app.production.triniti-plat.triniti.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:0f:16:87:22:2c:84:09:72:52:de:22:26:92:d0:6e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.production.triniti-plat.triniti.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:0f:16:87:22:2c:84:09:72:52:de:22:26:92:d0:6e
Serial Number (int): 9382937342761959883812611218417569902
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 30:9c:15:2e:ad:01:ba:8c:93:bb:26:fe:b8:61:0e:bb:d8:5c:1e:33
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c5:a1:7e:61:7e:3a:fc:1b:84:b4:95:4d:ac:59:0b:cd:11:ca:e8:f5
Fingerprint (sha256): 4f:1b:47:f8:04:77:7d:b7:0a:34:ba:e7:43:5f:e6:3c:ad:f4:33:a4:3a:73:85:9a:b7:43:e0:66:e8:40:f6:5b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate app.production.triniti-plat.triniti.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.production.triniti-plat.triniti.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.production.triniti-plat.triniti.net
app.triniti.net

Other certificates including the domain name triniti.net

(limited to 100 certificates)
support.exactus.net
events.empiricalevents.com
meetup.daoconsensus.com
event.cabinetgofar.com
events.themapsinstitute.com
events.hyggelink.com
myhrms.doragonramen.com
support.usairtours.co.uk
eventos.121group.company
events.themapsinstitute.com
eventos.121group.company
events.emtmeta.com
triniti.net
support.communicationgenetics.com
eventos.121group.company
eventos.121group.company
multris.akleiman.dev
triniti.net
desk.gocloudforce.com
www.redemptioninsidethewalls.com
triniti.net
app.production.triniti-plat.triniti.net
eventos.121group.company
support.3ilogic.com
triniti.net
events.pathright.io
triniti.net
triniti.net
training.sentinelshadow.com
events.triniti.net
triniti.net
events.pathright.io
events.ovrflw.digital
support.fieldsheer.com
events.pathright.io
desksupport.antivirus365.net
evenements.charlesgroleau.com
rh.globaltelnetworks.net
events.themapsinstitute.com
triniti.net
events.distillationconclave.com
eventos.121group.company
events.djss.com.au
eventos.121group.company
sni.cloudflaressl.com
team.bagosphere.com
www.admin.travel2bali.dk
web-tool-pack.com
eventos.121group.company
hrms.hudini.io
events.pathright.io
events.pathright.io
events.pathright.io
events.themapsinstitute.com
events.empiricalevents.com
events.stricklybizzness.com
hrm.aeicor.com
sni.cloudflaressl.com
sni.cloudflaressl.com
triniti.net
sni.cloudflaressl.com
people.excers.com
support.ezfive.com
people.triniti.net
eventos.121group.company
events.pathright.io
www.carsonsyberg.dev
sdklog.geniee.co.jp
events.incba.org
triniti.net
people.transdelivery.co
hrm.tradeloginternational.com
garagecoders.dev
www.deonmoreno.com.br
triniti.net
myhr.stopware.com
events.ovrflw.digital
eventos.121group.company
help.thgkc.com
hrms.aib.af
triniti.net
triniti.net
www.codelab.fun
triniti.net
eventos.121group.company
triniti.net
helpdesk.rjwgroup.com
events.gofrugal.com
platform.triniti.net
intranet.konexa.cl
events.emtmeta.com
meetup.daoconsensus.com
support.bowee.fr
eventos.121group.company

Certificate

The complete raw certificate details for app.production.triniti-plat.triniti.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAWydf598QXnF90ojGl7
bJK8drV7mCBEHOZOEeiik/Nh/RCkoKmas9nAdVBEAGMf4GVr0s5A+n8j8cLAAWuo
6YFfrRPpifPj9kNbUxhrMiH0RWJzZnDbw/spBZserWBffQODyVp3vSilioPJs3oV
i4ovgSSmwqPfqg+3zXyXnZu0YW4u605bsXwUVcbuf+LNuvCIq0egOFbxeATLPxYj
sgMJH4E5USD/eFI9RGj3YS3qsLBbAdjwND4fFNfUqgsIBxQQN6PBRju7zJwzgo74
3laA7Z8WOdYSHCFrF49zmjTM6pozcwP2SudCUiXQBH1kw8RTkxpM6whCwLLhiWOG
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9382937342761959883812611218417569902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.production.triniti-plat.triniti.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23735610684719246118911195593204498330316756019461510457089718487897992593605243390151012104603784670150342872990118288591307452286761794151312697531653762287799461557363059073177152462368731050085275042455227300151914968902524963257325813468451280397994087750816673312208567532377391474689486336344965830858589183137977290726971250184112726079905104098815480331957741004418347457012409906295722873756902008570170809936060916823831054781767675499163930605674149794489815441383277149848368502843902352942757130964032368640308510249520622356820228555121193872106166745795134005856174759815470210046913431909692877276811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							309c152ead01ba8c93bb26feb8610ebbd85c1e33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.production.triniti-plat.triniti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.triniti.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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