dukc.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:45:8b:62:39:64:e4:bf:00:d0:61:bf:ad:54:b0:d5 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dukc.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:45:8b:62:39:64:e4:bf:00:d0:61:bf:ad:54:b0:d5
Serial Number (int): 20299515457070093544742721449603936469
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ce:f4:d4:7d:e1:12:2d:8b:41:67:f0:05:81:ce:c3:25:6e:b8:20:90
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 66:61:4a:95:70:85:36:45:08:e2:7a:0a:c3:47:2d:54:16:ac:8c:36
Fingerprint (sha256): 67:32:9f:11:0e:15:2a:f8:e9:0d:7e:24:2d:ee:8e:3c:26:97:bc:06:90:36:e8:db:8d:a9:b4:04:e5:f7:ff:24

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate dukc.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dukc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dukc.com
portkembla.dukc.com
www.dukc.com
phdr.dukc.com
saqr.dukc.com
gladstone.dukc.com
geelong.dukc.com
jorflasfar.dukc.com
itaguai.dukc.com
melbourne.dukc.com

Other certificates including the domain name dukc.com

(limited to 100 certificates)
savannah.dukc.com
*.dukc.com
dukc.net
dukc.net
porthedlandsimulator.dukc.com
melbourne.ais.dukc.com
*.dukc.com
dukc.com
dukc.net
api.production.dukc.net
melbourne.dukc.com
dukc.net
dukc.net
dukc.net
*.dukc.com
demo.dukc.com
uat.dukc.com
fremantle.dukc.com
dukc.net
dukc.com
dukc.net
dukc.net
dukc.com
amsa.dukc.com
melbourne.ais.dukc.com
dukc.net
dukc.com
dukc.com
dukc.net
dukc.net
melbourne.dukc.com
fremantle.dukc.com
dukc.net
*.dukc.com
*.dukc.com
savannah.dukc.com
demo.dukc.com
dukc.net
demo.dukc.com
*.dukc.com
demo.dukc.com
amsa.dukc.com
api.production.dukc.net
uat.dukc.com
porthedlandsimulator.dukc.com
dukc.net
melbourne.dukc.com

Certificate

The complete raw certificate details for dukc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14eUm8NPNB2qK4m2pzha
7HX3UTpa/u2crcTvYiozdJ9eobIxQqeOTjVzdAAdBhLTH/Phlnt2utJNQ1v+8pIo
Bggpgq17Oji7/u6/LSVkg19xXf/NlKAWkfYKIeV4ebkUTc2kJPIEt+sN3N4RXkhw
y04qXiA+uMvKuft6Az+gzhBhQKlv7ILun1hq2G6Fw/64QyDSvutncINRC+mjsuPR
eEmev1FTl0mgz3vQDt0jsm5Zva2Yh8gLPSGXP9waGL/S1US3cv/O7W3SFqM+mRrQ
zw/suIzfevukxCvxHlhJCMxFUPFDXyP4Eo3h0Y5A61QBNpZ2fxOsC1rZa6FAQUrc
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20299515457070093544742721449603936469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dukc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27208092804920684632064339686089517386396425104582774691166421385109589876483923663231501998939782831503360287870078979928001789198102525716950435470090149298886768256002783516216953552741471725585388268987023642025901289077849892480296741928747493355586687814161225223796599522416672967424404889689154744227165721789274807913212825135846038999506583081622590766170102944641934313909583351146801737235926420025334609049758249186077954849440052551850855060932045692720627440716881009049613496765695321502075282364163343566991976699885044948938857346839536744897951920976196467912254279789849460724601646508622545083453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cef4d47de1122d8b4167f00581cec3256eb82090
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portkembla.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phdr.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saqr.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstone.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geelong.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jorflasfar.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itaguai.dukc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbourne.dukc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049de1bc08410b2237a7f1d86349d3c503729f4d19ad1055a5021a458a12e72ea6b7a1bb72fc38f27d0f01952c3d9e0a2c721f55c468aaa2574dfc0ba5e7d7ef42ba067434d8ed993e81733e38f0249ebc72eb7dcf632327ebadff2456d6c507f9822c2809379dcaf7e27d2504b70afcc1836a375131f3bb0507c9b86f6294be698c1506bd22879c9291625e4488a1b13b0d0eab6d1330b9538cb3fb0ad431a233315ebbe4e20ed5b970b75d7864bfc27ad1239e798aeb688cc6a31795f6b8624d9276d27a5878a759a506aaab484214ba233edc00198796e1eed28050a40ae824d1b13afb74e1f88324886f7d20668ba2ad6c43052d7c8defb9396a996d2ca8b