halcyonmobile.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:98:34:98:81:33:d6:87:b2:0d:eb:b1:6b:de:d4:ef was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=halcyonmobile.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:98:34:98:81:33:d6:87:b2:0d:eb:b1:6b:de:d4:ef
Serial Number (int): 20728715827237358521456914890965832943
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:e6:cc:a1:74:71:19:51:54:2e:82:45:9c:f1:4a:78:11:5d:da:51
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 80:d9:35:21:f2:9a:79:0e:4b:09:07:d1:90:e2:73:25:7c:86:c0:ba
Fingerprint (sha256): 30:22:48:0a:a9:ca:30:af:e6:3d:15:61:49:25:13:d0:2e:d5:da:77:40:6b:13:33:15:20:a1:9e:56:18:d6:4b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate halcyonmobile.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for halcyonmobile.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

halcyonmobile.com
halcyonmobile.net
halcyonmobile.info
halcyon.ro
halcyonmobile.co
www.halcyon.ro
www.halcyonmobile.com

Other certificates including the domain name halcyonmobile.com

(limited to 100 certificates)
halcyonmobile.com
tiff.halcyonmobile.com
wiki.halcyonmobile.com
api.halcyonmobile.com
halcyonmobile.com
vern.halcyonmobile.com
wiki.halcyonmobile.com
staging.halcyonmobile.com
api.halcyonmobile.com
xmas.halcyonmobile.com
pigment.halcyonmobile.com
business.alpha.nirmy.app
halcyonmobile.com
docs.android.halcyonmobile.com
aptosoceanrose.com
app.dulago.com.br
stealth-solutions.co.uk
halcyonmobile.com
wiki.halcyonmobile.com
picnici.com
xmas.halcyonmobile.com
api.staging.halcyonmobile.com
cdn.halcyonmobile.com
halcyonmobile.com
fargate.halcyonmobile.com
prashantraghu.me
halcyonmobile.com
halcyonmobile.com
tiff.halcyonmobile.com
tiff.halcyonmobile.com
www.bountechsummit.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
fantana.io
*.build.halcyonmobile.com
xmas.halcyonmobile.com
xmas.halcyonmobile.com
docs.android.halcyonmobile.com
app.dulago.com.br
www.gr3c.online
wiki.halcyonmobile.com
wp.halcyonmobile.com
wiki.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
cdn.halcyonmobile.com
wiki.halcyonmobile.com
halcyonmobile.com
tiff.halcyonmobile.com
pigment.halcyonmobile.com
cdn.halcyonmobile.com
app.uptimer.co
wiki.halcyonmobile.com
staging.halcyonmobile.com
thriftit.app
tiff.halcyonmobile.com
wiki.halcyonmobile.com
app.minaphoto.jp
halcyonmobile.com
finesse.ltd
halcyonmobile.com
halcyonmobile.com
*.build.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
*.build.halcyonmobile.com
wiki.halcyonmobile.com
api.halcyonmobile.com
api.staging.halcyonmobile.com
wiki.halcyonmobile.com
agent.aadhaar-bank.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
devivero.us
api.staging.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
blog.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com

Certificate

The complete raw certificate details for halcyonmobile.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIFwkr3HjBAOXPVYgWHZ
lEM/nx0Ijutx9jBSskgMouBvPI74swYYSZBocN0OOUsjoWH1hZ2+dntfD32ieTi3
MZ/0DicMpRFvcFJfvn4tjVGlpEL5oOpL8IJBVfhsNtfw67UhZ383Fktlw2FA+SzP
8FMlWjI4AKrIjnlxCetm1T22+obz0DiWpyCR3RI81suyqhwq2w4wUdvGWB7PYGt8
3qraUwZw1K7KdHZ0lwYaWWWoV5BgjgukPoORl4TyyNkEAjIpn0qF+XSH8t9YMVr+
bMOWlnlEzpYPeF5Ev1aSzwfnj8KU/HvZU7zepwlNNjNq/JiVkTwWz+aBLTXtYtmP
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20728715827237358521456914890965832943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'halcyonmobile.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24301583667774639489837278293337901456637823312655569628613805879958245159836715923698093069826330792098211858539766389841639175365879216271965676192412896418366279753045438419850829148950637920160185449874352568796061872878031060672558386139137047453531521164497032742233523661582190456690729897459691363800186047487049591959579630367857414958599959661756967302649150282130351356598642598737306261178563928736319118358904921881437793818751025915347780189652252259663302003661266910200979091378244210398023128042681282401913336996056685707754218126150537395201906429097725324677506914388959200042193237003415546597321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3be6cca174711951542e82459cf14a78115dda51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halcyonmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halcyonmobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halcyonmobile.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halcyon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halcyonmobile.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halcyon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halcyonmobile.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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