gtn.rockcontent.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:07:b5:ad:67:e7:70:5b:ed:4c:c0:84:f1:a2:ff:52 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gtn.rockcontent.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:07:b5:ad:67:e7:70:5b:ed:4c:c0:84:f1:a2:ff:52
Serial Number (int): 4027714920131615808916839879015595858
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d4:6b:67:21:dd:19:d8:52:4c:77:0c:81:bf:aa:c1:4a:cd:f4:58:11
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 7f:83:83:9c:44:52:fb:01:e3:43:12:e1:3a:f0:85:d9:dc:1c:be:a3
Fingerprint (sha256): 22:1d:07:90:0e:a9:e5:19:4d:84:be:8e:d1:e0:8d:45:e7:b6:3c:62:bc:5c:0d:7f:41:1f:4b:bd:10:40:c5:83

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate gtn.rockcontent.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtn.rockcontent.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gtn.rockcontent.com
*.talent.rockcontent.com
talent.rockcontent.com
*.gtn.rockcontent.com

Other certificates including the domain name rockcontent.com

(limited to 100 certificates)
*.stage.rockcontent.com
sni32185.cloudflaressl.com
templatea.rockcontent.com
api.rockcontent.com
sni32185.cloudflaressl.com
space.rockcontent.com
admin7status.brinkpos.net
inteligencia.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
ion-status.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
comunidade.rockcontent.com
template8.rockcontent.com
wiki.rockcontent.com
template7.rockcontent.com
blog-anhanguera.prd.stage.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
comunidade.rockcontent.com
admin7status.brinkpos.net
rc-blogs.rockcontent.com
universidade.rockcontent.com
admin7status.brinkpos.net
ion-status.rockcontent.com
api.analytics.rockcontent.com
university.br.rockcontent.com
stage.rockcontent.com
rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
*.rockcontent.com
templateb.rockcontent.com
universidade.rockcontent.com
template2.rockcontent.com
admin7status.brinkpos.net
template4.rockcontent.com
sni32185.cloudflaressl.com
learndash.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
templatee.rockcontent.com
sni32185.cloudflaressl.com
template3.rockcontent.com
blog-faq.rockcontent.com
sni32185.cloudflaressl.com
university.rockcontent.com
cdn-ra.rockcontent.com
*.rockcontent.com
template7.rockcontent.com
hackers.rockcontent.com
champions.rockcontent.com
admin7status.brinkpos.net
templatea.rockcontent.com
performance.rockcontent.com
*.privacy.rockcontent.com
template4.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
tecnologia.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
template4.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
*.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
space.rockcontent.com
data.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
ion.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
sni32185.cloudflaressl.com
gtn.rockcontent.com
gabby-careless-top.blogs.rockstage.io
studio.rockcontent.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
template1.rockcontent.com
ion.rockcontent.com
sni32185.cloudflaressl.com
resources.rockcontent.com
admin7status.brinkpos.net
gtn.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
maestro.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
admin7status.brinkpos.net
admin7status.brinkpos.net

Certificate

The complete raw certificate details for gtn.rockcontent.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1G3rTWsFXYPkssw+K3/
+i8V873Pj9kTi9RgAYxSkMnyAf7mEJWqQUYd1kZ9sPjPWAO9TOfBJskd3tgugYS+
1nR63e8WEwjPq6VRh/7RokaXNGMOP0AQwcALRLSM9qKuivIZh4sJcSyYUZVFLDJg
KuWur9jSjecPxuxwx2s9hlMfd6JGpluYtw2J5RYuU52YOTnmrQocDc69F/bzFdS4
6+FdN7p0G9WRprwhJJXYj7bmVW/kx2TihkDAUdyV1d7uqRnWh6catoD+MHET5bzR
7/uSrgCNkHszafPFV0oJfUrt2OZsz9IyHdy8yFzci/itk2LAY5mBqGdmPYBbg5JS
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4027714920131615808916839879015595858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtn.rockcontent.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22131999763628896718518973421479473735253414833617159287836780751085059211724533831774478887035969495791564853313729943357323039206479006552035924575106006398775253102926838498632863610627752795339717178317131964112978856161895203034611260137686838785457278689446707573101077048492395632843583566907056101114344737849532390896878643153944818689911710102271916627969218763684371128784602068763573421677705446187813044585454326328689234721006229441135125472604389899667337939663975313364842258401779714033403081128076753901970941913426260968458121447810337503948402667658172348413757744075171041888792235704450469220953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d46b6721dd19d8524c770c81bfaac14acdf45811
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtn.rockcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talent.rockcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talent.rockcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtn.rockcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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