DV SSL/TLS Certificate for *.aehr.dev

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M03)

About the *.aehr.dev DV SSL/TLS Certificate

This certificate with serial number 08:3c:7f:05:f9:36:2a:d3:7a:e2:47:02:a0:c9:dc:0c for *.aehr.dev was issued on by Amazon.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.aehr.dev provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 08:3c:7f:05:f9:36:2a:d3:7a:e2:47:02:a0:c9:dc:0c
Serial Number (int): 10947938117079144654691925590324927500
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 43:0b:72:72:9e:00:76:e8:c1:fc:d0:d1:43:6d:be:15:5c:19:16:02
Authority Key Identifier: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (SHA-1): 52:79:c0:7e:89:c8:05:cb:7b:f6:b1:f2:bd:b0:17:67:4c:51:dd:bb
Fingerprint (SHA-256): 82:b1:4a:8f:2b:13:1d:56:59:38:9d:26:7a:f0:96:00:c1:1f:e0:92:4e:a4:02:ee:5a:a2:5a:e5:a0:36:9c:6e

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation Information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.aehr.dev
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.aehr.dev

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.aehr.dev

X.509 Certificate

The complete raw X.509 certificate details for *.aehr.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0UMmoD/ncfR0t50tyZE
+D0Dq59m3cm4+2wrrtbASiv0cZXZooCFXbs/csev5Tb3yV5SCScYg+PfZaH+6vT8
CFhwJjj0za4TAGR2QmaYiAFtxusbfnu9qW6b5g9/VhijOp65lI7gElQdlNyujOGl
0/nvTbPSrekH4qIUqJV4+rpq2+IW0IUXN5Fyuttu9bLnP9acKJqkO5YkIrfgdALy
9OXdWxlbGYqnS4B5FoIibbrwUS44StH3mvJT9mjue12cIlk7DUogUzpDGM9qQx+L
ffps8nLE0Tz9jWEGNc2Pf7jEo64i6fsAONhzL24ygE0EQ+SvpBnNOEFHckP1rxon
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10947938117079144654691925590324927500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aehr.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22630706034531380128070116579209329413930770309332509947242044153223232110796514489438508585022866746454170343123438274212134325816923200593074788959476946990471014524514851635076131785765389717525125354523310470265591014650780767886642507515581689553404353517223525298213227452602448538329054291654576969751911464611065641839636067908653430662237740274229658682030851523673052959990217449713872925762217894242654905442441975843255995148964145421917743284126385543938820449687251691192209646502395089198899683449160403764119825401651603728902676642985669169860925384544227393361387079661972876882262428323955754018689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							430b72729e0076e8c1fcd0d1436dbe155c191602
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aehr.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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