abcotvs.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:c4:38:63:83:51:ff:dc:73:ec:f4:1a:b5:8d:48:21 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abcotvs.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:c4:38:63:83:51:ff:dc:73:ec:f4:1a:b5:8d:48:21
Serial Number (int): 16969569832859377643825961556960430113
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:30:81:eb:08:4f:b7:4a:f2:96:bf:c4:e4:04:ba:b9:f9:c6:f3:c2
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 05:1a:5e:ce:94:9d:d7:e8:a1:8c:d7:ba:26:31:6e:07:ff:51:11:88
Fingerprint (sha256): 36:40:f2:9e:29:c4:ad:91:c9:69:77:d6:86:26:0e:af:72:ed:99:5c:83:e0:b8:fc:50:95:6c:2e:af:ab:d7:cd

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate abcotvs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abcotvs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abcotvs.com
www.abcotvs.com

Other certificates including the domain name abcotvs.com

(limited to 100 certificates)
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
abcotvs.com
cdn1.edgedatg.com
qa.static.abcotvs.com
cdns.abclocal.go.com
editions.geo.hosted.abcotvs.com
sweepstakes.abc.go.com
dev2.breakingnews.abcotvs.com
qa.siteeditor.abcotvs.com
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
static.abcotvs.com
api.abcotvs.com
dev.sweepstakes.abc.com
clips.abcotvs.com
dev.sweepstakes.abc.go.com
static.abcotvs.com
preview.api.abcotvs.com
sweepstakes.abc.go.com
editions.geo.hosted.abcotvs.com
editions.geo.hosted.abcotvs.com
sweepstakes.abc.go.com
qa.static.abcotvs.com
static.abcotvs.com
api.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.siteeditor.abcotvs.com
preview.api.abcotvs.com
sweepstakes.abc.go.com
editions.geo.hosted.abcotvs.com
qa.cdn.abcotvs.com
geo.hosted.abcotvs.com
geo.hosted.abcotvs.com
sweepstakes.abc.com
dev.static.abcotvs.com
editions.geo.hosted.abcotvs.com
static.abcotvs.com
api.abcotvs.com
abcotvs.com
qa.api.abcotvs.com
preview.api.abcotvs.com
preview.static.abcotvs.com
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
cdn1.edgedatg.com
editions.geo.hosted.abcotvs.com
qa.api.abcotvs.com
qa.simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.cms.abcotvs.com
cms.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.api.abcotvs.com
qa.api.abcotvs.com
qa.breakingnews.abcotvs.com
api.abcotvs.com
qa.breakingnews.abcotvs.com
qa.api.abcotvs.com
cdn1.edgedatg.com
dev.cdn.abcotvs.com
cms.abcotvs.com
qa.api.abcotvs.com
api.abcotvs.com
dev2.cms.abcotvs.com
dev.sweepstakes.abc.go.com
dev2.cms.abcotvs.com
7online.com
siteeditor.abcotvs.com
jenkins.cd.prod.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
dev.cdn.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
api.abcotvs.com
cdn1.edgedatg.com
siteeditor.abcotvs.com
preview.api.abcotvs.com
editions.geo.hosted.abcotvs.com
static.abcotvs.com
geo.hosted.abcotvs.com
siteeditor.abcotvs.com
static.abcotvs.com
abcotvs.com
api.abcotvs.com
qa.simplepost.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
breakingnews.abcotvs.com
geo.hosted.abcotvs.com
geo.hosted.abcotvs.com
qa.images.cms.abcotvs.com
breakingnews.abcotvs.com
sweepstakes.abc.go.com
qa.api.abcotvs.com
dev2.breakingnews.abcotvs.com
dev.cdn.abcotvs.com
cdns.abclocal.go.com
dev.api.abcotvs.com

Certificate

The complete raw certificate details for abcotvs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP62C7Ld7UejlL4/2Lj1
6EYmmmicndavV5k1HBKjReEj5/HYHB+XBNqd8Wm40h3wqIaZCZPds3qpIhSH93lt
WdAWt3W+JApqdB1PBSNNxJKFeSELwxA2g4Qf/XCFzTGcbFPAOBDxF/HXkoky4XUE
kHX4b6WV/OpfFH2a6HRolqvDBidpI8pzFGX4buPKfFcze415nH8QoJrYlRi4oFwV
1InrWhy83tNVOY8bRmvOUl2AT9MJ1CtoGcC9xgGEO4SwzeHfCmWAsQAkVRzy2S99
aKvzD/KsS0jU6MSFct0n28PSoq5IBKa2IaSlh6dxpRDrojZKi+CYi8XOXcrgSRfD
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16969569832859377643825961556960430113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abcotvs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25373263725793209774414130501441181339837177353655996554606315057937006206074556370577109830693214171982777759340819625625097016049496255335171052913329598118078601705836968541274202181686487734930601464767957422605740148890047417020203989388614050744346109403284588708596896437448210986319910346625347786789136191484967536380659275574562859436787893862289225362679311307636024333396977075837269990790482520103562624663424820199583523703720174971827466841081766202376124311289342320199624739909935398770570685271860852848100155948381176114464476032503813833694958327175017345918719864997285969811657496889883853570957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d03081eb084fb74af296bfc4e404bab9f9c6f3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcotvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcotvs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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