*.verisys.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:43:15:6b:5a:76:78:80:db:f7:b3:81:e7:94:bc:a7 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.verisys.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:43:15:6b:5a:76:78:80:db:f7:b3:81:e7:94:bc:a7
Serial Number (int): 1677546321318688227025478719982845095
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 79:8f:5a:d7:40:3b:52:72:9b:65:65:4d:16:04:fc:13:fb:51:fb:db
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 98:ea:1b:8d:26:a8:23:67:fa:52:35:57:6a:32:bc:7a:df:bb:59:f8
Fingerprint (sha256): 6c:02:ec:78:b6:18:40:9a:93:e0:42:da:5b:bc:2d:fd:c4:3d:72:65:d3:29:89:4a:55:c9:90:19:63:dc:ee:35

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.verisys.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.verisys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.verisys.com
verisys.com

Other certificates including the domain name verisys.com

(limited to 100 certificates)
feedback.qualityhosting.de
survey.gradwell.com
*.demo.verisys.com
tls.automattic.com
verisys.com
survey.westernwindowsystems.com
cmap.stgapps.verisys.com
*.corp.verisys.com
supportsurvey.control4.com
surveys.myarg.com
kenexa.verisys.com
surveys.fredmangroup.com
tls.automattic.com
surrogate.omegafamilysurrogates.com
*.verisys.com
*.api.verisys.com
feedback.blackboardinsurance.com
*.apps.verisys.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
beta.verisys.net
*.verisys.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
checkmedic-ldh.verisys.com
survey.boomtownroi.com
helpcenter.verisys.com
sftp.verisys.com
helpcenter.verisys.com
feedback.wufoo.com
feedback.blackboardinsurance.com
insights-stage.verisys.com
*.verisys.com
beta.verisys.net
certificates.getfeedback.com
cmap.apps.verisys.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
checkmedic-ldh.sit.verisys.com
forms.comfortkeepers.com
*.verisys.com
enquete.pietervanforeest.nl
supportsurvey.control4.com
*.verisys.com
feedback.liftago.com
*.prod.verisys.com
*.prod.verisys.com
feedback.nanotempertech.com
customdomain.getfeedback.com
survey.faq.rakuten.net
*.dev.verisys.com
sftp.verisys.com
*.dev.verisys.com
survey.faq.rakuten.net
*.verisys.com
*.demo.verisys.com
feedback.icelandair.com
survey.westernwindowsystems.com
dashboard.verisys.net
survey.adstream.com
tls.automattic.com
surveys.fredmangroup.com
sftp.verisys.com
sftp.verisys.com
feedback.auditorservice.com
*.verisys.com
surveys.elkay.com
*.corp.verisys.com
www3.verisys.com
survey.faq.rakuten.net
www3.verisys.com
customdomain.getfeedback.com
customerfeedback.surveymonkey.com
feedback.nextdc.com
insights.verisys.com
checkmedic-ldh.dev.verisys.com
feedback.inap.com
feedback.auditorservice.com
pubmanager-alt.stgapps.verisys.com
*.prod.verisys.com
survey.gradwell.com
feedback.nextdc.com
enquete.pietervanforeest.nl
certificates.getfeedback.com
www3.verisys.com
tls.automattic.com
www3.verisys.com
feedback.qualityhosting.de
verisys.com
*.api.verisys.com
*.verisys.com
*.demo.verisys.com
feedback.nanotempertech.com
*.prod.verisys.com
www.verisys.com
getfeedback.wire.com.au
certificates.getfeedback.com
feedback.smilebooth.com
*.stage.verisys.com

Certificate

The complete raw certificate details for *.verisys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gDupNbp7CrPDKQxEGO0
9mIj67tfklW3MqBpqjLl14tN1Pt+w7v1btpMmVpyypn+/XqPNx9YjsxfxTxboDYj
m8Gcp+YMejzaPs2sEqNjTf+H03/jyMj/B6GRIUq1vLB/WolT329ykYWPTX1OWfLx
uPVEUsiDPxKkSnGEVto9dKPGtfs/OvsAuWnkcFXAqJU/+L8XTtahb/E/cfaBEKED
bhQZiskim2iTki7PGh+A3pFiw4AsLzoP7V08fGpaG7ped2XKtx71N+Gx2WRGfz9g
Q76gwTxLd831oTT//d5kvto+4t4A8IxRA0mcaf71PEkf8s7SOO79QiGuVOUDTw9k
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1677546321318688227025478719982845095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.verisys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27015456949045937099089312414708073696258013598487953956134437759440528278634609344407976176373807283478071024499327699430158735966692727882088198603552657537854371109895787258575101501514394230020199407114852116611814870969569650893248518967051348733813566913975728038602525585000423963572849578770778445033202660275978667324164126410295381436401289575333150030903671022623320137171735929643692750586332988516870546904565861535903710155806808107045757095076762419751583484108320729397340682604158321314281534249659726466393185329710587346076904190170602784602711797937857317290082441054924780799549279664682694567147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							798f5ad7403b52729b65654d1604fc13fb51fbdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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