md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:da:5d:31:f5:e7:0b:07:9b:c5:d2:34:b5:2b:dc:9b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:da:5d:31:f5:e7:0b:07:9b:c5:d2:34:b5:2b:dc:9b
Serial Number (int): 14426090895385995313303338009699802267
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:4a:19:7b:e6:cb:e0:d6:e3:b7:40:cf:02:0e:46:ea:cc:90:95:28
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): db:22:1a:22:1f:16:c3:d2:25:57:3d:72:0b:80:60:fa:87:81:f7:9d
Fingerprint (sha256): 3b:83:11:41:8e:cd:b8:8f:52:22:28:0c:db:43:19:e7:f2:9b:68:80:86:fc:2e:3f:cc:ca:9c:a3:63:b7:9a:27

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
*.pre-prod.app.humanesources.com

Other certificates including the domain name humanesources.com

(limited to 100 certificates)
humanesources.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
reports.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
helpdesk.lamundial.com
humanesources.com
meeting.strongdallas.com
help.uafrica.com
hes-api.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
nonprod.humanesources.com
meeting.strongdallas.com
support.nextconnex.com
support.carpay.com
humanesources.com
*.app.hes-edu.prod.aws.ap-southeast-1.humanesources.com
humanesources.com
*.humanesources.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
*.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
hes-hyp.app.hes-edu.prod.aws.eu-west-1.humanesources.com
pkg.dev.humanesources.com
suporte.mindify.net
meet.mysocalhealth.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
support.nextconnex.com
jd-api.app.hes-wf.prod.aws.us-west-2.humanesources.com
support.carpay.com
hes-api-docs.app.hes-edu.prod.aws.eu-west-1.humanesources.com
humanesources.com
apitest.staging.humanesources.com
support.labmoneta.com
humanesources.com
meeting.kreate.agency
sos.123assist.me
meeting.kreate.agency
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
jobs.humanesources.com
webinar.engys.com
*.app.hes-edu.prod.aws.eu-west-1.humanesources.com
staging.humanesources.com
portal.ibizarentals.be
pkg.humanesources.com
help.bettermlo.com
suporte.mindify.net
help.dakcs.com
meet.keterna.com
meeting.kreate.agency
nonprod.humanesources.com
cdn.dev.humanesources.com
academy.teamlink.com.br
apitest.staging.humanesources.com
*.humanesources.com
meeting.kreate.agency
jd.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
meeting.kreate.agency
www.humanesources.com
meeting.tradefy.com.br
www.humanesources.com
meeting.theholdingbox.com
humanesources.com
humanesources.com
*.app.hes-edu.prod.aws.ap-southeast-1.humanesources.com
meeting.kreate.agency
suporte.jumba.com.br
helpdesk.abra.io
md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
help.dakcs.com
humanesources.com
jd-api.app.hes-wf.prod.aws.us-west-2.humanesources.com
support.thenextlevel.co.uk
hes-hyp.app.hes-edu.prod.aws.ap-southeast-1.humanesources.com
meeting.abrahamsenfinancial.com
apitest.staging.humanesources.com
dev.humanesources.com
meeting.kreate.agency
pkg.humanesources.com
meeting.kreate.agency
md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
*.hes-prod-1.humanesources.com
support.shopafix.com
hes-api.app.hes-edu.prod.aws.eu-west-1.humanesources.com
meet.mysocalhealth.com
apitest.staging.humanesources.com
suporte.mindify.net
corporateapplication.lendme.co.ke
*.humanesources.com
jd-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
humanesources.com
suporte.tradefy.cloud
md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
hes-api.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
meet.keterna.com
jd.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
destek.visiott.com
meeting.kreate.agency
meeting.kreate.agency
support.labmoneta.com
reports.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
meetings.bopyx.com
ajuda.naveia.com.br

Certificate

The complete raw certificate details for md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WUh0EsJmXxf/k12kdMF
rLyR2wjVi7CB73PwNcwOi9eidDfma9xOWN3LCUVa72atuVjiyCYwqy5KZ7xEy484
9YlFVSTri6sIbjg4xTcQifDJrBxDvCY9fUV9EMSy4t8+eIT88ZibzrICh4bagzXV
uE6EgPa8L5dq5DZ9deSXUAx9m40ZIlCvzr7J5i5XhxVQbWoY0iZ9c5WPVl0kjh/g
2c6MHlvKaYUDhBSIhlwIUyS0/HGQEtDw7h4M6n9wNDobZmlQM2+6y1se4DHyW/62
Ucfq1Q0fOxQLiObVgYwrYAc46SZGtO7w5IQBRERx1KT9kA0AJRH06uLLGCfUIOS3
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14426090895385995313303338009699802267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28958441926803071203691023758031574237576762604584921743189355565200072806333459154179148568187668328142897649806563708212344718392736390230936819245593976434998363536949733646671827656309769119727406623229572080038772619910018061608684754526993414261198276888687956298846213095172989796834179455045117321258005686837575536304731474734723297605993524592060876362606596301311884813537383790155950706543861243759981964507799575715696907015690402074637324267899756153300364836005899607379696413273357690131830624587953060677848364266080830039955887622245978170222639369472096401543499844616362190438014285170050987243497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							944a197be6cbe0d6e3b740cf020e46eacc909528
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-prod.app.humanesources.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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