ors.ff827a6e18af768e5df96554c98737c0.gryps.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:1c:91:82:69:c3:b3:10:54:bd:3c:0a:aa:52:b9:47 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ors.ff827a6e18af768e5df96554c98737c0.gryps.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:1c:91:82:69:c3:b3:10:54:bd:3c:0a:aa:52:b9:47
Serial Number (int): 12111387555889386547229003389196220743
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 95:02:43:2b:bf:7d:26:b6:c6:32:7a:b7:cf:6b:a4:8d:a6:59:4d:dc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c0:c9:b9:72:e0:24:6a:5b:24:1f:34:46:f4:ed:3b:5f:bb:cc:62:89
Fingerprint (sha256): 4c:83:f5:e2:78:24:47:a4:ba:91:6d:4c:d2:0e:d9:72:d1:f2:20:71:1d:9f:d0:91:c7:1a:39:6a:01:71:34:58

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ors.ff827a6e18af768e5df96554c98737c0.gryps.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ors.ff827a6e18af768e5df96554c98737c0.gryps.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ors.ff827a6e18af768e5df96554c98737c0.gryps.io

Other certificates including the domain name gryps.io

(limited to 100 certificates)
cms.88de3acec3bc3304ba37ba8838a0dff4.gryps.io
gryps.io
deliver.76b6bedecb3acd5a59fbe22209211ffb.gryps.io
rms.c40864bb18134cdd6221aedaa610db6c.gryps.io
ams.8583b573259ca6496034a77888d9b355.gryps.io
deliver.c40864bb18134cdd6221aedaa610db6c.gryps.io
cms-ind.88de3acec3bc3304ba37ba8838a0dff4.gryps.io
ams.c40864bb18134cdd6221aedaa610db6c.gryps.io
dhruvnagarajan.com
public.nsjtt.com
deliver.ff827a6e18af768e5df96554c98737c0.gryps.io
rms.8583b573259ca6496034a77888d9b355.gryps.io
wss.ors.76b6bedecb3acd5a59fbe22209211ffb.gryps.io
cms-ind.c40864bb18134cdd6221aedaa610db6c.gryps.io
deliver.78796a5d4053edd898664fe5c0e71230.gryps.io
heathjhmoore.com
rms.8583b573259ca6496034a77888d9b355.gryps.io
deliver.88de3acec3bc3304ba37ba8838a0dff4.gryps.io
rms.c40864bb18134cdd6221aedaa610db6c.gryps.io
gryps.io
gryps.io
intelligence.f0a52a8e342b771e36e74f2e68aaebb6.gryps.io
aesthetische-werke.de
related-dev.gryps.io
deliver.ff827a6e18af768e5df96554c98737c0.gryps.io
gryps.io
cms-ind.2e2f0f6281591546e60c74290fd0d358.gryps.io
ors.8583b573259ca6496034a77888d9b355.gryps.io
ors.8583b573259ca6496034a77888d9b355.gryps.io
ors.ff827a6e18af768e5df96554c98737c0.gryps.io
deliver.67d59b03f3ec149cc62549738c9e2069.gryps.io
ors.442b2c5ac703eae430754b86de60047c.gryps.io
gryps.io
ams.c40864bb18134cdd6221aedaa610db6c.gryps.io
rms.e71a14a7f2006f89e5e1873e62c7d5b7.gryps.io
deliver.78796a5d4053edd898664fe5c0e71230.gryps.io
related-dev.gryps.io
ors.ff827a6e18af768e5df96554c98737c0.gryps.io
ors.8583b573259ca6496034a77888d9b355.gryps.io
ors.c40864bb18134cdd6221aedaa610db6c.gryps.io
deliver.133ee070d6c71dd549e7cd92e78a1ead.gryps.io
app.jtsboard.com
ors.8583b573259ca6496034a77888d9b355.gryps.io
ams.e71a14a7f2006f89e5e1873e62c7d5b7.gryps.io
www.gryps.io
ors.c40864bb18134cdd6221aedaa610db6c.gryps.io
cms.1c9a5317421c5cf24c8d8a4a925e5a90.gryps.io
cms-shared.8699d4078579bf1b4c45d17528332e90.gryps.io
www.smartlookmenswear.in
www.moodyboard.com
deliver.133ee070d6c71dd549e7cd92e78a1ead.gryps.io
related.gryps.io
tickets.beehive.asia
finafree.bengtiong.com
cms.5e650e1bd293b8743c22cbe935016a00.gryps.io
deliver.2e2f0f6281591546e60c74290fd0d358.gryps.io
wss.ors.442b2c5ac703eae430754b86de60047c.gryps.io
deliver.88de3acec3bc3304ba37ba8838a0dff4.gryps.io
gryps.io
deliver.c40864bb18134cdd6221aedaa610db6c.gryps.io
deliver.174c354d7c0240ac57b62977e9f02d23.gryps.io
ors.e71a14a7f2006f89e5e1873e62c7d5b7.gryps.io
deliver.e71a14a7f2006f89e5e1873e62c7d5b7.gryps.io
wss.ors.76b6bedecb3acd5a59fbe22209211ffb.gryps.io
wss.ors.e71a14a7f2006f89e5e1873e62c7d5b7.gryps.io
deliver.67d59b03f3ec149cc62549738c9e2069.gryps.io
rms.8583b573259ca6496034a77888d9b355.gryps.io
test.talkdata.ai
rms.8583b573259ca6496034a77888d9b355.gryps.io
cms-ind.ff827a6e18af768e5df96554c98737c0.gryps.io
www.gryps.io
ams.e71a14a7f2006f89e5e1873e62c7d5b7.gryps.io
wss.ors.ff827a6e18af768e5df96554c98737c0.gryps.io
gryps.io
cms.133ee070d6c71dd549e7cd92e78a1ead.gryps.io
rms.e71a14a7f2006f89e5e1873e62c7d5b7.gryps.io
deliver.174c354d7c0240ac57b62977e9f02d23.gryps.io
www.masteemoji.com
gryps.io
gryps.io
wss.ors.c40864bb18134cdd6221aedaa610db6c.gryps.io
deliver.2e2f0f6281591546e60c74290fd0d358.gryps.io
www.kelmessentials.co.ke
gryps.io

Certificate

The complete raw certificate details for ors.ff827a6e18af768e5df96554c98737c0.gryps.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkATSDHZNjHx6qztA5vGz
tOZZTHKnR2xNtQACbtTyOtOFKof1B5nUmYsvUYvm5VVIvzbpCyfcBOElwUzMV2rX
hKJ0D88Vz21HnL972fGT0Bt5sf72PNQS3v0bIdy+VVS2VM9oE+6k9Pax2cjzDQ3K
S/AvQ2m1Fw8YW7O3KAnZrLQHYVxbmLapk6odSbVtCsRighFKJpMkAtz1HG8pJEGU
SEeUXOeixuys91VRuVXz17pStz+nFc1wgIELYLHNPS+wJbf5egoKQStaHLJms3pv
MlzGXO1Cp6WTyhQXWsyoyLLx+szkZ45Y2ibIV4WoxkQBrOqXabjoe31k0rBftmZj
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12111387555889386547229003389196220743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ors.ff827a6e18af768e5df96554c98737c0.gryps.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18180692993567472757624139852747039413680021218300663364783797379035255279106900946276755835233955918537604885762418161374496957434217894976355944999940480626941991497858516564644402991662095236973262496274955951195452665500193968010681936765443817777537655473861272669336756575318232217236850732536550272124530691622661756641747131575583561133034113177370729717446136365472447015452144690661769611345436231611217750887719015139836414763697854205035423513836228249081892386067412260088788784343789260107991925311950596839254693252386728879450863906101633834185508149181790225278590572954673477778136117057902657037063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9502432bbf7d26b6c6327ab7cf6ba48da6594ddc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ors.ff827a6e18af768e5df96554c98737c0.gryps.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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