wavecast.io

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:41:44:d1:b2:16:6f:cd:1d:08:98:67:e9:6d:c3:66 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wavecast.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:41:44:d1:b2:16:6f:cd:1d:08:98:67:e9:6d:c3:66
Serial Number (int): 14960403067093308275216912703166464870
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 01:9a:86:8d:96:a6:d3:b5:f3:fd:67:5e:30:3f:cf:a7:9f:87:94:65
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 77:3c:cf:58:dc:55:db:53:d0:63:3a:b2:d6:60:39:cd:bd:c8:3f:27
Fingerprint (sha256): 7a:dd:0e:16:a9:f6:e2:58:34:29:f8:06:38:36:da:48:50:42:a9:2c:ba:3f:68:d1:ce:e2:a4:fb:80:94:c9:4f

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate wavecast.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wavecast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wavecast.io
*.wavecast.io
papillon.io
*.papillon.io

Other certificates including the domain name wavecast.io

(limited to 100 certificates)
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
papillon.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
test.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io

Certificate

The complete raw certificate details for wavecast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdVcgn87etkSgv5smK5t
Us78DnfEETOu1BYu14wmO2MzomPfKBdVahPF8bbPFU5iNVY+RXquFY/JAsKmCCxZ
WsgMYw/U1NodZ+wHbt37IMvu1pCL4hIA2EfqAlmZcKVtyPiiJDz2vM1EFfNkA0L+
gb7fQY4lNiAsDZa5tuo8I9WWzRrAr8b1golczEzIeTkdHJeYcm8xVYGTMM79mbzO
rGNdNg3bV4UQyMWhx7gFrpSBQWPN9M1GHztFYVNOUmFM7zEZ1EOaaz6s1/JBWGiX
2DO0grYvMbDpIkDvdfmP/6psIgBjxvX9KQJVw7PDpe6PnHisYhf0WABW5ClUF7Np
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14960403067093308275216912703166464870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wavecast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23964252049591486133074288215519316468459494433114337826121270173376205509869600934078202209495580449691803121827219837815863950366037381139832780036766545337575055310719162231682712576448339407681186053949874893111942504297507004819444147356489814874223961443306394687791485698889978450454758013681466773329574407738326162004715503333875847040650682178135959026125916162352437701003553937149230891102900735707206226788806856000533346472396409990811754700456228682438255605323322752500514835373816280439325516516693440115319231703256177415043020913449662742096216623778037710603882413220585526324051245209355300333859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							019a868d96a6d3b5f3fd675e303fcfa79f879465
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavecast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wavecast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papillon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papillon.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b3b84169fc0d980f4c3248b73aea3a6ea1688e48c115ef5e7cd85b21fc9d7c761059b85e9081488baa18e427ffb618fa8d9d7ace1114c127abc9944d462e38cbe86937a6725b70df2e51c7acbe10e0ace333012e6b3d4d36e4c7aaee84d7226e2765cfae00d65289128e8ce34cb4eaa4b8dcd21be8363e73c32cf9fa06548bca78f775da0e54a59ab0cb3717afe7fa4c89bdc1f5921f59e9f9e61568504c777e1314205d78077fd8295de0bfb2534f600008d05e93664a5b9fe435a53c3c8d056cf29cbb4011e96fa1ed81d47e200daa727fa997d80bd26379a4d6838d49bd96dfa82cb92f2b5a2484566efd737a3efd839d30b408a677d0b02a8ce1b91cac9f