naturalmotion.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:6f:07:2c:a8:3b:43:87:42:ce:f6:ce:92:3e:ae:ae was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=naturalmotion.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:6f:07:2c:a8:3b:43:87:42:ce:f6:ce:92:3e:ae:ae
Serial Number (int): 12539542428333112079247063684631932590
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:7b:cf:53:40:f0:58:b6:04:bd:5d:eb:c5:4a:b3:53:9e:df:04:2f
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): a7:5a:f2:15:6e:e2:22:69:51:9c:a8:bd:3f:00:f7:5e:8c:8f:9f:d9
Fingerprint (sha256): 2f:3d:01:3e:33:9d:b1:41:d3:64:da:ab:c8:0b:7f:2f:81:ac:52:c4:7d:8e:b5:f2:e4:bc:d2:6c:6d:3b:77:f2

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate naturalmotion.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naturalmotion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naturalmotion.com
*.naturalmotiongames.com
naturalmotion.co.uk
naturalmotiongames.com
*.naturalmotion.co.uk
*.naturalmotion.com

Other certificates including the domain name naturalmotion.com

(limited to 100 certificates)
ssl277858.cloudflaressl.com
accessallareas.naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
files.naturalmotion.com
naturalmotion.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
jira.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
exchange.naturalmotion.com
jira.naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
accessallareas.naturalmotion.com
ssl277856.cloudflaressl.com
naturalmotion.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
testrail.naturalmotion.com
testrail.naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
naturalmotion.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
naturalmotion.com
accessallareas.naturalmotion.com
ssl277858.cloudflaressl.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
docs.naturalmotion.com
fb.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl277858.cloudflaressl.com
support.naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
accessallareas.naturalmotion.com
*.naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391882.cloudflaressl.com
accessallareas.naturalmotion.com

Certificate

The complete raw certificate details for naturalmotion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuywE65AGETn/wUAFHKBe
G9h3o4E7ylAUzlmwt9A0lwDD8HZ/IR1S6mhLYG3ZH/a3qR9LlDF94J9QPkGIhaX5
HrCMnAxTgE+qh+db4xd4ot+jofFKMymdJ2w0+UBzH57J2PN/BbOGGct0Qvwsb1OW
MEcHuVQgkwslJVXTJVZsWj+G9jaCyw+LCb+45+p2M1OVgJUkFOyzNB2DVryA5JBc
e+NAXeWNX5ekq41gT2BRaMalOK9uNWxJgOx10qI0hPk2tuRoEyFkhtYl6zUgSMp9
dKoilq6jaNQ8S7RERT91/hqotz0SlvhGnTUplGLlARpLDqZ8PejBA3ijdOoTuPUq
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12539542428333112079247063684631932590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturalmotion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23628269714758328896924291960872986777434260486185692678648213023701461780411651928865925660728970357180860667226419066865069350291284206597879962161291324986855585996173269953138670169633649793112908091796610358046014289959261985665821344231547176448856958018295719170964795698591135165217590889537115817735254828967776168325064505098259097656791352666861965145944333858107200294526136257202638221610394849027590284669449692673407416051455930548232318881001623588473011018537268806159209580737032186505699221683498945245100035366120206826869845623180891687097543275134008899560417913350359819541033990438024560061161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							117bcf5340f058b604bd5debc54ab3539edf042f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aebc684774f3110f8b743f0291e4e83d5b4f86fb22bf8da317fdb27a5c53ca00921a52a001d55edba802955f9ffa1c310d9cd3acc137fd0b439266f53b67061489f4bca79cf499e9f88b202a3e107b3fa6ebd7948cde87b339e75969f45e2d33afa592169108d782ae33c932fd58a14357159a8e54816678b63046d4cf6734bbf973596bdff482115f23db9f0110f3ce231f75d3b23b94e208e69be0f2a124911f997cead430417679a95588507ad7ad3fe38294964df8b451f6005997158e7774f4bd2d2b9d6916ef56c986b556ab50f17aaa9e09ce7aede35ccb38bd996a613b678a9e8d7003d30a7a0c6795d12f12e305236c974a3ae0757d3224e3f1a97c