lynktrac.io
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 06:93:f6:d3:12:ab:bc:4d:31:79:a4:4a:cc:f1:76:02 was issued on by Amazon.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=lynktrac.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:93:f6:d3:12:ab:bc:4d:31:79:a4:4a:cc:f1:76:02Serial Number (int): 8743641808597249440317795799737136642
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 2a:3d:1e:89:16:96:ab:a0:95:b7:26:f8:a4:62:f7:75:e3:a1:24:18
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 61:6c:f7:01:54:a2:96:04:13:50:5a:34:71:99:01:2e:89:ef:6e:af
Fingerprint (sha256): 33:1c:aa:6c:c5:5a:32:ec:54:fd:ca:f2:09:dd:b2:84:fc:42:99:55:aa:a0:70:32:8e:52:6b:5f:6d:4f:d0:5d
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate lynktrac.io
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lynktrac.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lynktrac.io
www.preprod.lynktrac.io
www.beta.lynktrac.io
www.hil.lynktrac.io
*.lynktrac.io
www.hilbeta.lynktrac.io
www.preprod.lynktrac.io
www.beta.lynktrac.io
www.hil.lynktrac.io
*.lynktrac.io
www.hilbeta.lynktrac.io
Other certificates including the domain name lynktrac.io
(limited to 100 certificates)
lynktrac.io
support.digitbrew.com
support.opkey.com
motodrivesupport.excellonsoft.com
support.naattuvila.com
lynktrac.io
devops.experiontechnologies.com
www.socket.lynktrac.io
support.canvas.edu.pl
studentsupport.atpstar.com
gyanshree.sana.insure
support.opkey.com
lynktrac.io
support.drivetech-ai.in
lynktrac.io
lynktrac.io
www.socket.lynktrac.io
support.naattuvila.com
devops.experiontechnologies.com
support.lynktrac.io
support.rify.com
devops.experiontechnologies.com
support.naattuvila.com
support.meliorasolutions.in
support.digitbrew.com
support.opkey.com
motodrivesupport.excellonsoft.com
support.naattuvila.com
lynktrac.io
devops.experiontechnologies.com
www.socket.lynktrac.io
support.canvas.edu.pl
studentsupport.atpstar.com
gyanshree.sana.insure
support.opkey.com
lynktrac.io
support.drivetech-ai.in
lynktrac.io
lynktrac.io
www.socket.lynktrac.io
support.naattuvila.com
devops.experiontechnologies.com
support.lynktrac.io
support.rify.com
devops.experiontechnologies.com
support.naattuvila.com
support.meliorasolutions.in
Certificate
The complete raw certificate details for lynktrac.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIQBpP20xKrvE0xeaRKzPF2AjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDEyNzAwMDAwMFoXDTI1MDIyMzIzNTk1OVowFjEU MBIGA1UEAxMLbHlua3RyYWMuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCTXkDe/VqtjGhiIqdIs68y239hHuYju4vf3VfJbjRNcENAHfu6TuFtJtcl DTVVtvGFE9EFimOokQCI8aQY+jAW2s9TbsdeCLc2hAd310Ahg5h7wvsWW7lRNdBs 29s8jEULJHR784I1xjUgkYhRfRl4b+zcXBnAA5Hm2lPlBxbidVDeydkuCBjTweUz tL5IUZ2Lwm/jLas3/Y3l0hq9CK7fOFERdL6nzQw23KrCQ1CpjbSPDhXRsSMz8H1F xuc5k3pZZj7mJtXIF3Hatuey5UFDfS8of5DIobrFb6QeL9YYA4NUFnZRWpzaqHAC Citm/+3oJXPwiGw92asIrDUb+fmTAgMBAAGjggNRMIIDTTAfBgNVHSMEGDAWgBRV 2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUKj0eiRaWq6CVtyb4pGL3deOh JBgwgYIGA1UdEQR7MHmCC2x5bmt0cmFjLmlvghd3d3cucHJlcHJvZC5seW5rdHJh Yy5pb4IUd3d3LmJldGEubHlua3RyYWMuaW+CE3d3dy5oaWwubHlua3RyYWMuaW+C DSoubHlua3RyYWMuaW+CF3d3dy5oaWxiZXRhLmx5bmt0cmFjLmlvMBMGA1UdIAQM MAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5h bWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF BQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF BzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIw DAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUATnWjJ1ya EMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGNSiX9YgAABAMARjBEAiBBzXss Kuvh78wp0NJzf3v9uY37mc/Md6M9oGcKRwFCdgIgLHmpjBl4eeAG6TbbPz3HjPYK qufn9gReRjLAMdtv8oIAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPT DAAAAY1KJf2+AAAEAwBIMEYCIQCfud6ocI76QVzA3wDxWGwdbRMigg33QqkKnLGc UKzshgIhAMKm7KQh3hdI1wo4gwOeMRYalP+KPXHWmVAfHPhPXAVLAHYAfVkeEuF4 KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNSiX9GgAABAMARzBFAiEAnrRq ePEEyLxigxu6fA71jUFjXLbIloeC1c7T+2lr2+wCIFbUhYa5hYDvxQmwzULL6sQ1 SPszN07wiHhk7a7q/ysxMA0GCSqGSIb3DQEBCwUAA4IBAQBDdWSml1tnqtHiC3vN 4M5H44kpPnARZ3zMgns4pmoyon0lbmcm1sdp81fwR0u5JnJz9A0q/t/kZeAvvArS 9XoDfX/DX012YwxyBFurpA2KyBxitHLsh1xhelQ/HWJM0Gh47esdwEKPxyvOyxzA PBPyRSlLtX8WTKKDAsXuBsKHJczxYE0CB93LJZMLf8cmGcNBINtyB9Kvd+2nASVk PpMcQzpQIXBFLOdLXsgJOQZ6kMZFjLzeYSkt8lhNalZZ1dp6qrU0StA31ejRh7TN 5oIcAahbk8ibwkwIPRVQh/9iyFcWOxO/cTBxa6ftlfsGoZujY/+oufuoeuwQcI1F XrNv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk15A3v1arYxoYiKnSLOv Mtt/YR7mI7uL391XyW40TXBDQB37uk7hbSbXJQ01VbbxhRPRBYpjqJEAiPGkGPow FtrPU27HXgi3NoQHd9dAIYOYe8L7Flu5UTXQbNvbPIxFCyR0e/OCNcY1IJGIUX0Z eG/s3FwZwAOR5tpT5QcW4nVQ3snZLggY08HlM7S+SFGdi8Jv4y2rN/2N5dIavQiu 3zhREXS+p80MNtyqwkNQqY20jw4V0bEjM/B9RcbnOZN6WWY+5ibVyBdx2rbnsuVB Q30vKH+QyKG6xW+kHi/WGAODVBZ2UVqc2qhwAgorZv/t6CVz8IhsPdmrCKw1G/n5 kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8743641808597249440317795799737136642 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lynktrac.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18603508915071089488312467103774181500033893544512448522536966513185264702909719661566534090155237263035441695987968881008946173459071235969306834235740419866528109611131766616255632221699268889607395154445664460147406724145925816641774794976803161433682930356294923590127909744040643629572344834736888178451955066596919680557771719177137741291635878135009353673130516053685669272362829211284841538267381951029377841834647440585229312320385494604569448405196899806639902445585295595446145601158758376272965993696234544353045073330071119996833879884687529164058871898922055771784462376309333776327692334095387873376659 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a3d1e891696aba095b726f8a462f775e3a12418 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynktrac.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.lynktrac.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.lynktrac.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hil.lynktrac.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lynktrac.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hilbeta.lynktrac.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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