cms.kidzmatters.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0b:fe:04:40:59:0e:2e:e3:51:9c:0e:71:90:34:96:64 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cms.kidzmatters.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:fe:04:40:59:0e:2e:e3:51:9c:0e:71:90:34:96:64Serial Number (int): 15940437583504048596911949261575591524
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9b:69:24:f6:ac:c5:78:7f:5f:8d:17:e0:2a:be:c6:98:a2:99:ff:60
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 8b:c9:49:0f:24:36:88:13:fb:38:0b:78:99:12:7a:7f:6f:f0:95:eb
Fingerprint (sha256): 73:d5:f8:40:75:16:b0:a0:04:d9:33:e4:6a:04:ca:3f:11:48:59:de:9f:dd:3a:27:65:3c:98:f1:8f:96:1a:ad
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate cms.kidzmatters.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cms.kidzmatters.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cms.kidzmatters.com
cms.littleskoolhouse.com
cms.seedinstitute.edu.sg
cms.outdoorschool.sg
cms.littleskoolhouse.com
cms.seedinstitute.edu.sg
cms.outdoorschool.sg
Other certificates including the domain name kidzmatters.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for cms.kidzmatters.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIQC/4EQFkOLuNRnA5xkDSWZDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMTAwMjAwMDAwMFoXDTI0MTAzMDIzNTk1OVowHjEc MBoGA1UEAxMTY21zLmtpZHptYXR0ZXJzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALbHFMoG/teqnAyDaoz3ig7F0Pf7yp2vhHC9HG9Gc58rL0GO SPZMr1Ctd9E9uTXfSnsY+2TTF350LgmXCyYqDFHEBkmW5nxUdfj4QOb6IPCa5Iof u7UQ6x6ommcW49x9+OlzsFvgcm6N0Bw/jEZlYvd6p6pP+jOMoggwhLVqk3Ludwrt LJiBUkJuLG7Q+nHMCWbPZt+caeEUBTWAtq445TNz1jUdeSHxLzhW4V3LZ714PfYK UbZRRSjVZtFzgYXQ+IqevOcIiB99DPVIzetwhFyfFInirtlYukjgHbkck3tcRQH6 jkq9H0VM7JKYn0AXDtn/tSTHFEOXDJ9ZgQTPktkCAwEAAaOCAzUwggMxMB8GA1Ud IwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBSbaST2rMV4f1+N F+AqvsaYopn/YDBoBgNVHREEYTBfghNjbXMua2lkem1hdHRlcnMuY29tghhjbXMu bGl0dGxlc2tvb2xob3VzZS5jb22CGGNtcy5zZWVkaW5zdGl0dXRlLmVkdS5zZ4IU Y21zLm91dGRvb3JzY2hvb2wuc2cwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0w MS5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5y Mm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJt MDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYK KwYBBAHWeQIEAgSCAW0EggFpAWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNR SFlGcR+1mwAAAYrtzWb6AAAEAwBGMEQCID4OnROzs4dYpJTGPSqFv/wnYzEdsCfp XBVFtNjFxWVxAiB4rx6+uv9NImnmUGTl/9NJVqqrLyGX8SCUCXsRPpn02wB2AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiu3NZt8AAAQDAEcwRQIg dig4oi1vJWusXuPgyx1zDcuscWTTRScna9RH/z/1N1MCIQDQOjkew0nJZ4jipi14 IHj3pmCtsgDLDkK24FvSMx7XBQB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k PTBI1/urAAABiu3NZpgAAAQDAEcwRQIhAJggnTRQ8h4/kkng8hOP31qKd60ZjHV4 pNmzYlsIQtvKAiBNsmiRI1STazqerO0Vf7g2PeHEsqPU8p9kCRbLVxRoEDANBgkq hkiG9w0BAQsFAAOCAQEAYPHH3Pl8ZKwWut5+p9dtYPdA32YrpuWIvZZY6BTTxnoB oJHfieL8crzuJ2gg9IcqIi9d90442HP0Q5QMf22esURk+5iVwV+8/an2lbYKe6y+ P5CX0dmogAI11RG9WmRRkkJZak1rWGipAHCHHYcXNC/Uwb9zOknbyP7lB5tOIOPm XYeLU2JEKty8oqpNTHiNUVE8MhnMP6x1znv5fTKF6yAVaknuf31xVtaN1OMcAItZ XsJBEFwDwQn9y1mlhzntF0ktSnqypHjjYaNM/B4q2WKEtZTGlRiPVqv3iD6egKGf tM3OmA1BngaV3cy6x1qXBJ7QWEG1NPBl29qcGB8Z+Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtscUygb+16qcDINqjPeK DsXQ9/vKna+EcL0cb0ZznysvQY5I9kyvUK130T25Nd9Kexj7ZNMXfnQuCZcLJioM UcQGSZbmfFR1+PhA5vog8Jrkih+7tRDrHqiaZxbj3H346XOwW+Bybo3QHD+MRmVi 93qnqk/6M4yiCDCEtWqTcu53Cu0smIFSQm4sbtD6ccwJZs9m35xp4RQFNYC2rjjl M3PWNR15IfEvOFbhXctnvXg99gpRtlFFKNVm0XOBhdD4ip685wiIH30M9UjN63CE XJ8UieKu2Vi6SOAduRyTe1xFAfqOSr0fRUzskpifQBcO2f+1JMcUQ5cMn1mBBM+S 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15940437583504048596911949261575591524 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.kidzmatters.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23073542106204226255055616565919549726075816570532962621128834631600061228567410248297404482716261261904518067394042238653996432920433225782630740759899894830379919732329991680871567770705162789042059237545530861824474826365444538574693059570565519114292105258300362010752499630675752052456719385676181445545460511380232318446589931977163524685118862549042292504199433032650180191261385006904297718105062940915958162012586577277251375328408737437011227948333951598556915463997222686914631156712839512913633339338832547249503058142208183358066577181503432540354424015630564842402795518559709593191081254484688113734361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b6924f6acc5787f5f8d17e02abec698a299ff60 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.kidzmatters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.littleskoolhouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.seedinstitute.edu.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.outdoorschool.sg' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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