discomqc-envoymq-hub.briscoe-disco-dev.dht.live

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:38:03:e3:8b:ee:72:97:7c:d4:ab:ce:a1:7b:ee:92 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=discomqc-envoymq-hub.briscoe-disco-dev.dht.live

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:38:03:e3:8b:ee:72:97:7c:d4:ab:ce:a1:7b:ee:92
Serial Number (int): 6936987478330913259200300497816514194
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: aa:ae:6a:57:8d:e6:ea:5e:d9:cb:97:2b:27:cd:73:df:c8:66:c4:78
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 6a:aa:37:9c:17:15:1b:f2:48:0f:16:8e:fc:83:21:d7:1d:c1:8f:c8
Fingerprint (sha256): 3b:00:8e:46:e6:23:1c:27:e7:de:92:ea:20:d1:78:d7:eb:c0:da:64:39:2c:3f:2d:33:e6:a1:6c:f6:8b:72:4c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate discomqc-envoymq-hub.briscoe-disco-dev.dht.live

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for discomqc-envoymq-hub.briscoe-disco-dev.dht.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

discomqc-envoymq-hub.briscoe-disco-dev.dht.live
*.discomqc-envoymq-hub.briscoe-disco-dev.dht.live

Other certificates including the domain name dht.live

(limited to 100 certificates)
static.showtime7-sbx.dht.live
green-mcs-d.messaging2-amr-prd.dht.live
static.showtime8-sbx.dht.live
green-iot-avx-a.airview-messaging-stg.dht.live
sc-2061-werewolf-api.honeybadgers-sbx.dht.live
avw.airview0-dev.dht.live
sc-1457-scui.honeybadgers-sbx.dht.live
green-iot-hub-c.messaging2-amr-prd.dht.live
support-api.showtime5-sbx.dht.live
monaco.airview0-dev.dht.live
external.showtime8-sbx.dht.live
support-api.showtime8-sbx.dht.live
artifactory-edge-amr.artifactory-shared.dht.live
api.aloe-dev.dht.live
avx-mock-amr.showtime6-sbx.dht.live
mobilequestionsui.sleep-concierge-qa.dht.live
docs.showtime8-sbx.dht.live
nexus-new.airview0-shared.dht.live
*.mgmt.paas.dht.live
docs.showtime2-sbx.dht.live
avx-mock-apac.showtime8-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
data-platform-mock.showtime8-sbx.dht.live
green-iot-avx-d.airview-messaging-stg.dht.live
docs.showtime5-sbx.dht.live
peep-ws10.smart-coaching-dev.dht.live
bitbucket.prod.dht.live
sc-1470-mobilequestionsui.honeybadgers-sbx.dht.live
graphql.showtime8-sbx.dht.live
amr-stg-mcs-c.airview-messaging-stg.dht.live
graphql.showtime5-sbx.dht.live
green-mcspacific-a.messaging2-amr-prd.dht.live
external.myair-eu-dev.dht.live
docs.showtime7-sbx.dht.live
support-api.showtime6-sbx.dht.live
peep-ws5.smart-coaching-dev.dht.live
green-iot-mds-h.messaging2-amr-stg.dht.live
api.showtime4-sbx.dht.live
green-iot-mds-f.airview-messaging-stg.dht.live
api.hellosleep-prd.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
nightowl.showtime6-sbx.dht.live
green-mcspacific-c.messaging2-amr-stg.dht.live
scui.sleep-concierge-prd.dht.live
api.showtime8-sbx.dht.live
sc-1457-werewolf-api.honeybadgers-sbx.dht.live
*.sre-dev-ave-qa.dht.live
support-api.showtime7-sbx.dht.live
green-dps-ebs-b.messaging2-amr-prd.dht.live
graphql.showtime8-sbx.dht.live
avx-mock-amr.showtime2-sbx.dht.live
data-platform-mock.myair-eu-dev.dht.live
content-ws4.smart-coaching-dev.dht.live
green-iot-mds-c.messaging2-amr-stg.dht.live
*.airview-icm-dev.dht.live
avw.airview0-dev.dht.live
data-platform-mock.myair-eu-dev.dht.live
avx-mock-apac.showtime9-sbx.dht.live
green-iot-avx-c.airview-messaging-stg.dht.live
dev.us-west-2.paas.dht.live
avx-mock-apac.myair-eu-dev.dht.live
green-iot-avx-b.airview-messaging-stg.dht.live
peep-ws3.smart-coaching-dev.dht.live
honeybadgers-sbx.dht.live
content-ws1.smart-coaching-dev.dht.live
docs.showtime5-sbx.dht.live
avx-mock-amr.showtime5-sbx.dht.live
nightowl-mock.showtime8-sbx.dht.live
green-iot-avx-e.airview-messaging-stg.dht.live
green-iot-avx-d.messaging2-amr-prd.dht.live
devjmqc-envoymq-hub.bouncer-dev.dht.live
amr-prod-hub-b.prod-messaging-prd.dht.live
green-iot-hub-a.machine-services-perf-stg.dht.live
sc-1428-survey-api.honeybadgers-sbx.dht.live
graphql.showtime5-sbx.dht.live
docs.showtime4-sbx.dht.live
data-platform-mock.showtime4-sbx.dht.live
amr-dev-mds-f.airview-messaging-dev.dht.live
green-mcs-e.messaging2-amr-prd.dht.live
avx-mock-amr.showtime2-sbx.dht.live
support-api.myair-eu-dev.dht.live
green-iot-hub-f.airview-messaging-stg.dht.live
mcs2-dev.dht.live
graphql.showtime10-sbx.dht.live
green-iot-mds-h.airview-messaging-stg.dht.live
green-mcspacific-b.messaging2-amr-stg.dht.live
docs.showtime5-sbx.dht.live
airview-kona-dev.dht.live
artifactory-nexus.airview0-dev.dht.live
avx.eta.dht.live
mcs2-dev.dht.live
green-rhs-a.messaging2-apac-stg.dht.live
external.showtime2-sbx.dht.live
sc-tam-scui.honeybadgers-sbx.dht.live
static.showtime5-sbx.dht.live
avx-mock-eu.showtime7-sbx.dht.live
static.showtime5-sbx.dht.live
docs.showtime8-sbx.dht.live
green-envoymq-hub.messaging2-amr-stg.dht.live
green-iot-mds-a.airview-messaging-stg.dht.live

Certificate

The complete raw certificate details for discomqc-envoymq-hub.briscoe-disco-dev.dht.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z/G3xFehn+pnzjR+6Ry
wuZo09s63NpmhNTUNEM0Wonz3JsypLC+AZn2ENMewZD81FLH/l9FVz7u17KrmddA
1KThQkL6DtApLjck/fqleuLvE7u4AVb5NI1WqU/O7MVyGMU7fngXSxRpwnFk0B60
09EI84zYhrG5ySxyRgF9EI5PDP66JRXZ2ouXo0gy9VRfDU23z1U+l6KLpsKyEUIF
QIkD57TXkb9UQNldm4usbhpA9juY5Gj6c9HfxOQjrKBkY4WfYSukwHgZjsa/SwWJ
MnaEybBmUXbvP/9Fi9/0sqWqLhsP1j178iS4A7J1Z5D1ow2RUxdcXKKkpqsJSZ4H
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6936987478330913259200300497816514194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'discomqc-envoymq-hub.briscoe-disco-dev.dht.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27172685100260766137206204602792088071625890524132425035448102901471880259289914530496227449240390495466571211922770788611104826058436209074411015319556103168168802890472690389544262739380461913366027994993327741502191828798045171561139485090791406179391224815817595377310235758310392479527796477371242413520344604401817641740985549262506063122959639797753185283570511314243517640452498387310438269153216195423562798396004204589015636621966222154721756745909172298256776177152324511855812697039983984807304879378434462555308589907064670664358790661452672256711715333621588850814492959716094050903505929841075805882311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaae6a578de6ea5ed9cb972b27cd73dfc866c478
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discomqc-envoymq-hub.briscoe-disco-dev.dht.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discomqc-envoymq-hub.briscoe-disco-dev.dht.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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