connexia.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:ab:dc:31:09:d2:79:6e:1b:33:ff:c9:fe:91:7a:ea was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=connexia.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:ab:dc:31:09:d2:79:6e:1b:33:ff:c9:fe:91:7a:ea
Serial Number (int): 20830768714915773132439275841631910634
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:be:0b:12:a6:16:63:32:97:bf:c4:75:40:f0:f7:36:a7:e9:ae:c8
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 25:2b:67:84:70:74:28:c5:b8:ee:f8:0b:ac:52:c2:4a:a8:7f:85:90
Fingerprint (sha256): 34:65:57:73:82:74:01:a7:1f:0e:de:c2:16:19:18:4e:5e:09:57:76:99:08:fc:d6:ed:3f:9d:43:de:37:37:2d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate connexia.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connexia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connexia.com
datadrivenagency.com
connexia.it
stage.connexia.com
www.connexia.it
www.paolodammassa.it
www.datadrivenagency.com
www.connexia.com
paolodammassa.it

Other certificates including the domain name connexia.com

(limited to 100 certificates)
live.armani.dvnet2.connexia.com
www.thomasbos.dev
analytics.sviluppoturismoitalia.it
www.vodio.org
pirellitruck.connexia.com
cloud.connexia.com
www.evenuu.com
app.vanecke.nl
donazionicovid19.connexia.com
soundsoflifehc.com
nespresso-lesintenses.connexia.com
www.kalyanwedsjessi.com
stgsportello.connexia.com
morse.stevemaguire.dev
blackandwhiteacrobanfield.turnosweb.app
boyutinsaat.info
w3colors.com
kicsve.se
rloutcomes.connexia.com
www.codaptive.help
www.pharmazes.com
foodtrain.540.co
www.pharmazes.com
defensewatches.com
app.floraum.co.kr
www.mzengenhariaearquitetura.com.br
*.connexia.com
app.domaimobiliaria.com.br
facebookapp2.connexia.com
email-triage.srv.deloitte.ai
homes.akira-tomoko.com
www.yufw.dev
*.connexia.com
balisage.dev.cloud.leroymerlin.it
email-triage.srv.deloitte.ai
bio-techne-demo.autolomate.com
altona1.headraft.de
fysh.app
shop247.top
www.tomaszferens.pl
connexia.com
ghst.dev
bio-techne-demo.autolomate.com
dboutcomes.connexia.com
nitipan.com
retailzeenltd.com
hpe-suseevent.echoo.co.in
homepearl.estore.business
idapps.id2son.fr
www.ecommerceweb.ca
www.cdn.connexia.com
pogakuofie.com
www.salaoday.com.br
www.unipathapp.com
lwise.ca
www.mzengenhariaearquitetura.com.br
docs.digitalinspiration.com
cloud.connexia.com
lab.kpeyes.io
facebookapp.connexia.com
stage.connexia.com
ongroups.com
flash2see.app
breathink.connexia.com
www.eklivalda.no
silviapeligro.com
pirellif1artab.connexia.com
cloud.connexia.com
connexia.com
www.donationleague.com
live.armani.dvnet2.connexia.com
alexpete.com
www.greo.com
scatterschool.com
covid19outcomes.connexia.com
foodtrain.540.co
www.ecommerceweb.ca
www.kalyanwedsjessi.com
mrts.tecnotrust.com
covid19outcomes.connexia.com
www.dev-tower-tag.bhaptics.com
stdoutcomes.connexia.com
app.floraum.co.kr
szilagyit.partner.felporgetve.hu
app.frontnow.io
zoom.connexia.com
nespresso-lesintenses.connexia.com
dabel.app
soundsoflifehc.com
facebookapp2.connexia.com
fbswarri.com
zoom.connexia.com
live.armani.dvnet2.connexia.com
hbcmusik.com
zoom.connexia.com
webchippsite.buzz
cloud.connexia.com
cnxoutcomes.connexia.com
interval-timer.wbrawner.com
live.armani.dvnet2.connexia.com

Certificate

The complete raw certificate details for connexia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNn26WQXZYxtU5OaqWm4
5oFaI3Gk2c+oj2t+ZOCretobNmiV0DDZ14kQEi6OCN4Do7Edd28GLmMjNKRPYrT6
Cn1xnzwEIADJEoPGC/MmGvex51ohSKoYqIDGZQk07uNDEfgyYH7GWcfcxh+CPttI
64MsTxF0jKYwXBjIm+CoJdzT4LwekpZZjRFpRbyxYp7bcF1oUaEqG4ZdIo3ksuuA
/Swg1VG0XXlTbPA1ATplXfBmsG5NqrQDksvgnvA9H/lYl7BoNAbstNsuENQj1q3w
7q28NA4Bv4v+13KyODmR2J1Cc5t4ojZqzkpjQHPwv5gH2iic22Qy2vJi1sWuyAyk
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20830768714915773132439275841631910634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connexia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19295704655101512477837502738001336273119571446063648873689995935899411052836579424225760098140309677115045059643639751621872014079496316808311572431232501623716012086609987260828432087617016793181472054598060282901499695703797876075135770952680619142563020067897240015141106382610231802644435141224283009755096984764140496962098809931109340067762260067258825027593094160220745879688396579364358324940660930278552103224832081623351972657535751941379755428122708839613606968655311813213158670837718040207026566497268047973751399118115240322204691915575628909071207965581880737355891567249126847783234066464256991994929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2be0b12a616633297bfc47540f0f736a7e9aec8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datadrivenagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.connexia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connexia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paolodammassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datadrivenagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connexia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paolodammassa.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b16fe31f90000040300483046022100ebd32966f41a17689011a952a3939399762d46a307b246749a41d3ccc9072ddb022100e210aa0382e600adbbd4789aa1fad2286b2e322b4fdd4ec7c618e9e96df9de2700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b16fe321b0000040300483046022100a90e075dc53ee024baedff20554927183a224d5d26c81fc0c254adb04aec72f9022100bbf37b7120ef344bf3a4095a597a7003257e0715bc51609b299971d9d3968934007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b16fe32090000040300473045022100911780dd8dac5cc11541e18ce645aa12ce53a19b6f4717bcf5ca42bb31623371022010ee3a3d2e80a57a903e1c0f7d3e659e687d7f4494f8f5c366b59aaeee8a6950
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008f70d26998f0a0321a2509a1c6a56462d8327d103d5e012bd13c344c0e9f0c6b6d9731ac29de853daf971a9b52194357dd358ea9f54c0d958dfc181383df4648bd637c95bb2bd7e2b3280c10e052eb25032ef11adba10fdce36964173f48119d889acea05984bc81de9563047e51ac6a04a8404ae4ed0013627bc519476de83dfe0fe748ed8c26cd15829ebd129473a9ba11a57c6af3825895423bb973344ccd74a3ae99d93a2a27b5b221046035189f8552a4a65707e032af0fcaaac5832756da629927853038839ae587092eef03d297608f77fe1f6b317f9925daeb979ba0d8817cdca03d307d7f20ba0fa9cc7d34d67f4c71e75dc289cba7a4dc9fcd5724