perf.autoquotebuy.pcmngd01.test.c1.statefarm

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:35:1b:69:4b:e3:2c:ed:d6:9c:cc:d8:f5:b1:ee:6f was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=perf.autoquotebuy.pcmngd01.test.c1.statefarm

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:35:1b:69:4b:e3:2c:ed:d6:9c:cc:d8:f5:b1:ee:6f
Serial Number (int): 6921887679929301890809498668010434159
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 11:06:79:62:06:63:fb:c0:05:a1:ee:05:3f:a2:45:57:d5:b9:2c:60
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e1:71:54:76:db:9a:53:8e:27:1d:09:e3:05:4d:da:44:c5:af:40:ba
Fingerprint (sha256): 39:6e:ed:8f:91:76:12:b1:1a:ce:0f:a7:6f:a7:c9:a5:b7:04:62:90:df:6e:16:de:bd:e2:96:4c:fd:dd:8e:a6

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate perf.autoquotebuy.pcmngd01.test.c1.statefarm

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf.autoquotebuy.pcmngd01.test.c1.statefarm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf.autoquotebuy.pcmngd01.test.c1.statefarm
*.shopping-auto-perf.test.statefarm.com
shopping-auto-perf.test.statefarm.com

Other certificates including the domain name c1.statefarm

(limited to 100 certificates)
repaireligibility-1733283.claims.test.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
rentaleligibility-1713142.claims.test.c1.statefarm
status-guidance.claims.c1.statefarm
test.driveforsafety.test.goodneighbors.com
ocd.research.c1.statefarm
driveforsafety.whs.c1.statefarm
fireqfcapi.claimsvc.sandbox.test.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
repaireligibility-1727262.claims.test.c1.statefarm
roadsideassistance.claims.test.statefarm.com
*.tl1.c1.statefarm
api.claims.sandbox.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
info-exp.claimsvc.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
api.infosec.c1.statefarm
*.oic.claims.test.c1.statefarm
arsondog.whs.research.c1.statefarm
photovideocapture.claims.test.statefarm.com
api.infosec.c1.statefarm
rentaleligibility-1290042.claims.test.c1.statefarm
media-mfe.claims.sandbox.c1.statefarm
providers.rental.claimsvc.c1.statefarm
driveforsafety.whs.c1.statefarm
checkout.hub.claims.statefarm.com
cornhole-api.xrhost.c1.statefarm
managestorage.claimsvc.sandbox.test.c1.statefarm
qualfc-env4.claims.sandbox.test.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
repaireligibility-1735606.claims.test.c1.statefarm
facade-env4.ecrmclaims.amccint.test.c1.statefarm
roadsideassistance.claims.statefarm.com
sf-aqua-security.research.c1.statefarm
uimod-mfe.dcpm-sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
cornhole-api.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
api.rapid-reimbursement.claims.s.test.c1.statefarm
photovideocapture.claims.test.c1.statefarm
api.infosec.c1.statefarm
driveforsafety.whs.test.c1.statefarm
manage-tasks.claimsvc.sandbox.test.c1.statefarm
rentaleligibility-1292675.claims.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
sf-aqua-security.research.c1.statefarm
repaireligibility-1730977.claims.test.c1.statefarm
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
gnc-virtualmeeting.amccint.c1.statefarm
rss.claims.test.c1.statefarm
mddl-dev.c1.statefarm
digitalqfc.claims.test.c1.statefarm
rentaleligibility-1736987.claims.test.c1.statefarm
ocd.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
premiumchange-api.pcu.conncen.c1.statefarm
driveforsafety.whs.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
ingest-vaaei8.sfconnect.digxp.test.c1.statefarm
datalake.test.c1.statefarm
driveforsafety.whs.c1.statefarm
driveforsafety.whs.test.c1.statefarm
dev.armapi.test.c1.statefarm
repaireligibility-1706942.claims.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
auth-utl.claimsvc.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
rentaleligibility-1290880.claims.test.c1.statefarm
my-neighborhood.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
facade.ecrmclaims.amccint.c1.statefarm
towexperienceapi-exp.claimsvc.test.c1.statefarm
env1.autoquotebuy.pcmngd01.test.c1.statefarm
api.claims.test.c1.statefarm
repaireligibility-1733275.claims.test.c1.statefarm
media-mfe-shell.claims.sandbox.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
photovideocapture.claims.test.statefarm.com
hub.claims.statefarm.com
driveforsafety.whs.test.c1.statefarm
repaireligibility-1732729.claims.test.c1.statefarm
bank-callback-api.settle.test.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
auth.proofing.cimdev.test.c1.statefarm
homesafety.ting.c1.statefarm
perf.checkout.autoquotebuy.pcmngd01.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
driveforsafety.whs.c1.statefarm
repaireligibility-1725869.claims.test.c1.statefarm
rentaleligibility-1736388.claims.test.c1.statefarm
api.claims.rapid-reimbursement.c1.statefarm
repaireligibility-1725869.claims.test.c1.statefarm
repaireligibility-1733283.claims.test.c1.statefarm

Certificate

The complete raw certificate details for perf.autoquotebuy.pcmngd01.test.c1.statefarm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIodEeLZKke3I/AlBAZV
7cR+Zze60hslj5Qzp5Kd2fD/et4HBW7Fn+ShcOiN86LTz3q0dpnFjb+OIf/cXA7P
PLB2xl8FaVzdHP1wbs9N4UzxAbfT5EFUIWGvTMacVvXkzjPsdurz17vjumgiOJ5A
JaBcXvRMEpLCtfN+gcgUEQrQ7KeCWAbt1Ii2P9d/D7Lb7tBZXI55O9uGQLlbKCvg
vbRJht66msfVGgb3Pf/6st2Mz8bwoe4GVjS+gGTsIvaIaj8InvJXkQyo1bcg+7Hm
B9Y1+0C32sV2S6yVGV0vqXB0F4zosMbBxzXltJHlU6xX2hA35NAyXabJJ3NU1Nda
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6921887679929301890809498668010434159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf.autoquotebuy.pcmngd01.test.c1.statefarm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20771188346352902348657695414254494659244320815503529123932226653180556918208113283408233080685736992609117051584919936748554444499611022353362419274568055491075672442530609604740142797635319246157443597724689890656708131222640047726235861703105087358342302720998716486741695733354009149415342913051880301230195488542200836102574336940890702136350682715191145678844778227722243698596243047785323777627964580376576872283635603127817782117091550983693017522184913155395263605490761741008876276803804091962393117449034651991656140213659963927624690426888812016384531616590598878823653414981202434160199279716811717171879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							110679620663fbc005a1ee053fa24557d5b92c60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.autoquotebuy.pcmngd01.test.c1.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopping-auto-perf.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping-auto-perf.test.statefarm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018cec9edd6300000403004830460221009afd9eb298d5990522eef6d8e09972c704d76a4bf7ce5af735e5792118937667022100b336f97e5b6a25e6f70a2c577238c44fcef3d5d9e0cdb3372d416dec275ceb270076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018cec9edd57000004030047304502210085195c8e30b8f355016c119c2668c0b8962511d2e174d96d5c5610c4a40c5a5402201eb286dacba48ef30508cd2c44e88d5c2e2a4ad07952841d847b6b8b1f128d99007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018cec9edd800000040300483046022100f8945408f014e03015513e84334670aa52baa048525c1f9576500405304a76ac022100f907809e88ccbaa456c3882bc3881454ced822d6ba0ceaaa5f7b1b060ab9919e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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