england.330390635644.ifedev2.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 09:05:3a:ae:c5:f7:2c:20:35:04:77:29:eb:9c:b2:a3 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=england.330390635644.ifedev2.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:05:3a:ae:c5:f7:2c:20:35:04:77:29:eb:9c:b2:a3
Serial Number (int): 11990203673081566263647404215267799715
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2f:69:16:06:92:03:ed:18:f8:3f:07:76:12:83:7f:35:d4:54:68:ac
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): d5:08:76:01:8f:f8:0e:c6:e7:e5:f8:3c:e9:49:1b:00:f8:00:97:16
Fingerprint (sha256): 56:d9:c5:1a:ee:71:27:2a:72:3d:0f:de:0e:90:05:ef:6a:6c:82:22:c4:32:eb:88:d9:31:ce:51:e3:7e:3a:e6

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate england.330390635644.ifedev2.uk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for england.330390635644.ifedev2.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

england.330390635644.ifedev2.uk
eu-west-1-zero.330390635644.ifedev2.uk
eu-west-1-r15.330390635644.ifedev2.uk
www.330390635644.ifedev2.uk
www2.330390635644.ifedev2.uk

Other certificates including the domain name ifedev2.uk

(limited to 100 certificates)
release1.724201074455.ifedev2.uk
r2.608475709384.ifedev2.uk
eu-west-1-one.592193619157.ifedev2.uk
ap-south-1-zero.589118230989.ifedev2.uk
england.776096105514.ifedev2.uk
england.954411464988.ifedev2.uk
eu-west-1-r1.608475709384.ifedev2.uk
eu-west-1-r19.724201074455.ifedev2.uk
england.949879916230.ifedev2.uk
pilot.638416762435.ifedev2.uk
internal-nlb-eu-west-1-r0.868262840456.ifedev2.uk
ap-south-1-r2.595881934995.ifedev2.uk
eu-west-1-five.mdacm.ifedev2.uk
england.670849372762.ifedev2.uk
eu-west-1-one.374063982372.ifedev2.uk
england.670849372762.ifedev2.uk
internal-nlb-ap-south-1-r12.534960468492.ifedev2.uk
england.670849372762.ifedev2.uk
eu-west-1-one.592193619157.ifedev2.uk
pilot.245168190032.ifedev2.uk
release10.724201074455.ifedev2.uk
eu-west-1-one.374063982372.ifedev2.uk
england.776096105514.ifedev2.uk
eu-west-1-five.mdacm.ifedev2.uk
england.776096105514.ifedev2.uk
england.456044895942.ifedev2.uk
eu-west-1-one.045161736020.ifedev2.uk
r1.608475709384.ifedev2.uk
eu-west-1-one.592193619157.ifedev2.uk
eu-west-1-one.374063982372.ifedev2.uk
pilot.433365624057.ifedev2.uk
england.954411464988.ifedev2.uk
eu-west-1-r3.608475709384.ifedev2.uk
england.949879916230.ifedev2.uk
eu-west-1-r19.608053640638.ifedev2.uk
england.954411464988.ifedev2.uk
r0.608475709384.ifedev2.uk
internal-nlb-eu-west-1-r0.868262840456.ifedev2.uk
*.125752347118.ifedev2.uk
pilot.861182240437.ifedev2.uk
internal-nlb-ap-south-1-r12.534960468492.ifedev2.uk
internal-nlb-eu-west-1-r0.868262840456.ifedev2.uk
*.718425571334.ifedev2.uk
england.954411464988.ifedev2.uk
eu-west-1-one.592193619157.ifedev2.uk
england.456794256221.ifedev2.uk
eu-west-1-r19.724201074455.ifedev2.uk
eu-west-1-r0.861182240437.ifedev2.uk
england.949879916230.ifedev2.uk
internal-nlb-eu-west-1-r0.906948301199.ifedev2.uk
r3.608475709384.ifedev2.uk
internal-nlb-eu-west-2-r6.262095329802.ifedev2.uk
england.776096105514.ifedev2.uk
eu-west-1-one.374063982372.ifedev2.uk
internal-nlb-ap-south-1-r12.534960468492.ifedev2.uk
r0.608475709384.ifedev2.uk
ap-south-1-r2.595881934995.ifedev2.uk
eu-west-1-r2.608475709384.ifedev2.uk
release0.724201074455.ifedev2.uk
pilot.638416762435.ifedev2.uk
england.954411464988.ifedev2.uk
eu-west-1-one.482957427185.ifedev2.uk
release10.724201074455.ifedev2.uk
eu-west-1-five.mdacm.ifedev2.uk
internal-nlb-us-east-1-r19.556659950049.ifedev2.uk
internal-nlb-ap-south-1-r12.534960468492.ifedev2.uk
pilot.245168190032.ifedev2.uk
england.456044895942.ifedev2.uk
eu-west-1-r3.608475709384.ifedev2.uk
england.456794256221.ifedev2.uk
r3.608475709384.ifedev2.uk
eu-west-1-r19.608053640638.ifedev2.uk
england.670849372762.ifedev2.uk
eu-west-1-one.482957427185.ifedev2.uk
internal-nlb-eu-west-2-r7.262095329802.ifedev2.uk
internal-nlb-eu-west-2-r6.262095329802.ifedev2.uk
eu-west-1-r3.608475709384.ifedev2.uk
r0.608475709384.ifedev2.uk
eu-west-1-one.374063982372.ifedev2.uk
eu-west-1-one.482027031310.ifedev2.uk
eu-west-1-r1.608475709384.ifedev2.uk
ap-south-1-r2.595881934995.ifedev2.uk
ap-south-1-zero.589118230989.ifedev2.uk
pilot.456794256221.ifedev2.uk
england.330390635644.ifedev2.uk
release10.724201074455.ifedev2.uk
pilot.433365624057.ifedev2.uk
pilot.433365624057.ifedev2.uk
england.954411464988.ifedev2.uk
eu-west-1-one.482957427185.ifedev2.uk
release10.724201074455.ifedev2.uk
eu-west-1-one.045161736020.ifedev2.uk
internal-nlb-eu-west-2-r7.262095329802.ifedev2.uk
internal-nlb-ap-south-1-r12.534960468492.ifedev2.uk
internal-nlb-eu-west-2-r6.262095329802.ifedev2.uk
release1.724201074455.ifedev2.uk
pilot.456794256221.ifedev2.uk
r3.608475709384.ifedev2.uk
internal-nlb-eu-west-2-r7.262095329802.ifedev2.uk
ap-south-1-zero.589118230989.ifedev2.uk

Certificate

The complete raw certificate details for england.330390635644.ifedev2.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHZ3/VzIqtIVbd05xq5a
hevg6UY/zjJRfmisZOq4DX+rkMIOp4JEFEwwi9kKE0+faONoohZHK9CD3XXbwzSA
64z+62VstG+zkWzhyuZIVWcjVPe3TDR5UILN83LvS63Wpyz1MXBIvXbEtHL2lcjA
H7QJOeAkauNOdfM5XW2qsdU6TWJJja80K9+qcYFhjTvmiVNHDJ9LQOr0ePO7vPN2
8dcja4D7nEYYa5WvgNMNnshsZsSJOBWah+qlZmveiVHwcvsPtwCnCbvZobi5FsdI
QDwfqjrSpnYfpcH/fmaJwH19rFjzxoBBimzD+c4oCNuRbEcdTgHqCSqS7qxFxf8+
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11990203673081566263647404215267799715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'england.330390635644.ifedev2.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22276360772115608986480773966928052549525857234843614604659118369135524411312420222632503261555136531512475541385166706524188678751597582409464108741239053898330349408448032764395905439422543568287023627154566959694132765424375363664058454148542572512069833313066077143940905175079716635969856196060678494228404876959317366210735425752464739455430047905746596252964518123784287771232700893865240744973485046393592911981916181932716961731894275342596917785659255563063423978674215183471234622777709366536725480167504567385748713072099067799272053920125556110036985875934469179340006135480868330366367086154580171374251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6916069203ed18f83f077612837f35d45468ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (174 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'england.330390635644.ifedev2.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-west-1-zero.330390635644.ifedev2.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-west-1-r15.330390635644.ifedev2.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.330390635644.ifedev2.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.330390635644.ifedev2.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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