DV SSL/TLS Certificate for nodeapi.railstack.eu

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M03)

About the nodeapi.railstack.eu DV SSL/TLS Certificate

This certificate with serial number 04:48:8b:0d:f0:3b:7b:38:01:b4:dd:ea:18:ef:97:31 for nodeapi.railstack.eu was issued on by Amazon.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for nodeapi.railstack.eu provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 04:48:8b:0d:f0:3b:7b:38:01:b4:dd:ea:18:ef:97:31
Serial Number (int): 5693577716203502213192849157532915505
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: d3:ac:e8:60:47:53:fd:c6:bc:66:b0:5c:fc:f8:d6:06:e7:84:e8:c9
Authority Key Identifier: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (SHA-1): 4e:69:e7:ee:c6:97:c0:8d:41:22:fc:ae:cd:04:ee:0d:50:99:7d:99
Fingerprint (SHA-256): 34:5b:32:7e:2a:f5:ca:d5:67:51:ac:d9:63:46:64:a5:19:32:c2:f9:fb:a4:cd:2a:07:ef:81:cb:9e:51:79:35

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation Information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate nodeapi.railstack.eu
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for nodeapi.railstack.eu

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

nodeapi.railstack.eu

X.509 Certificate

The complete raw X.509 certificate details for nodeapi.railstack.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlLc8MiHukliIpTnTGFe
mtDpIXF2DfVtni8YOi0iWPhJXJPMLvYuqDhjCjFg++jA7jLzL7tYjip2Sls6sz6j
w03iqjKote0eta6YzNf7vZ3Qp3ATwHM15gvYjdcA8rJqWFJ6WaBgQ2DQcUAQ+6To
tYC32nFOEsSp+uqWZCYknoy2mhJHMBTRo02B2RlWHx0jVIvnhsPWCI1JacTaf3d+
rlCGjJ75yGQrJ0BPNLLOXAmLjil4r3vdSH2o+mbi9A3X2qcjEX0b3YJZkIHWxFgi
BiB0961ImK2yurTH6oZtTOIyvOqd3O75zQI1X135sjqXdobw15+M0Sy3+LeshGrV
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5693577716203502213192849157532915505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nodeapi.railstack.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21501373136643615421186122864093423023101083950560638197627496481299268536525733875380256024818962509739137456005672911456890361687875615092587599967201901390589433602451519611546885702674751060605432335598648440473922330316811745263768617915708939527081574241535872613263486599786523026667198956844890367976658310270917051167965346617038970572817190675437054272416685483284223515944861129999120803610123491237240994364626449709681828704331190728350178009754304759386688243077391406615541519288834820587752647889794111476165968837417946228540242850124468477243105401973250987976977071913511490276588518372481484641711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3ace8604753fdc6bc66b05cfcf8d606e784e8c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nodeapi.railstack.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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