*.ibep-prod.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:76:6c:9d:c1:d4:c3:5b:c5:05:8d:2b:04:84:48:55 was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.ibep-prod.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:76:6c:9d:c1:d4:c3:5b:c5:05:8d:2b:04:84:48:55
Serial Number (int): 13907173986202799232704136212751075413
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:d2:fe:0c:e7:53:23:57:14:f2:c7:07:c0:92:2d:77:88:d2:23:00
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 44:79:07:a0:fa:be:e6:a1:27:0b:c7:fe:2d:76:e0:6d:be:60:fa:81
Fingerprint (sha256): 55:80:0d:21:ad:d1:19:0f:0d:9a:d3:09:8c:4f:24:62:ea:a7:0a:d2:e1:a0:b6:1f:a0:39:eb:10:4d:09:cd:b5

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.ibep-prod.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibep-prod.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibep-prod.com
www.raamattu.fi
raamattu.fi
my-bible.ca
bibelwissenschaft.de
www.my-bible.ca
debijbel.nl
www.academic-bible.com
surinamebiblesoc.org
www.biblia.sba.org.ar
biblia.sba.org.ar
www.bibelwissenschaft.de
academic-bible.com
www.biblesa.co.za
www.debijbel.nl
sbb.org.br
biblia.pt
bibeln.se
www.biblia.sbp.org.pe
www.sbb.org.br
biblesa.co.za
www.surinamebiblesoc.org
www.bibeln.se
biblia.sbp.org.pe
biblebooster.com
www.manobiblija.lt
www.biblebooster.com
manobiblija.lt
www.biblia.pt

Other certificates including the domain name ibep-prod.com

(limited to 100 certificates)
pmavek.com
gilmoreassoc.com
gungnir.info
bkvaluemeal.net
*.ibep-prod.com
lime.consteelsoftware.com
suriname-auth.ibep-prod.com
links.nightly.investmighty.com
www.bodymap.ai
thestartupreneur.co
sophie.hxmspace.io
www.loginn.co.in
app.pacelist.co.uk
holders-mint.launchlabs.app
www.dheehospitals.com
www.reasonableprice.ca
sandbox-kissht.poshvine.com
*.ibep-prod.com
toutigame.com
hosting.oursongsproject.org
www.tenmogroup.com
www.mettle-studio.co.uk
sandbox-kissht.poshvine.com
cleberfonseca.com.br
proyectofinal.com.ar
*.ibep-prod.com
open.hublz.art
www.elfs.dev
www.manuelrdz.com
www.artpines.shop
svd.induwara.me
medvetska.com
www.daviddiaz.design
tessonilo.gardaanimalia.com
gb.dealescale.com
www.jekot.net
hongleong.dev
www.ihnbc.com
staff.quizness.dev
www.sechow.com
sarov.name
glaucolima.com
app-dev.cacheready.com
www.theloganandcodyshow.com
carbatterydxb.xyz
www.kolorsearch.net
www.mottette.jp
adibagasp.my.id
www.bodymap.ai
parkingtw.com
admin.airform.app
tomcoomer.app

Certificate

The complete raw certificate details for *.ibep-prod.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPkdt2x6mOj6zWdgF670
GPz3pKlkFZONJGhVXjUXOkykFEBuwg18yU0YY/AN7EAtCBbJoD05VYjIhO/vmBec
y0OxCDtJrVl7lDqFeISXubJgvt6slWhI2BSTul5wdxC4i/o+DqnVrYf63t9DTTwc
f7Yy5vzYU6KIqN7OGYwUPmcZtj3kyirpXEl7HswSNGbApj58a3QDTx8wvE12J1Bz
yAXfs5fnfy5CZCKD5Ht3pJiXd/jmWxF9ILds3/iwHa84MiNSRqnW9St6Vk6/mQ4U
mZDz721nG9KPyCd/6wZXHXrxHY21VAnsaNTymy90D0qtzlqh9LKZEgqjQ0HEUBVq
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13907173986202799232704136212751075413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibep-prod.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25875457930608621265707960697509662402613155666086869691841489549545842522541387991668025897573408621494995433253562552968543568722009945374239717525312737288145853641640365163637857984076197068308792653052507051707207706069971512894303252620092893127936203077128487950979200995167195777828961578186666733579750135726945713930373371068027411770128745862886758845695849786682422051936308652407954826866391925918227400329997859711894229028777516877483631337775092888846083255863269713747363447400351484897086398656263557941788271720532771238944921704845237477928433135085879287756331273265927541092021771503515064429307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7d2fe0ce753235714f2c707c0922d7788d22300
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (525 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibep-prod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raamattu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raamattu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-bible.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibelwissenschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-bible.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debijbel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academic-bible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surinamebiblesoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biblia.sba.org.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblia.sba.org.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibelwissenschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academic-bible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biblesa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.debijbel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbb.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibeln.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biblia.sbp.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbb.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblesa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surinamebiblesoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibeln.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblia.sbp.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblebooster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manobiblija.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biblebooster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manobiblija.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biblia.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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