sv.doheny.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:74:a7:93:4a:f1:ff:b5:3a:a8:9f:c4:80:31:56:12 was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sv.doheny.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:74:a7:93:4a:f1:ff:b5:3a:a8:9f:c4:80:31:56:12
Serial Number (int): 8581073242437684063998079112093718034
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5e:0a:97:c4:19:84:d6:63:39:8a:df:de:76:f5:cb:b6:c2:b1:5f:f4
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d3:fd:ff:51:c4:87:d4:c6:3c:79:9b:27:af:9e:83:09:8a:ff:6d:1b
Fingerprint (sha256): 53:19:c0:95:d6:8d:8d:da:f2:3c:dc:9b:c2:d7:bf:ca:d4:70:e2:64:07:84:c8:4e:06:92:79:19:8b:1f:0c:eb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate sv.doheny.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sv.doheny.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sv.doheny.com
sv.valleyvet.com
sv.kansascitysteaks.com
sv.baggallini.com
sv.valuecityfurniture.com
sv.littlewordsproject.com
sv.spoonflower.com
sv.dxl.com
sv.bjs.com
sv.mrsfields.com
sv.karenkane.com
sv.bountyhunterwine.com

Other certificates including the domain name doheny.com

(limited to 100 certificates)
www.doheny.com
mail.doheny.com
em.doheny.com
enews.doheny.com
sni.cloudflaressl.com
sv.doheny.com
staging3.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
www.doheny.com
mail.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sv.doheny.com
ssl440158.cloudflaressl.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
mail.doheny.com
sv.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl440160.cloudflaressl.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sni.cloudflaressl.com
ssl440159.cloudflaressl.com
staging2.doheny.com
mail.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
www.doheny.com
enews.doheny.com
staging3.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
mail.doheny.com
enews.doheny.com
www.doheny.com
sv.doheny.com
em.doheny.com
sni.cloudflaressl.com
www.doheny.com
www.doheny.com
sv.doheny.com
sv.doheny.com
enews.doheny.com
sv.doheny.com
sv.doheny.com
staging2.doheny.com
enews.doheny.com
sv.doheny.com
enews.doheny.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
enews.doheny.com
em.doheny.com
ssl440160.cloudflaressl.com
doheny.com
sni.cloudflaressl.com
sv.doheny.com
ssl440160.cloudflaressl.com
sv.doheny.com
ssl440160.cloudflaressl.com
www.doheny.com
sv.doheny.com
sv.doheny.com
staging.doheny.com
ssl440159.cloudflaressl.com
sv.doheny.com
sv.doheny.com
staging.doheny.com
ssl440158.cloudflaressl.com
enews.doheny.com
sv.doheny.com
www.doheny.com
sv.doheny.com
sv.doheny.com
em.doheny.com
sv.doheny.com
sv.doheny.com
ssl440160.cloudflaressl.com
sv.doheny.com

Certificate

The complete raw certificate details for sv.doheny.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKCxCCe/lgdehAJrcTY7
X9S7h/PZ7jCHpZ8AegMv51dPceRyvV5cpRUUJ9kV1laa+hrY0vhKyc/l6AGONoBb
81Wm+Vd5f0sQx8UO5+tqNJ7u2prscrhl6cDL6p8CtMgsuNaLr6a1D1rdVIiEWzIj
waF9URDlkHh+CQ1uJPLsCiRVLUDzFXeP3+WVI2DO8LUWfFBufffylxRjyw8EVyzn
+UNtF+kwZ+RL41OFK5NwhIs/erdRnHAFOPSpdrVBQOsUYVa/R2H+22gRt6gTAbQx
ilHGwb9aeG5gfwJ/ywm8EqH8Pl+GZDIsZpq6Ncx4TXybtLUIguqbO9dv+S7W3u/k
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8581073242437684063998079112093718034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sv.doheny.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18762509082072941580021870389222540735197930921782965337759976578527362507625418837302030957026232238448362586016140516515323975996556804956090062552996311042616783392192674182772404260003041988958254157746991199754529843623720167769674679251851212266089088172003910515215038363089498794383313442044312949782646237010181776370921426602073699983169596541859487516542070366739689445536126519635569666590774864112693544871478997213925873029332934872736173879926861449802253161589635277438517814096357865368547503476385476591450398189395222584465085579255842948433083690725197757284534662823568244293319809639206307751109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e0a97c41984d663398adfde76f5cbb6c2b15ff4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.doheny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.valleyvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.kansascitysteaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.baggallini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.valuecityfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.littlewordsproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.spoonflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.bjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.mrsfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.karenkane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.bountyhunterwine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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