cdn.outreach-staging.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:c3:27:d6:f3:5a:93:ca:80:3e:9a:8f:ae:1c:49:62 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdn.outreach-staging.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:c3:27:d6:f3:5a:93:ca:80:3e:9a:8f:ae:1c:49:62
Serial Number (int): 14305585889379129218024742828531009890
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:56:bb:2b:39:c8:b4:ec:3f:23:76:51:18:82:79:7d:e1:e7:43:60
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): c2:73:65:ff:19:7b:1a:60:e9:87:99:d1:a3:87:b5:02:1e:be:15:17
Fingerprint (sha256): 27:58:53:01:e1:69:62:7d:76:49:9b:98:0d:9e:2b:66:9c:cd:12:62:71:57:8a:b4:18:af:f5:bf:13:fa:0c:23

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate cdn.outreach-staging.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.outreach-staging.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.outreach-staging.com

Other certificates including the domain name outreach-staging.com

(limited to 100 certificates)
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
cdn.outreach-staging.com
carspa.app
summit.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
staging1c.outreach-staging.com
outreach.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
marketplace.outreach-staging.com
id.outreach-staging.com
deploytestservice-staging1a.outreach-staging.com
vanity.outreach-staging.com
id.us-east-2.outreach-staging.com
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
id.outreach-staging.com
deploytestservice-staging1a.outreach-staging.com
web.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
login-master.outreach-staging.com
www.sppetroleum.com
staging1a.oats.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
telefork.staging1a.outreach-staging.com
deploytestservice-stable-staging2b.outreach-staging.com
controlplane.outreach-staging.com
storage.outreach-staging.com
staging2.outreach-staging.com
login-master.outreach-staging.com
outlook.outreach-staging.com
staging1c.outreach-staging.com
id.outreach-staging.com
staging1c.outreach-staging.com
deploytestservice-staging1a.outreach-staging.com
staging1c.outreach-staging.com
staging2b.oats.outreach-staging.com
deploytestservice-canary-staging1a.outreach-staging.com
deploytestservice-ngb-ss2-us-east-2.outreach-staging.com
keycloak.outreach-staging.com
deploytestservice-canary-ngb-ss2-us-east-2.outreach-staging.com
sidebar.outreach-staging.com
europeapp.wingchan.net
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
id.outreach-staging.com
deploytestservice-canary-ngb-ss2-us-east-2.outreach-staging.com
login.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
round1.io
staging1a.outreach-staging.com
plan-master-orca.outreach-staging.com
deploytestservice-staging1c.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
staging2b.oats.outreach-staging.com
deploytestservice-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-gs-us-east-2.outreach-staging.com
staging1a.outreach-staging.com
staging1c.outreach-staging.com
staging1c.outreach-staging.com
staging1c.oats.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-ngb-ss2-us-east-2.outreach-staging.com
id.us-east-2.outreach-staging.com
deploytestservice-stable-staging2b.outreach-staging.com
controlplane.outreach-staging.com
oidctester.outreach-staging.com
accounts.outreach-staging.com
developers.outreach-staging.com
rolling.vi.outreach-staging.com
summit.outreach-staging.com
deploytestservice-stable-ngb-gs-us-east-2.outreach-staging.com
staging1a.outreach-staging.com
oats.outreach-staging.com
unleash.outreach-staging.com
staging1a.outreach-staging.com
developers.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
www.lifebits.app
deploytestservice-canary-staging1a.outreach-staging.com
cdn.outreach-staging.com
staging1a.oats.outreach-staging.com
id.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
keycloak.outreach-staging.com
id.outreach-staging.com
controlplane.outreach-staging.com
www.outreach-staging.com
id.us-east-2.outreach-staging.com
deploytestservice-stable-staging1a.outreach-staging.com
id.outreach-staging.com
staging1a.outreach-staging.com
api.outreach-staging.com
staging1c.outreach-staging.com
outlook.outreach-staging.com
staging1a.outreach-staging.com
deploytestservice-stable-staging1a.outreach-staging.com
staging1a.outreach-staging.com

Certificate

The complete raw certificate details for cdn.outreach-staging.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwIzxvtHXLbATg+O888N
Gz5mofXSa0c+vlmRXP4oRPKyfDy7iIBfTaHOqPV+EBLZUtImraWTRyWvysIJ71MP
S+OOpIUGKH85SSoRh1HRh9P+khPK/+kMwt/CP5daPQf7qE0//P7xTwdQoYljwF/I
jRlFhHsctuxyDcxgLJACcDIikGT0FacF+NADz2tU+zt3DvVvLtAqlqXDESR9LSwP
BMb/xk+bLHS2cOocpuFOIDnngfGMEbC1Ccj6qgHGKRDx2xBPbSNcowJK/pJ/wbqP
w1fPAdus8jaTw4r8NbcqSqqvgSKcWqCRYDQzJinQL6GrwtFpJr2fqB9zWAGccDTx
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14305585889379129218024742828531009890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.outreach-staging.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22092789341459535711704319771151884033201201986058111863540670227732677864287754862361967736922384920757497595057811315732641723678011057983284905545813102284357500637316221251358317607248583389666222564830035456444909943372573590939758202369542335036722548966031679007384469101350344398880953189675213912660793028582457589241427164468716916690860497628570330776030664278426336389788080103526635606554274510626858137324219008417494599965564789432712188636352651678782561961093384590852515130230983818112894794521914040313915642930676177774948322348239950412816818944823229494978870389720091581349370284790936889520583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc56bb2b39c8b4ec3f2376511882797de1e74360
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.outreach-staging.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018aac81b16c0000040300463044022023ec5bf73acef14a6b80ce20357e94e552b0819068d2283055f9a3c195a0c29602203ad29d6e52d68719b5df61016b35d8a40a84b4e94934b195d4b4eb5c5eb3215500750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018aac81b1b300000403004630440220769bb99946fcde5281984eb323951a97665832ff529bd49a6a7705ba232edd42022053ce0190d65a87f997253f4889461e8a8097d790d9cb8aae73c7551370128424007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018aac81b1790000040300473045022100ab3f190e7d152e58972c6b7e3ce965680f358f17e7e9b24ef9197ed17996dc0b022018d7832fd318058d53278d30a89d27433b77547c5fd285400f5096e1b0b99b0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020e02d2c0c4cceb1c41cd499e754cffd38616e7c2f4ec7de98cda183c58f3e34839d638370bbbb97ba15e0142a0b69d5f008fd1fa3a00d3c7d66f3af52b81cd071090b46812b237cd051d002d06966a70b04d08b8f4f97380cdc94289ddc48544a94b8ed05b3c1d8935289a9f24ea7cea65cf2d1b7b76b18e84ecec0572c2daf0548ed2352ac751350390ad6174c478a19dd07756775f5d9674c5df5664adbf319295e13bf503bb46d96e51e2f0660abaed897cfdde04fcf196db0b345eeabe7ba663d5fbb57c92ab13834be2599984f2cf3b0b76fbc5e860be3edc857b20e0c95bf5f11b8e8dd88fabf7932dbee9fe68ff0ee6b522d8190d6e306c918c2228b