cosmic-bullfrog-live.aws.aviv-internal.eu

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:e6:0b:f0:5d:74:65:28:31:48:07:c4:1e:56:da:a0 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cosmic-bullfrog-live.aws.aviv-internal.eu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e6:0b:f0:5d:74:65:28:31:48:07:c4:1e:56:da:a0
Serial Number (int): 10499066398144884065600367451300092576
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 31:88:44:2c:70:29:b7:6a:85:97:28:2f:b3:9e:30:db:62:0a:29:42
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 53:41:e6:ee:0c:19:e4:0e:28:4a:d9:22:52:c4:b7:5e:4c:5f:84:ac
Fingerprint (sha256): 46:c7:1d:69:6c:be:cd:6c:74:01:23:41:6d:f5:75:03:d8:d8:c6:54:50:ab:b7:44:c5:1c:53:c9:a0:7d:c8:e0

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate cosmic-bullfrog-live.aws.aviv-internal.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cosmic-bullfrog-live.aws.aviv-internal.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosmic-bullfrog-live.aws.aviv-internal.eu
*.cosmic-bullfrog-live.aws.aviv-internal.eu

Other certificates including the domain name aviv-internal.eu

(limited to 100 certificates)
classic-pup-preview.aws.aviv-internal.eu
kind-camel-sandbox.aws.aviv-internal.eu
thorough-caiman-live.aws.aviv-internal.eu
smart-turtle-sdlc.aws.aviv-internal.eu
sleepy-meerkat-live.aws.aviv-internal.eu
wary-vole-live.aws.aviv-internal.eu
malicious-beaver-preview.aws.aviv-internal.eu
enigmatic-parrot-sandbox.aws.aviv-internal.eu
save-cow-dev.aws.aviv-internal.eu
grumpy-rabbit-sandbox.aws.aviv-internal.eu
grumpy-rabbit-preview.aws.aviv-internal.eu
quiet-octopus-sandbox.aws.aviv-internal.eu
faithful-catfish-sandbox.aws.aviv-internal.eu
electric-manatee-prod.aws.aviv-internal.eu
black-swan-dev.aws.aviv-internal.eu
cosmic-bullfrog-preview.aws.aviv-internal.eu
grumpy-rabbit-dev.aws.aviv-internal.eu
driving-camel-dev.aws.aviv-internal.eu
wanted-rhino-live.aws.aviv-internal.eu
driving-camel-preview.aws.aviv-internal.eu
smart-tiger-sandbox.aws.aviv-internal.eu
strong-horse-sandbox.aws.aviv-internal.eu
moral-jennet-dev.aws.aviv-internal.eu
hypnotic-bear-live.aws.aviv-internal.eu
huge-kid-live.aws.aviv-internal.eu
sleepy-meerkat-sandbox.aws.aviv-internal.eu
skilled-mantis-sdlc.aws.aviv-internal.eu
fond-bluegill-preview.aws.aviv-internal.eu
grumpy-rabbit-live.aws.aviv-internal.eu
testing-lizard-preview.aws.aviv-internal.eu
refined-halibut-dev.aws.aviv-internal.eu
save-cow-preview.aws.aviv-internal.eu
peruvian-penguin-sandbox.aws.aviv-internal.eu
fierce-panda-preview.aws.aviv-internal.eu
patient-boar-sandbox.aws.aviv-internal.eu
summary-louse-sandbox.aws.aviv-internal.eu
electric-manatee-preview.aws.aviv-internal.eu
fun-maggot-sandbox.aws.aviv-internal.eu
testing-snake-dev.aws.aviv-internal.eu
kind-camel-preview.aws.aviv-internal.eu
timid-bulbul-dev.aws.aviv-internal.eu
funny-spoonbill-dev.aws.aviv-internal.eu
cosmic-bullfrog-live.aws.aviv-internal.eu
enormous-herring-sandbox.aws.aviv-internal.eu
enormous-herring-dev.aws.aviv-internal.eu
driving-camel-sandbox.aws.aviv-internal.eu
superb-flamingo-dev.aws.aviv-internal.eu
pretty-raccoon-sdlc.aws.aviv-internal.eu
nervous-toucan-dev.aws.aviv-internal.eu
mighty-fox-sdlc.aws.aviv-internal.eu
smart-turtle-sandbox.aws.aviv-internal.eu
classic-pup-sandbox.aws.aviv-internal.eu
smart-tiger-dev.aws.aviv-internal.eu
super-firefly-bis.aws.aviv-internal.eu
testing-snake-preview.aws.aviv-internal.eu
cosmic-bullfrog-dev.aws.aviv-internal.eu
testing-snake-live.aws.aviv-internal.eu
wary-vole-preview.aws.aviv-internal.eu
hypnotic-bear-preview.aws.aviv-internal.eu
aws.aviv-internal.eu
arriving-bird-dev.aws.aviv-internal.eu
regular-osprey-dev.aws.aviv-internal.eu
classic-pup-live.aws.aviv-internal.eu
ma-beta-sandbox.aws.aviv-internal.eu
large-ray-sandbox.aws.aviv-internal.eu
magnetic-turtle-preview.aws.aviv-internal.eu
moral-jennet-live.aws.aviv-internal.eu
testing-lizard-sandbox.aws.aviv-internal.eu
cheerful-chicken-preview.aws.aviv-internal.eu
hypnotic-bear-dev.aws.aviv-internal.eu
kind-camel-dev.aws.aviv-internal.eu
kind-camel-dev.aws.aviv-internal.eu
simple-squid-sandbox.aws.aviv-internal.eu
grandiose-blackbird-dev.aws.aviv-internal.eu
magical-rat-sandbox.aws.aviv-internal.eu
save-cow-sandbox.aws.aviv-internal.eu
intimate-gazelle-preview.aws.aviv-internal.eu
fierce-panda-dev.aws.aviv-internal.eu
driving-camel-live.aws.aviv-internal.eu
aviv-central-shared-services.aws.aviv-internal.eu
yawning-yellowhammer-dev.aws.aviv-internal.eu
enormous-herring-live.aws.aviv-internal.eu
intimate-gazelle-dev.aws.aviv-internal.eu
insomniac-eagleowl-preview.aws.aviv-internal.eu
magical-rat-sandbox.aws.aviv-internal.eu
obliging-baboon-preview.aws.aviv-internal.eu
bright-cobra-dev.aws.aviv-internal.eu
kind-camel-preview.aws.aviv-internal.eu
driving-camel-sdlc.aws.aviv-internal.eu
huge-kid-dev.aws.aviv-internal.eu
electric-manatee-sandbox.aws.aviv-internal.eu
kind-camel-live.aws.aviv-internal.eu
smart-turtle-preview.aws.aviv-internal.eu
thorough-caiman-dev.aws.aviv-internal.eu
enigmatic-parrot-preview.aws.aviv-internal.eu
busy-yeti-preview.aws.aviv-internal.eu
wary-vole-dev.aws.aviv-internal.eu
testing-lizard-live.aws.aviv-internal.eu
bright-cobra-sandbox.aws.aviv-internal.eu
yawning-yellowhammer-live.aws.aviv-internal.eu

Certificate

The complete raw certificate details for cosmic-bullfrog-live.aws.aviv-internal.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVjG2DI8uvMm2P2eKm9x
ONPwDrSCpZU6gHZLPwYEvP1SMksF5oKx5AH+O6nXVCOlXpFOq6kHGyYTpvnSVlhZ
Mdfw/8sSpywBhikGlic9x15fUwfp2pzMC330KR7MaA0+YG+vIv5//CVOIgWLiQWX
eSM9XR1NlY36ZKhNHGPhv88itEh2EAO7JnPG7CK7EMr/om2xhwzTna1csAFphjWj
rk/K7tk3Cue50fL1PKBhv8b70Tcg6h2FI6cmiDaSlTGYggGhHsqW9edjVgMv8iIx
LAuWcFvgrxM/BKZyrQVYxthMNDO9iUf+MsSo1kC1SDXPyWkUCSwzYLHV88f08cKv
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10499066398144884065600367451300092576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cosmic-bullfrog-live.aws.aviv-internal.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21378050979586746594079360106804754997330062692206526580898404108911150199799074430184320453301900789205243427249200374971036813294435044786093862798359773854878917046957408332662526144864747322184413054540585533460236232893105580388711343589199299711459515749983218428594274725544373221848262996952038740449868813915262670414565809135637172711158262854767084314498061962145255235301922573970781897962109587893018665863974863461170392735568015726975394638852813850297166038932419474756993629964428529510773773785788254760067955698389912132965119549998922673292977828695757373946569509355324122722450692744542549094339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3188442c7029b76a8597282fb39e30db620a2942
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmic-bullfrog-live.aws.aviv-internal.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmic-bullfrog-live.aws.aviv-internal.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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