*.monolithicpower.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:31:c3:bb:19:93:25:0d:ba:51:55:1c:05:14:c4:35 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.monolithicpower.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:31:c3:bb:19:93:25:0d:ba:51:55:1c:05:14:c4:35
Serial Number (int): 1587620435307236991675722972030878773
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ef:f9:61:fb:e9:2a:0a:a5:f4:22:35:e5:0d:45:83:9b:6c:77:c9:9c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 31:1a:8d:1b:c2:a4:0e:c6:1d:6c:a2:0e:ae:ce:d8:0b:49:1c:94:2c
Fingerprint (sha256): 63:f4:44:ff:16:ed:6a:4d:51:2b:ea:68:2a:7b:20:b4:25:47:2a:03:4f:9c:25:1d:54:b1:46:57:c4:ab:b1:4f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.monolithicpower.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.monolithicpower.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.monolithicpower.com
monolithicpower.com
*.monolithicpower.cn
monolithicpower.cn

Other certificates including the domain name monolithicpower.com

(limited to 100 certificates)
info.monolithicpower.com
*.monolithicpower.com
servicedesk.6dca.flcourts.gov
helpdesk.jicjo.com
it-support.perimeter81.com
sdp.hdchile.cl
it.servicedesk.ucity.co.th
helpdesk.jicjo.com
webmail.monolithicpower.com
support.bpmcpa.com
sdp.rikkyo.ac.jp
311help.seminolecountyfl.gov
cnmail.monolithicpower.com
*.monolithicpower.com
*.monolithicpower.com
webmail.monolithicpower.com
sdp.rikkyo.ac.jp
ajghelpdesk.ajgaustralia.com.au
info.monolithicpower.com
www.monolithicpower.com
ajghelpdesk.ajgaustralia.com.au
webmail.monolithicpower.com
311help.seminolecountyfl.gov
311help.seminolecountyfl.gov
*.monolithicpower.com
helpdesk.waterfordbankna.com
support.bpmcpa.com
servicedesk.6dca.flcourts.gov
311help.seminolecountyfl.gov
cnmail.monolithicpower.com
helpdesk.jicjo.com
webmail.monolithicpower.com
helpdesk.johnhcarter.com
it.servicedesk.ucity.co.th
helpdesk.jicjo.com
servicedesk.monolithicpower.com
helpdesk.jicjo.com
*.monolithicpower.com
helpdesk.jicjo.com
info.monolithicpower.com
magento-dev01.monolithicpower.com
311help.seminolecountyfl.gov
mps-mail1.monolithicpower.com
adfs.monolithicpower.com
helpdesk.jicjo.com
cnmail.monolithicpower.com
webmail.monolithicpower.com
helpdesk.jicjo.com
info.monolithicpower.com
311help.seminolecountyfl.gov
servicedesk.1solar.com
helpdesk.waterfordbankna.com
helpdesk.jicjo.com
monolithicpower.com
ajghelpdesk.ajgaustralia.com.au
311help.seminolecountyfl.gov
helpdesk.jicjo.com
magento-qa02.monolithicpower.com
support.groupeinovo.ca
helpdesk.jicjo.com
helpdesk.jicjo.com
helpdesk.rasafloors.com
monolithicpower.com
sdp.hdchile.cl
*.monolithicpower.com
help.enmu-roswell.edu
magento-qa02.monolithicpower.com
*.monolithicpower.com
info.monolithicpower.com
311help.seminolecountyfl.gov
it.servicedesk.ucity.co.th
sdp.rikkyo.ac.jp
servicedesk.1solar.com
helpdesk.jicjo.com
info2.monolithicpower.com
311help.seminolecountyfl.gov
311help.seminolecountyfl.gov
monolithicpower.com
magento-qa02.monolithicpower.com
webmail.monolithicpower.com
helpdesk.rasafloors.com
helpdesk.jicjo.com
311help.seminolecountyfl.gov
info.monolithicpower.com
magento-qa02.monolithicpower.com
helpdesk.jicjo.com
helpdesk.jicjo.com
cnmail.monolithicpower.com
sdp.hdchile.cl
mesaayuda.cesce.pe
magento-qa02.monolithicpower.com
311help.seminolecountyfl.gov
webmail.monolithicpower.com
*.monolithicpower.com
servicedesk.monolithicpower.com
mesaayuda.cesce.pe
asc.monolithicpower.com
support.bpmcpa.com
*.monolithicpower.com
webmail.monolithicpower.com

Certificate

The complete raw certificate details for *.monolithicpower.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNGHp/CLJLXp52GhpNT8
O6cFd18faeJYIgF38VqymhxBZ1zHFBNSDug0m1IHLiIhjZmL+AIkHmTFOApxD2u+
rap9QGamAJZroIkJE93l3IrMlokIabjXw0Eda6Ef8ATDdODEOMSQadepzuaoRkJ1
k0AeX/EwIWsqMx1JI61qCkvrYV+Dkcy5fEhW+llzEnfvkKUPtz3IUrKBC8AXm4sd
gcUHjcnOyupx8gCgNVpklyBKBrEmG24Eim8pn8Bs8dX/cZHwkTWAWv12iiA8idSU
S4j3f7GP0K2CDE6LaXdKxZ6WUIwn0ECzUzRFzH75tC35XDuFsRChXCX3buDqIkrb
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1587620435307236991675722972030878773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.monolithicpower.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19796498622407005469104790803824563179625159136032211897786976940332977541514101070124373325433231773119620779224767466830666132861344548776302571533730043115364944149683524646078352187077172508850607712093874988464821085987829108326468399707316466881979752740011132223956707454575319326619000643853210904911667255007692119936612392910917106137056703992763037677758079264047203568937534681138221363466909598939345722186318114067311596731211622755640616171508427943090952521236091679480970944293456859016598990094861144722821788075534112379855129236756977858412028838556554883458105905434919669507520394031368457870247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eff961fbe92a0aa5f42235e50d45839b6c77c99c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monolithicpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monolithicpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monolithicpower.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monolithicpower.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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