tbwl.esrc.aws.uom.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:5f:14:4f:bb:36:bd:24:9f:f3:3a:07:f6:93:33:17 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tbwl.esrc.aws.uom.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:5f:14:4f:bb:36:bd:24:9f:f3:3a:07:f6:93:33:17
Serial Number (int): 15115188120351666920667810170062189335
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a3:3b:20:c2:5f:69:5f:23:89:69:66:84:2c:64:f0:00:3a:eb:96:3e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 10:11:da:b5:69:7d:47:62:e5:bc:cc:57:e0:25:4c:ea:7a:d0:f1:83
Fingerprint (sha256): 6a:54:d0:0e:3b:19:b6:d2:ec:20:ec:46:0b:44:74:23:61:6a:37:4e:bc:24:21:4e:3f:69:e7:fa:3a:64:d3:c8

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate tbwl.esrc.aws.uom.cloud

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tbwl.esrc.aws.uom.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tbwl.esrc.aws.uom.cloud
tbwl.esrc.unimelb.edu.au
www.tbwl.esrc.unimelb.edu.au

Other certificates including the domain name uom.cloud

(limited to 100 certificates)
ctac.esrc.aws.uom.cloud
dasc.esrc.aws.uom.cloud
pyer.esrc.aws.uom.cloud
web.esrc.aws.uom.cloud
amaa.esrc.aws.uom.cloud
vcrc.esrc.aws.uom.cloud
ahpi.esrc.aws.uom.cloud
menz.esrc.aws.uom.cloud
scpp.esrc.aws.uom.cloud
vcrc.esrc.aws.uom.cloud
scpp.esrc.aws.uom.cloud
emel.esrc.aws.uom.cloud
austehc.esrc.aws.uom.cloud
iaea.esrc.aws.uom.cloud
tbwl.esrc.aws.uom.cloud
tbwl.esrc.aws.uom.cloud
umab.esrc.aws.uom.cloud
mcag.esrc.aws.uom.cloud
amaa.esrc.aws.uom.cloud
ctac.esrc.aws.uom.cloud
umpc.esrc.aws.uom.cloud
scpp.esrc.aws.uom.cloud
sosi.esrc.aws.uom.cloud
rern.esrc.aws.uom.cloud
iaea.esrc.aws.uom.cloud
icae.esrc.aws.uom.cloud
rern.esrc.aws.uom.cloud
emel.esrc.aws.uom.cloud
pyer.esrc.aws.uom.cloud
asap.esrc.aws.uom.cloud
csec.esrc.aws.uom.cloud
chia.esrc.aws.uom.cloud
ctac.esrc.aws.uom.cloud
umab.esrc.aws.uom.cloud
sosi.esrc.aws.uom.cloud
sosi.esrc.aws.uom.cloud
torp.esrc.aws.uom.cloud
vcrc.esrc.aws.uom.cloud
austehc.esrc.aws.uom.cloud

Certificate

The complete raw certificate details for tbwl.esrc.aws.uom.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTs7XFBONCUnm+BwgBxy
jEtnriAxwIkn1EkBW5it3UA6JARGeG7IrBsbJ2T0nLkMcwHoPIuM7U5LVaIKfUmH
Z297NyOU6cfPy3UJ1nlbQWjMoQDtZPYH4hlBA4BtgenVGAfGwS1aUUbHlbjEHIzI
tCop5WDOsR2LxejIPckL0BacdVskL4J+xywUaiyLaZUqygOXaCogy8ucJOmG6GjU
OemPMBRc20tnYIX3Fv3z+8l4eDISS9Na3NSMFf7WuNzHPsUF3BuzmNuRQh3mHpQ/
5PCx9nCPGHeUqZXDQ9ovl0QxVBkXZg7zyMf1g0BhBqEk8z10AH8nqceSnxhBkST6
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15115188120351666920667810170062189335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tbwl.esrc.aws.uom.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16313949667949734917558233116344810080659840297364417418815022425194588079390811379354322483296613973742240537082563732308989930684166538252706817950433924625438776645611255098549206727963052148569561149098368625702909735518062912731069126095112019960056170179621201231010513247079888256803378462036551928580513704302773141448708518330470289276790808595693626371630038241682187810915438235727478840962262737161886467383786705289093154593766374221763950738409048098568574931192687693395570325750142594530858004972731469923123135053669187790866511176272491926245167277260022414167911764096202790772422436977713866930909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a33b20c25f695f23896966842c64f0003aeb963e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbwl.esrc.aws.uom.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbwl.esrc.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbwl.esrc.unimelb.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018eff8403230000040300463044022073c418897a8c2fc5771c94e528f540ae8c6802fce5715eed8e208183559c832502201d20a33ac80656415f0670cd1c2efa399b1d5638343d9fe7d2c5df23448a430c0077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018eff8402f30000040300483046022100a5fadf489da2291040acfc60b56030574385fd763b07aaa9bee7777fac25cce1022100a92e0b3dfc795d6b851c4ba623cc616e77d939c783c31aa5adf0a1fc7a371aae007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018eff8402f30000040300473045022100de43602eed6d9e8ec6c4f468423fec997cb5b147ac1386de66a23aada3b7038402204d5624f40e4685482751171f7556e2a0e6ed919850fd9acab71d63217b5acb17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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