*.gptw.care

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:4f:49:67:7e:9f:ee:53:82:3d:78:4e:62:7f:5e:40 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.gptw.care

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:4f:49:67:7e:9f:ee:53:82:3d:78:4e:62:7f:5e:40
Serial Number (int): 5728592250554176321932533003620146752
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 02:bb:38:e7:b4:9a:f7:fb:54:a5:57:bc:12:92:44:55:b7:a4:bb:9a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 57:98:02:9f:63:cd:35:4d:4a:98:bf:94:f8:0e:c1:b2:31:67:0f:ac
Fingerprint (sha256): 68:42:c1:47:c0:96:97:dc:49:59:03:f2:4f:5f:bd:c8:33:56:b3:60:08:48:fa:60:17:4b:1e:56:e6:c0:07:60

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.gptw.care

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gptw.care

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gptw.care
*.private.oursurvey.care
gptw.care
*.private.gptw.care
oursurvey.care
*.oursurvey.care

Other certificates including the domain name gptw.care

(limited to 100 certificates)
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
app.gptw.care
app.gptw.care
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
www.s3tm.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
gptw.care
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
app.gptw.care
app.gptw.care
gptw.care
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
www.khadimfall.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
gptw.care
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
app.gptw.care
sni35767.cloudflaressl.com
*.gptw.care
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
gptw.care
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
test.salatinos.cz
*.gptw.care
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
gptw.care
www.makeaceleb.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
sni35767.cloudflaressl.com
rasp.kotydev.com
sni35767.cloudflaressl.com

Certificate

The complete raw certificate details for *.gptw.care in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt9dIefbXdVlpy3Q2Awm
Ue1B7mEmuwVKQd/NpvBizuDOPWVIOCzV26CL3AwCyYTvI0kxFARVr30H6wAu9w1v
/mqw5FiGMouvlg9uv4VXztK29Qe1RKXVhzqGT7L/4cqgThQSYtJIa9uoV8Rq6z+r
CWd16gt9jiiSGTaOVIAH4ZV6sDXqz31OBGaEdezbKnU2w/K5uq3YQnpAy/vjaoTF
P16PfAVsv1FCtenxQpwmD9UfkFYwpN3UiOlAYeS8bhVRpdV4R8rVgB7g0FuL/9lV
ZEJ98E1QaLc3j8WdZ8P2HKebFQD7H2DQ3v6x8NbYklzwx4nQtAkqcM8Cg58SR9nK
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5728592250554176321932533003620146752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gptw.care'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22075609858341386308943609650883485541199016391320195264967573264136715676558886161591609076689451147935357574074080104517069071714774470790132075766686115213615825153281887556950091535926074885029481509988481186928733272447190808312903630551330061968173806438099212639315189827506215018658704614369475985958271002904447602981385310908579612333239789807847036475677720315610318832377770058063711853966824048805960990739639102227645680830132512594313445331594989768417727865232236483288863433119108037822853748368503569919497584339283705227361458245685947394878274395226950696766917261988205415099983159241335566355093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02bb38e7b49af7fb54a557bc12924455b7a4bb9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gptw.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.private.oursurvey.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gptw.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.private.gptw.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oursurvey.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oursurvey.care'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c458908b2000004030047304502204b829ca30fecc856ab175c3ec342a095eac074d08a54b77caf5efaad3f3cdf3a02210093720cc8c79d8c6155752f4f03d8082476ac39f4c7cc2464c70524b6e34ecdbb0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c458908f00000040300483046022100d53fce4cfa9eb2b753a87ea6d90ec2c43b878ad89fbcdd28ee84667d6ee51ff8022100c95234a887e5cc06bfb99e94091852f3f7e8379d1af98a8719202abbfe3efa720076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018c458908e200000403004730450221008ce83cd68fa89fb4bb2074b200246cb7aad63b455dda2ee6bae443001d9fdc9302201b861c39ffbe4d55398499ba3b2c09c834dcd8b1db913896ea9cfa74a3088d05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0067fdcf430555d1569c09926f32357c3cb89af77986e0a21645991daa65aebb0bbd98b69fc7650a35ffc35ab512492eb1cdde0e6a6b0b2900e79f2d24879a93eb8703d72516b2f1b008902482fc22411d8563373e9a5a6a2b173b9604557455637d061421e854101f5bfba26fceabf6a398c6c96ab280a0bed683bc13aebe9d1e199020052975ea360ac7695e35e6772f0428af6bd6aa4bd9db71d6465eee6b44e9600ad59189cd141b4b513591e52d7e621661930ab49abaf2df0752cc9d02aafb472dec6401fde8b90b69103797ceeb543b21f388510241dda270039c05159fc0f660145ed27357bcb7027a0340e0a459dac146e8afb846e52f235710716d3c