*.app2.receitadigital.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:33:65:37:2a:3b:cb:d3:fc:7a:2a:ce:4c:74:01:0d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.app2.receitadigital.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:33:65:37:2a:3b:cb:d3:fc:7a:2a:ce:4c:74:01:0d
Serial Number (int): 4254544021129590517723541619621495053
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 6b:bb:c2:94:1d:a1:cf:ef:ca:8e:ee:06:c0:39:11:96:89:72:b1:41
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): b4:a7:9e:ce:60:59:31:02:d1:02:12:6a:d0:ee:a8:43:eb:22:c8:fd
Fingerprint (sha256): 2b:db:24:31:1d:81:6a:8b:0e:d3:97:57:5a:24:f8:49:8c:44:ed:2e:78:50:19:6f:a5:28:a1:27:5a:7c:4c:08

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.app2.receitadigital.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.app2.receitadigital.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.app2.receitadigital.com
app2.receitadigital.com

Other certificates including the domain name receitadigital.com

(limited to 100 certificates)
receitadigital.com
suporte.controladoria.digital
suporte.controladoria.digital
support.xformative.cloud
*.app.receitadigital.com
desk.churchadm.com
ajuda.receitadigital.com
helpdesk.yourtekpro.com
support.rmtcam.com
ajuda.receitadigital.com
suporte.controladoria.digital
support.strident.uk.com
soporte.masin.co
support.aztec.city
www.spillfinansiering.no
suporte.escritax.com.br
suporte.controladoria.digital
support.strident.uk.com
suporte.controladoria.digital
homolog.receitadigital.com
support.coreproducts.ca
buy-rift.ethrift.io
suporte.controladoria.digital
www.receitadigital.com
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
helpdesk.baiyuan.io
suporte.controladoria.digital
receitadigital.com
*.app.receitadigital.com
tickets.onlinemarketing-zentrum.ch
support.mindsize.com
suporte.controladoria.digital
receitadigital.com
kikenyatours.com
suporte.escritax.com.br
suporte.controladoria.digital
*.app2.receitadigital.com
suporte.controladoria.digital
suporte.controladoria.digital
suporte.controladoria.digital
support.ez-erc.com
soporte.masin.co
support.mindsize.com
suporte.controladoria.digital
www.receitadigital.com
internal.symphonic.com
suporte.controladoria.digital
suporte.controladoria.digital
helpdesk.kentik.com
support.rmtcam.com
v2.receitadigital.com
helpdesk.yourtekpro.com
ajuda.receitadigital.com
soporte.peruapps.com.pe
cielosupport.applaudostudios.com
desk.churchadm.com
receitadigital.com
suporte.controladoria.digital
humancapital.tafaseel.ae
suporte.controladoria.digital
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
humancapital.tafaseel.ae
suporte.controladoria.digital
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
desk.churchadm.com
backend-api.receitadigital.com
eventos.ingresso.com
ajuda.receitadigital.com
support.techbyhart.com
receitadigital.com
www.receitadigital.com
support.lumenave.com
suporte.controladoria.digital
suporte.controladoria.digital
internal.symphonic.com
www.receitadigital.com
support.blacksheepmedia.co.uk
suporte.controladoria.digital
suporte.controladoria.digital
receitadigital.com
helpdesk.bhamtastic.com
receitadigital.com
*.app.receitadigital.com
support.zilmoney.com
support.mbpractice.com
ajuda.receitadigital.com
support.rmtcam.com
suporte.controladoria.digital
support.ez-erc.com
suporte.controladoria.digital
support.ez-erc.com
soporte.masin.co
suporte.controladoria.digital
support.blacksheepmedia.co.uk

Certificate

The complete raw certificate details for *.app2.receitadigital.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48gt3Eimp1/OUoJM5nIu
344Y3xoKwMYMvzDsr3p3366rmB/iNiMiUE91KWStQ61LkERB86MdEld5BLBqjw/U
psU6Jx/PvHQT/IEcmnL5C+2+lxNXF45uK8MqCnZQG0vOOpA0676uvsXrMZf1Q/J3
btOT8tVV6GeCPQtd5aXxmIvuxAVjeA9xm7IJkyCF/n2L5+dPIl9cBXwe7ExW7e5y
4l7SrzrXLYG61ffB1lenhEM2UlXH6cusAPvAKVmGBQ7thLgaDCaedIiLn2oq3Z3j
Y8myIhxw8rDHJCvVSOmIuJ0z+96UgyQBDB+byTrETfCxxvYpI0aVLmYiwgSAXvUr
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4254544021129590517723541619621495053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app2.receitadigital.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28754807241516079295501840300128538150491772660504619100953299743727339429677828141446990280259362810838927510864135908466029808517971841279439050983172639404428507747131417209330559759466421088381630945814650361390895481497241089111807562043075711406617887780897166229574373313503820099160689777635750039695659286170956431572942981475882836269154353470211359021806058595643967454407496829215943580620657321954105587245544993996502059485811756499710469962508533970745968338179225541101616715781289641484986868874256160767660885099778313410904569484162802775610123242413620160583430054624551548712193750130263237929787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bbbc2941da1cfefca8eee06c03911968972b141
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app2.receitadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2.receitadigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e98f3d1330000040300473045022100adc167117cde068c5a7066eaf421ec4d1168f639464051c238277313ffc2aec90220256fbb7c8b51badc3813cc9b15733ac40045d069991943b460a2313e40f16b270077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e98f3d1310000040300483046022100ac821e8e9ed03fc9a55e78f18895da9ce9c69ccd4d1292aeb3c4f46897b56611022100ad4954f50075c3ae7d4ed6075907c52f35df584cefc5b39b8a72320e3667f694007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e98f3d13300000403004730450221008a5de235da3b67a35c49d3b08084e655b6fa47854d7d7c9beec7ca3b86aec2cf02205fb1cdd6024c75cee77f31a0252c46c014a122186eb35d64dbd17621ab78b7b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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