sliit.lk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:ce:34:ff:8a:74:2b:e0:95:46:db:85:ea:2c:01:0d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sliit.lk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ce:34:ff:8a:74:2b:e0:95:46:db:85:ea:2c:01:0d
Serial Number (int): 17021424033607369945597977080154030349
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3a:c3:51:09:56:d7:ff:18:0c:db:b8:71:24:b1:62:b5:6b:f5:16:84
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 9a:9f:3b:d3:ae:31:6f:18:0e:da:a8:6d:c6:b5:6a:cb:e8:bf:fa:85
Fingerprint (sha256): 60:63:ac:04:0b:f6:0c:a4:47:f7:d0:59:43:01:24:0c:77:79:c5:78:44:09:4e:64:39:2f:ce:b4:1b:f6:a9:91

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate sliit.lk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sliit.lk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sliit.lk
*.sliit.lk

Other certificates including the domain name sliit.lk

(limited to 100 certificates)
*.sliit.lk
help.vitalcareinc.com
servicedesk.raibal.ae
helpdesk.lpga.com
sliit.lk
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
beta.sliit.lk
itsupport.pando.ai
vpn.sliit.lk
vpn.sliit.lk
helpdesk.rebuildmanufacturing.com
helpdesk.clicktechretail.com
help.vitalcareinc.com
ithelp.nmcc.edu
servicedesk.teijinautomotive.com
servicedesk.oneontacsd.org
support.caseshield.com
portal.dakotalandfcu.com
sicash.sliit.lk
helpdesk.lpga.com
itsupport.waycool.in
lecturecapture.sliit.lk
helpdesk.admix.com
lecturecapture.sliit.lk
vpn.sliit.lk
mesa4.aylsoluciones.pw
vpn.sliit.lk
servicedesk.raibal.ae
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
helpdesk.coopelev.com
mesa4.aylsoluciones.pw
servicedesk.stevinrock.ae
vpn.sliit.lk
lecitsupport.maf.ae
portal.dakotalandfcu.com
solicitudes.hospitalcima.net
servicedesk.raibal.ae
helpdesk.atlanticitservices.com
lms.sliit.lk
mesa4.aylsoluciones.pw
destek.coreway.com.tr
servicedesk.zenantech.com
helpdesk.unisyncgroup.com
ithelp.nmcc.edu
servicedesk.stevinrock.ae
portal.dakotalandfcu.com
itsupport.pando.ai
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
support.alsaqergroup.com
vpn.sliit.lk
servicedesk.teijinautomotive.com
support.caseshield.com
helpdesk.jhs.com
voc.utc-egy.net
servicedesk.zenantech.com
helpdesk.region10pihp.org
helpdesk.lpga.com
support2.volkert.com
mesa4.aylsoluciones.pw
capture.sliit.lk
aptest.sliit.lk
supportme.sliit.lk
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
ymba.sliit.lk
mesa4.aylsoluciones.pw
lms.sliit.lk
lecitsupport.maf.ae
onlineexams.sliit.lk
helpdesk.gwctx.org
sliit.lk
servicedesk.zenantech.com
itsupport.qholding.com
lecturecapture.sliit.lk
support2.volkert.com
scorpiontravels.sdpapac.org
destek.coreway.com.tr
*.sliit.lk
mesa4.aylsoluciones.pw
exchange.sliit.lk
helpdesk.intrepidmuseum.org
sliit.lk
servicedesk.metro-inet.us
support.access2arabia.com
mesa4.aylsoluciones.pw
ithelp.nmcc.edu
mesa4.aylsoluciones.pw
help.vitalcareinc.com
helpdesk.signorellicompany.com
mesa4.aylsoluciones.pw
boardpac.sliit.lk
encompasshelp.coastal-bev.com
support2.volkert.com
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
helpdesk.admix.com
helpdesk.jhs.com

Certificate

The complete raw certificate details for sliit.lk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwliCxqP5I1FR6CroZYOr
rETxgWWpPLX+jNorQmXvfzPHSxYmS5pg1X5UHW1pf5h8XwvGJDfLsVtj5dhfrBBx
P92tHdqBLLRUi5n+0eyVyfB5QVQyzcdf5CKgP2xOS4/yMJnvas2hqadEcRgHzJby
HP3o9OLNv6003Hwb9V2BTZGqbYkWtfiB/8yMeCPCAlx2lhW5mlqbSu0m7pniWP6m
YdxPt0uAshwTsqA55BrQu5fg/jDyKaJ3SXbGZr2JH6cGZYsdFHgEcwHESNq4IOVv
57fZmsGfB5ddA63O6IsOHOSwy5K7C68+UqlAVE4bvtZ9pRN5hwmNLs1qEofN/7AL
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17021424033607369945597977080154030349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sliit.lk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24533877487072786693883228429945832771791545258894862001375824050962190177677461153161417525443693426394209659146110214833831381372663172239477920252582426420495488047620173072257405498821986831093063289115383029439564350996047027152243509975339313723521220025048310739348261314644733786796654930560819725696378402642832307949215433251267939639093492293599303066368810762908406648417321599439620304429513462121070734632283680764286669830035350556494579564024321490872314125402388173679152136661388438662080400415670859428343431684433633465589182131561884082627108020836533203053238096258636099653225739781955547827021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ac3510956d7ff180cdbb87124b162b56bf51684
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sliit.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sliit.lk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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