbond.com
*.asset-types-api-sa.highbond.com
contributor.be-importhub-eu.highbond.com
*.hub-ap.highbond.com
highbond-combined-au.aclgrc.com
boardeffect.highbond.com
*.hub-eu.highbond.com
risks-assets-api-jp.highbond.com
equity-appapi.highbond.com
*.web-components-af.highbond.com
api-status.360cities.net
be-manage-eu.highbond.com
sdk-toolkits-api-eu.highbond.com
au.be-wopi.highbond.com
*.hub-ca.highbond.com
gallery.highbond.com
sdk-toolkits-api-au.highbond.com
highbond-combined.aclgrc.com
api-status.360cities.net
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
*.projects-au.highbond.com
api-status.360cities.net
*.roles-configuration.highbond.com
andrei.sterda.com
api-status.360cities.net
notifications-email-api-us.highbond.com
*.static.highbond.com
eu.be-wopi.highbond.com
*.bulkimportercdk1.highbond.com
downloads.highbond.com
*.highbond.com
*.cdkbulkimporter-eu.highbond.com
equity-gateway.highbond.com
notifications-email-api-ca.highbond.com
*.results.highbond.com
audit-eu-api.highbond.com
importer-cdkgateway-eu.highbond.com
*.risks.highbond.com
*.highbond.com
*.hub-af.highbond.com
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
*.highbond.com
highbond-combined-eu.aclgrc.com
api-status.360cities.net
*.results-ca.highbond.com
*.cdkbulkimporter.highbond.com
api-status.360cities.net
*.email-configuration-sa.highbond.com
api-status.360cities.net
highbond-combined-eu.aclgrc.com
api-status.360cities.net
*.cdkbulkimporter-af.highbond.com
*.highbond.com
be-manage.highbond.com
equity-portal.highbond.com
api-status.360cities.net
*.web-components.highbond.com
*.robots-ap.highbond.com
api-status.360cities.net
*.hub-au.highbond.com
compliance-library-api-af.highbond.com
*.asset-inventory-af.highbond.com
importer-cdkgateway-au.highbond.com
gallery.highbond.com
integration-service-api-au.highbond.com
api.dmi.highbond.com
api-status.360cities.net
highbond-combined-eu.aclgrc.com
andrei.sterda.com
highbond-combined-au.aclgrc.com
api-status.360cities.net
highbond-combined-au.aclgrc.com
assessments-jp.highbond.com
*.highbond.com
equity-gateway.highbond.com
*.cdkbulkimporter-sa.highbond.com
audit-af-api.highbond.com
highbond-combined.aclgrc.com
*.cdkbulkimporter.highbond.com
api-status.360cities.net
andrei.sterda.com
be-manage-ca.highbond.com
highbond-combined.aclgrc.com
andrei.sterda.com
*.projects-ap.highbond.com
gallery.highbond.com
andrei.sterda.com

Certificate

The complete raw certificate details for assessments-jp.highbond.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tWAzR79L4V1Pn1T9LOq
1DxYSwpgSWpKjCGaTDos7aR/W+KQdEl30TBM6hGfiYHLT77IgNJAoRkSG0+SUI0K
PEiiKO7LrPm+FBLJ/OdwHlICD6I3D9GK1zYyAQrKe5s+nILYUeNN0RXEWWP7t1gJ
MPiAUSfqiFbjhHT96DjW1ahE8QUlvoEU9WsFouAGJOqTT1tlEpzkOH1+GIxwYErA
mYilC78iHI+oImMybIWVodpemsbP+GfxVNkrkwMXfy7khPBPSyjHCSxVZYMwmnot
96KzPZP6auXTfD00UH08JW859I+2yywOJI1xnz+L2T0peVcidSJE4xoLiVqj7Q1C
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11964831307215655617379722961741441071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assessments-jp.highbond.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31159905338929243800283466805338453238381030219271999244416694466578935041017476056252247677772207282295175973430265788708207723608011037888235771305802208788616537380985132411448262919903511127021575882621356287667377928705606822844304252417601039287911966418906123618205787748110108310404475797356918442168404527487377288283519607882469668296545600101403822798165839977781491666374532225813239503418290235046713806500619703442166457412719557213486649066133284280329486966899006441897242537237624495630031657323102256701971345051252492741264864712418721464858335633378618996332421833360603256356283048094308586308211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							886c49dddfb43ec24a45d828be6fada5ace9a951
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assessments-jp.highbond.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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