sammaster01.internalsecure.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:60:27:6e:59:d0:5a:05:dd:8e:20:c5:79:7a:5c:36 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sammaster01.internalsecure.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:60:27:6e:59:d0:5a:05:dd:8e:20:c5:79:7a:5c:36
Serial Number (int): 9803856225782221112650712685257317430
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a2:12:93:fa:04:61:39:9a:f8:2e:cd:de:1b:5c:34:e7:cc:a0:ac:53
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 63:78:ed:b8:54:52:8e:b6:47:4b:ba:a3:31:f1:72:73:9a:6a:17:4f
Fingerprint (sha256): 79:3e:09:d2:1c:dc:6b:7f:af:32:ae:eb:69:75:f6:fd:24:e5:53:d6:81:b7:6f:48:e7:04:53:01:53:ef:da:d3

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate sammaster01.internalsecure.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sammaster01.internalsecure.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sammaster01.internalsecure.com
jenkins-sam01.internalsecure.com
helsammaster01.fi.f-secure.com
sammaster01.eu-west-1.ele-df.fsapi.com

Other certificates including the domain name internalsecure.com

(limited to 100 certificates)
ulmaster01.internalsecure.com
jenkins-elements02.internalsecure.com
lnxmaster02.internalsecure.com
lardmaster01.internalsecure.com
ocmaster01.internalsecure.com
platmaster01.internalsecure.com
coremaster01.internalsecure.com
itrdmaster01.internalsecure.com
monitoring.sc.internalsecure.com
ertmaster01.internalsecure.com
sonar-premium.fi.f-secure.com
jenkins-staging.internalsecure.com
psbmaster01.internalsecure.com
artifactory-stg.f-secure.com
eppmaster01.internalsecure.com
eppmaster01.internalsecure.com
artifactory.f-secure.com
rdomaster01.internalsecure.com
stash-stg.fi.f-secure.com
rdomaster02.internalsecure.com
cccp01.internalsecure.com
jenkins-wongki-test.internalsecure.com
radarmaster01.internalsecure.com
itrdmaster01.internalsecure.com
rdcmaster01.internalsecure.com
phishdmaster01.internalsecure.com
labsmaster03.internalsecure.com
dsmaster01.internalsecure.com
sammaster01.internalsecure.com
elementsmaster02.internalsecure.com
cccpmaster01.internalsecure.com
elementsmaster01.internalsecure.com
artifactory.f-secure.com
drrdmaster02.internalsecure.com
monitoring.sc.internalsecure.com
stash.f-secure.com
ertmaster01.internalsecure.com
labsmaster01.internalsecure.com
labsmaster02.internalsecure.com
artifactory-stg.f-secure.com
ccptmaster01.internalsecure.com
psbmaster02.internalsecure.com
lbsmaster01.internalsecure.com
jenkins-biz01.internalsecure.com
ltsmaster01.internalsecure.com
cssmaster01.internalsecure.com
docmaster01.internalsecure.com
monitoring.sc.internalsecure.com
prodmaster01.internalsecure.com
drrdmaster01.internalsecure.com

Certificate

The complete raw certificate details for sammaster01.internalsecure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWf+VQ9TwrDRUzuIMLvJ
KvH3jfRRQDBlsSF7SZU15HLtLbfj+OzHd1GvSTPdrY1thiP7AUSuVxQM5RzFJtIF
C76QSu7+6frcTNxfId81xypylGdRY2Xk3KhV+rpz6fGemuF9V/qZ/F7nesLSTQ0z
HK21ZZZZP0oa9mKKkVo0cqbPmEE1nlgHpAGGggDZoOMSfANmbqwYP1irASiHY5q3
hxaaFpzPKXvZuIZ7kvV3KFupDUOqkLFVyuMT2FJ+MCT101TLVRIou+cnG0IFEwv6
E+3iYhndXuiH2J4r8t8Loylvu6q9rm0HG49/DeV+hB3GE8s+blRsrW6+uKmQ7iud
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9803856225782221112650712685257317430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sammaster01.internalsecure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22395461077921094862535804987377161676720642720636621669977610042478996846569194255524448463712566786491620957543054673597779150165367101412136739721405588370000654874034060200775609552889718612959120103083702648479128840807896973472396764430601048996624929090018114385824695765622818278491900847888263994211092301418985165325883315692824103758242043512573059987331292036896984251983051456270149883544472846903497263598212790613221694383301097522042111506015388896120667121284197786446964122753143214573746693698617608092581785140667152216355375669354043515973891388695489311469274355463558526942822274196699433639291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a21293fa0461399af82ecdde1b5c34e7cca0ac53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammaster01.internalsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins-sam01.internalsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsammaster01.fi.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammaster01.eu-west-1.ele-df.fsapi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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