elements-stg.fsxt.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:a2:df:bd:64:7a:66:eb:a2:52:a3:80:c1:86:0a:cb was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elements-stg.fsxt.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:a2:df:bd:64:7a:66:eb:a2:52:a3:80:c1:86:0a:cb
Serial Number (int): 3504146065213279300284092555718953675
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 36:87:71:ea:a6:65:e7:00:a3:55:b9:a3:b6:85:6b:65:9c:f7:c4:cb
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3e:11:9c:2d:00:ac:08:24:70:e1:4d:65:24:cd:3d:b1:10:e7:67:87
Fingerprint (sha256): 2b:ee:18:57:f8:5a:4b:31:e0:22:35:29:e3:97:16:f5:87:c7:e3:86:4a:16:63:37:b9:62:97:b9:00:00:a3:06

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate elements-stg.fsxt.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elements-stg.fsxt.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elements-stg.fsxt.net
api.elements-stg.fsxt.net
api.facs-stg.fsxt.net
api-fusion.elements-stg.withsecure.com
portal.facs-stg.fsxt.net

Other certificates including the domain name fsxt.net

(limited to 100 certificates)
ew1-rds-be-ci-rabbitmq-02.rds-ci.fsxt.net
niemee-test.aws-dev.fsxt.net
accounts-apac-ci.fsxt.net
portal.radar.elements-stg.withsecure.com
fss-ci.fsxt.net
niemee-test.aws-dev.fsxt.net
a.accounts-emea-stg.fsxt.net
avenue-master-admin.fsxt.net
accounts-na-stg.fsxt.net
accounts-ci-integration.fsxt.net
*.facs-stg.fsxt.net
oh-ci.fsxt.net
sieportal.devtoo-ci.fsxt.net
static.accounts-stg.fsxt.net
ew1-rds-ds-stg-bigdata.rds-stg.fsxt.net
psblive.psb-stg.f-secure.com
accounts-ci-integration.fsxt.net
fss-ci.fsxt.net
*.my.fsxt.net
static.accounts-stg.fsxt.net
latest.psb-ci.fsxt.net
*.my.fsxt.net
accounts-ci-integration.fsxt.net
*.push-parthe.aws-dev.fsxt.net
us2.analytics.psb.fsxt.net
portal.radar-ci.fsxt.net
quickscan-stg.fsxt.net
rusticrule.logos.fsxt.net
*.fusion-stg.fsxt.net
psblive.analytics.psb-stg.fsxt.net
management-api-kornal.cspm-ci.fsxt.net
accounts-ci-integration.fsxt.net
portal4client.ta.fsxt.net
portal.cp.elements-stg.withsecure.com
tormja.attr-ci.fsxt.net
accounts-ci-integration.fsxt.net
playground-stg.fsxt.net
portal-elb.cp-ci.fsxt.net
ew1-rds-ds-ci-bigdata.rds-ci.fsxt.net
sieportal.devtoo-stg.fsxt.net
rus-api.radar-stg.fsxt.net
unstable.push-ci.fsxt.net
static.accounts-apac-stg.fsxt.net
portal.cp-stg.fsxt.net
arcticsauna.logos.fsxt.net
ew1-rds-be-stg-rabbitmq-01.rds-stg.fsxt.net
*.accounts-emea-ci.fsxt.net
portal.cp-stg.fsxt.net
dev.radar-ci.fsxt.net
*.fusion-ci.fsxt.net
data-api-simon.cspm-ci.fsxt.net
auth.ci.ccr-ci.fsxt.net
onlinehelp-qe.aws-dev.fsxt.net
*.facs-stg.fsxt.net
playground-stg.fsxt.net
ew1-rds-be-stg-rabbitmq-01.rds-stg.fsxt.net
stable.attr-stg.fsxt.net
onlinehelp-qe.aws-dev.fsxt.net
avenue-master-admin.fsxt.net
*.my.fsxt.net
playground-ci.fsxt.net
a.accounts-na-stg.fsxt.net
playground-ci.fsxt.net
perf.push-ci.fsxt.net
*.accounts-emea-stg.fsxt.net
ew1-rds-ds-stg-bigdata.rds-stg.fsxt.net
accounts-ci-integration.fsxt.net
static.accounts-stg.fsxt.net
auth.dev.ccr-ci.fsxt.net
latest.analytics.psb-ci.fsxt.net
ctf.playground-ci.fsxt.net
idpadmin.accounts-emea-ci-integration.fsxt.net
accounts.int.gbl.oneid-unstable.fsxt.net
ew1-rds-ds-ci-bigdata.rds-ci.fsxt.net
elements-stg.fsxt.net
skyblue-psb.fsxt.net
api.mptest1.fsxt.net
seattle.aws-dev.fsxt.net
*.my.fsxt.net
oh-stg.fsxt.net
*.rds-ci.fsxt.net
stable.attr-ci.fsxt.net
a.accounts-apac-ci-integration.fsxt.net
api.threatintel-ci.fsxt.net
static.accounts-ci.fsxt.net
auth.dev.ccr-ci.fsxt.net
*.accounts-emea-ci.fsxt.net
littledynamo.logos.fsxt.net
mail.fsxt.net
ctf.consultancy-services-ci.fsxt.net
psblive.psb-stg.f-secure.com
accounts-apac-ci.fsxt.net
onlinehelp-doc.aws-dev.fsxt.net
*.gs-stg.fsxt.net
ppaem.aws-dev.fsxt.net
radar-intra-ci.fsxt.net
dev-stable.radar-ci.fsxt.net
management-api-alexp.cspm-ci.fsxt.net
*.rds-stg.fsxt.net
*.aws-dev.fsxt.net

Certificate

The complete raw certificate details for elements-stg.fsxt.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3LzPAAZ/42ZqJSoNOBs
RZEqcfLnQ1YktEIS52J7ycO0lIed9B2yQV48YVocUdr0RTPE391AK+jQBH4K8uPL
B+bX7x6kMzFprojg/DBs76GgMrbdE8336Fr9ACGab+CHAKLrzR0nGsQc2j8XhFVL
o+qjfRE8izv/P47/gfEalpdQ425TCD58+SfjEaGKW6NdHNP8xdJjyLsEPWgg3x0g
qRueyAvX/u1u/WNc5E+/EhSovgSIei6+dCEaB8ZthsOdTYJdEIQ4sV64IxmYmuTt
8HZ5QNN67RKLDop+KqOSikL8Hd+KwXXXxfC/TBXbaufnvNoIV9Owi5WwgiqUZuwm
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3504146065213279300284092555718953675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elements-stg.fsxt.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19118668073732495921352630049244875785342509880799797261512122338661092352044442789222279610995209686515417470892687629165626752481751679800489156348973252335768834294175655120088147047766554233851115727051128972895030974004041795709799721663631541860505447511585431776943399674562345521103661874076105462960164862270379847555184070398034786550418363680327359702012308282913374218248043595085673010329323766821350135306099099109383137198565006565468726400711052204728743722727671777356569538214992385520265834229365583422778584333589559921917309678802018997031774837135223939500309411758435389224524937769256605198079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							368771eaa665e700a355b9a3b6856b659cf7c4cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elements-stg.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.elements-stg.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.facs-stg.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-fusion.elements-stg.withsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.facs-stg.fsxt.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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