client-cf-secure-client-track4.mrpdns.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:a7:bd:80:80:62:6f:ff:0a:e1:6a:2c:86:bf:08:63 was issued on by Amazon.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=client-cf-secure-client-track4.mrpdns.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:a7:bd:80:80:62:6f:ff:0a:e1:6a:2c:86:bf:08:63
Serial Number (int): 3529413123298124826155309343717656675
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 36:0f:30:27:80:9c:22:83:e5:8b:4f:4e:b2:62:d7:90:77:7b:5a:e7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 1d:06:6b:d9:46:44:c8:d7:a6:62:55:e1:04:75:0b:69:fc:9b:f9:87
Fingerprint (sha256): 38:54:4e:99:28:48:fd:22:22:c0:f3:be:e0:b4:ec:79:65:e9:aa:4a:e0:46:fb:08:5b:7e:61:14:df:a2:45:2f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate client-cf-secure-client-track4.mrpdns.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for client-cf-secure-client-track4.mrpdns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

client-cf-secure-client-track4.mrpdns.com
*.34raceway.com
federatedautopartsraceway.com
camdenspeedwaytn.com
*.eaglevsw.com
arlingtonraceway.com
*.cottagegrovespeedway.com
harrisspeedway.com
*.quicksilverseries.com
*.flyinghdragstrip.com
141-speedway.com
eaglevsw.com
cottagegrovespeedway.com
flyinghdragstrip.com
thundermountainspeedwayky.com
*.141-speedway.com
*.harrisspeedway.com
quicksilverseries.com
*.acspeedway.com
34raceway.com
*.idahofallsraceway.com
*.deercreekspeedway.com
*.camdenspeedwaytn.com
worthingtonspeedway.com
*.kingsofthunder.com
carstourwest.com
*.racesalinaspeedways.com
*.thundermountainspeedwayky.com
deercreekspeedway.com
*.worthingtonspeedway.com
acspeedway.com
*.carstourwest.com
*.arlingtonraceway.com
kingsofthunder.com
racesalinaspeedways.com
*.federatedautopartsraceway.com
idahofallsraceway.com

Other certificates including the domain name mrpdns.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for client-cf-secure-client-track4.mrpdns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxln1K0HXEzUIIo67fE/d
grN/MgP9TiysJeHBDKDz3+NWlEOzonLuDIvmO4wmBeqFWubEXWojkAVaZONSajer
Jty4EtbMg3foUiEupALVZeHb6RPp+WmZ4mmavjPR3tO9pLSNQel0C+yuqkaxaPPM
kIQrMD83ku2tQ53nWDPsE/LyyjZZYKajyhxpiuFcTpHumVlOvXm4KEn1UQ7f4zQw
qzau0qxweT5zDpF/OnV5Z9ObT1oujhSHhr9qeI5Narw6L+do3yZeOLV1rK8kFYwd
4HdisfaO0bU5SZH9QQbWxEbvBVEt55NbrMoYjRWI//jTMkS8/51IkuNzz6EzUX5I
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3529413123298124826155309343717656675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'client-cf-secure-client-track4.mrpdns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25039544174172823119252089702473433998983181899999389282948413434457746125976797102372673023740014143110295565032207487200877047016131535007223411709631928874232683639602694148046751601720251126364682700560289873202972257633247406907032479375238286903558267188050206594771851381502427909850623706377938553850545597914962548505697154157569807522066217209159578789682293764189108150376494291161873036389234042754618793697525972340550618719802837318748178690249581390806599723974721041427523306822374732966796937514624637491920567749719192485102240747046054937983289708807293085388567978971171084169952134589776622667809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							360f3027809c2283e58b4f4eb262d790777b5ae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (871 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client-cf-secure-client-track4.mrpdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.34raceway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federatedautopartsraceway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camdenspeedwaytn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eaglevsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlingtonraceway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cottagegrovespeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quicksilverseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyinghdragstrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '141-speedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglevsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottagegrovespeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyinghdragstrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thundermountainspeedwayky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.141-speedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrisspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicksilverseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34raceway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idahofallsraceway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deercreekspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camdenspeedwaytn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worthingtonspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingsofthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carstourwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racesalinaspeedways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thundermountainspeedwayky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deercreekspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worthingtonspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carstourwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arlingtonraceway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsofthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racesalinaspeedways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federatedautopartsraceway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahofallsraceway.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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