kompas.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:41:cc:92:2c:19:3c:51:33:c8:e4:02:2e:a5:10:f3 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kompas.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:41:cc:92:2c:19:3c:51:33:c8:e4:02:2e:a5:10:f3
Serial Number (int): 6987788467248063601269565351224742131
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: af:1e:94:69:aa:24:f9:eb:f5:bd:5c:59:63:81:7b:2f:b5:40:e8:ce
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0d:3d:f0:91:39:8e:4b:33:36:96:73:9c:be:5f:19:80:05:d5:e5:7b
Fingerprint (sha256): 54:ce:84:64:ba:60:11:df:fc:85:4c:34:78:31:e0:5c:2d:06:23:b7:f9:a4:96:37:b6:08:ef:0d:81:f6:0c:1f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate kompas.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kompas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kompas.com
*.kompas.com

Other certificates including the domain name kompas.com

(limited to 100 certificates)
api.print.kompas.com
*.kompas.com
mail2.kompas.com
beta286.print.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
webdev.kmn.kompas.com
owa.kompas.com
*.kompas.com
kompas.com
owa.kompas.com
apps.kmn.kompas.com
login.kompas.com
api.print.kompas.com
*.kgmedia.id
fudezz.kompas.com
mail2.kompas.com
beta286.print.kompas.com
apps.kompas.com
fudezz.kompas.com
api.print.kompas.com
kompas.com
apps.kmn.kompas.com
asset.kompas.com
*.kgmedia.id
api.print.kompas.com
fudezz.kompas.com
kompas.com
kompas.com
arc.print.kompas.com
bike.kompas.com
asset.kompas.com
owa.kompas.com
beta286.print.kompas.com
*.staging.kompas.com
fudezz.kompas.com
survey.print.kompas.com
asset.kompas.com
*.kompas.com
login.kompas.com
*.kgmedia.id
kompas.com
apps.kmn.kompas.com
*.kompas.com
jixieamptest.kompas.com
kompas.com
*.kompas.com
mail2.kompas.com
mail2.kompas.com
kompas.com
owa.kompas.com
kompas.com
apps.kmn.kompas.com
kompas.com
ads2.kompas.com
*.kompas.com
*.kgmedia.id
jixieamp.kompas.com
*.kompas.com
owa.kompas.com
bike.kompas.com
print1.kompas.com
api.print.kompas.com
*.kgmedia.id
app.print.kompas.com
sip.kompas.com
bike.kompas.com
*.staging.kompas.com
bike.kompas.com
*.kompas.com
*.kompas.com
bike.kompas.com
kompas.com
kompas.com
login.kompas.com
bike.kompas.com
bike.kompas.com
*.kgmedia.id
*.kompas.com
login.kompas.com
kompas.com
api.print.kompas.com
kompas.com
mail2.kompas.com
*.kgmedia.id
*.kompas.com
*.kompas.com
kompas.com
*.kgmedia.id
kompas.com
kompas.com
kompas.com
*.kompas.com

Certificate

The complete raw certificate details for kompas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmib6w0t/Oj3hoi7Pm3Ci
jTUbvoPIO9atM1CBJvvvZ1XQRjiQR5eyNG+PYmO7wzu9zL04VJnAl/wXVkCCqj9/
LC78TzHZbobfrMfP+zS5gJhvFeJNVlh9YEvXS8pJGIzNC3dculB7M9aU5f5P/3Vc
ErFsAUWRYDSDk1DG71KnBG9/OSSim2fZPG7Q4zZxWxjmYyVV93w8tSMgqZSa6hmB
6tFs3UqnjWHOlmWqHOVRXS8AUEN6V7j5e2krZgUwU9J6BxC/zJleUiDmJ8mAtenJ
riMtCBmVpULBArMT2Hk77lqIxKuk0xrs0Ga1/22ZkA0kBiYiq03bLj5VENkKhIU0
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6987788467248063601269565351224742131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kompas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19459920493558134917391307998964418228275916365226104885063595894340748381192490920553641554014103965879051373786894622908610237430681598982483497592482078015991484174777321616687457580529713630436918451418591641339993678181811707861223812502136232381099065923106184623774292327726153945255745778525628145815181176680248132791651803980763119100523029213760622266414002430027049434280476490887134306379883551322175463896335708250532892189461357484388321853701535815555264655628270331217538188518984382943204783563601073810711455020423754512708300111782144523342255970363243139905187507807103689178698539809777356453117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af1e9469aa24f9ebf5bd5c5963817b2fb540e8ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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