uat-business.pci.spectrumflow.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:09:6f:41:48:a1:6f:34:aa:af:57:c4:1c:1f:33:72 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uat-business.pci.spectrumflow.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:09:6f:41:48:a1:6f:34:aa:af:57:c4:1c:1f:33:72
Serial Number (int): 15999723140920455604405697131573097330
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:6e:b1:34:6b:c0:3c:ef:41:bf:2f:b3:6e:c1:43:e8:98:e7:81:c4
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 0e:70:f3:8a:53:da:45:ec:d3:35:53:76:69:93:a3:b2:a5:15:20:73
Fingerprint (sha256): 27:b8:d0:a4:dd:d8:58:cc:df:ad:3f:f6:18:be:86:12:99:f0:4a:ad:c5:22:5e:e8:a7:6f:94:3c:08:c1:a3:eb

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate uat-business.pci.spectrumflow.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat-business.pci.spectrumflow.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat-business.pci.spectrumflow.net
*.pci.portals.uat-spectrum.net
*.uat-business.pci.spectrumflow.net
uat-consumer.pci.spectrumflow.net
*.uat-spectrumcommunitysolutions.net
pci.portals.uat-spectrumbusiness.net
*.uat-consumer.pci.spectrumflow.net
pci.portals.uat-spectrum.net
*.pci.portals.uat-spectrumbusiness.net

Other certificates including the domain name spectrumflow.net

(limited to 100 certificates)
rancher-waf-test.spectrumflow.net
spectrumflow.net
pagebuilder.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
spice.spectrumflow.net
dynamic-experience-prod-distillery.argo-cd.spectrumflow.net
*.spectrumflow.net
rancher.spectrumflow.net
testrodeo.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
dte-stage.argo-cd.spectrumflow.net
spectrumflow.net
spectrumflow.net
rancher-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
dm-nonprod-eks.argo-cd.spectrumflow.net
backend.testrodeo.spectrumflow.net
*.spectrumflow.net
distillery.spectrumflow.net
uat-business.pci.spectrumflow.net
tdcs-dev.spectrumflow.net
clusters-stable.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvrnew-eks.argo-cd.spectrumflow.net
gitlab.spectrumflow.net
spectrumflow.net
best-slate.spectrumflow.net
rancher.spectrumflow.net
vsi-specflow-entitlements-capiv4.argo-cd.spectrumflow.net
lineups.vsi.spectrumflow.net
fosd.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
ipvs-dev-eks-blue.argo-cd.spectrumflow.net
leo-metadata.argo-cd.spectrumflow.net
epgs-loadtest.argo-cd.spectrumflow.net
slate-tve-engprod.spectrumflow.net
rancher-test-upgrade-argocd.spectrumflow.net
pci.spectrumflow.net
jdtest-cluster-3-capi.spectrumflow.net
rancher.spectrumflow.net
v2.spectrumflow.net
rancher-next-argocd.spectrumflow.net
lantern-dev-capiv5-sf.argo-cd.spectrumflow.net
spectrumreach.ncs.spectrumflow.net
prod.spectrumflow.net
emu.spectrumflow.net
cdvr-mc1.argo-cd.spectrumflow.net
*.qa.mds.spectrumflow.net
rancher-next.spectrumflow.net
transition-meta-toolbox-flow.meta.spectrum.net
rancher-test-upgrade.spectrumflow.net
spectrumflow.net
*.meta.spectrum.net
settings-vhs-capi.spectrumflow.net
nns-search-eks-cluster.argo-cd.spectrumflow.net
vsi-specflow-ipvs-new.argo-cd.spectrumflow.net
ecd2.spectrumflow.net
rancher-argocd.spectrumflow.net
figaro.spectrumflow.net
spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
slate-tve-engprod.argo-cd.spectrumflow.net
ipvs-mc1.argo-cd.spectrumflow.net
focus-stage.argo-cd.spectrumflow.net
dte-stage.spectrumflow.net
pltvspecflow-1-29.argo-cd.spectrumflow.net
testrodeo.spectrumflow.net
neel-test.spectrumflow.net
backend.testrodeo.spectrumflow.net
best-cluster.argo-cd.spectrumflow.net
ipvs-dev-purple.argo-cd.spectrumflow.net
spectrumflow.net
rancher.spectrumflow.net
cewga.spectrumflow.net
cewga.ncs.spectrumflow.net
settings-vhs-poc-capi.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
cewga-ncs-lowers.argo-cd.spectrumflow.net
metadata-epgs.argo-cd.spectrumflow.net
*.tvsdk.spectrumflow.net
rancher-test-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
spectrumflow.net
clusters.spectrumflow.net
*.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
pdetube.spectrumflow.net
cewga.spectrumflow.net
*.pltv.spectrumflow.net
sspp-web-preprod.spectrumflow.net
*.pinxt-sdk-docs.spectrumflow.net
settings-mc1.argo-cd.spectrumflow.net
neel-test.argo-cd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
*.meta.spectrum.net
best-eks-capiv5-sf.argo-cd.spectrumflow.net

Certificate

The complete raw certificate details for uat-business.pci.spectrumflow.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsea/p7ntRZZP8eBsg5So
BV+t1zflzd2mjTY2X+TInD6dq6HKQr/StlUrchDbxmhJrYqg5eKOBHs206jugEoI
gHGpUYEnfGbS/NWnVrkRNy7GtirMcLLoWZUPITX9BHDyTKx2T041PjSWhpyKTkHH
ITqMXlidX3Z3jOqTjYEndLy4HeQ9/diAAXFtmt31qvcR6wetPXUhBG+vELpBP23p
TMR3a0qo3B6+s8pc4ADHljDdXplIosw6SnOX0a30U5dE11lZQnRod3bVHWrshMIR
C2K/N8lf/k/cJyftPIpIqmpr2yD3GZP1G/HtfMzHdBkc3Za1K4V3Bz+nnChmcAIr
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15999723140920455604405697131573097330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat-business.pci.spectrumflow.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22457966380688538679271928086005903805752946218220242372520784599399981212065019219415498736382349503397823541385506944576151086169199498478158640429500504966944450094616076497165472079196613956511385980645284918751703369559556156995420096597046249668636623815560934983478350161722561518318135142112593819729154108268206646591337389910301942361542960328379416278407419388799073162211288739752885564158818488515364477052828959380700200531573648282776470696002402584307312456834710838979033948067257897807645346308856994292553021172842700453948738815614433761203769596101932681134037185898237404027672469354357668850589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a06eb1346bc03cef41bf2fb36ec143e898e781c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-business.pci.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pci.portals.uat-spectrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-business.pci.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-consumer.pci.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-spectrumcommunitysolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pci.portals.uat-spectrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-consumer.pci.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pci.portals.uat-spectrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pci.portals.uat-spectrumbusiness.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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