apps.c1.playground.online.anwb.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:df:5f:a8:af:6c:37:0b:cc:94:21:0f:e5:a3:77:c3 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apps.c1.playground.online.anwb.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:df:5f:a8:af:6c:37:0b:cc:94:21:0f:e5:a3:77:c3
Serial Number (int): 19769014333976438741980543681044903875
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:db:8c:06:f6:08:33:03:c5:ba:21:05:40:bf:59:a1:57:e4:95:72
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): f6:30:0b:f0:8f:a6:79:fe:e6:f9:8a:d6:af:f3:4e:e2:c4:b5:a8:d5
Fingerprint (sha256): 85:21:0c:42:ff:b0:ea:95:a0:69:af:7e:ee:26:fb:a2:6e:04:e2:a4:71:e3:47:be:c5:9a:18:e9:8d:99:56:2d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate apps.c1.playground.online.anwb.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.c1.playground.online.anwb.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.c1.playground.online.anwb.cloud

Other certificates including the domain name anwb.cloud

(limited to 100 certificates)
apps-ws.c1.playground.online.anwb.cloud
apps.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
v48.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
yormenisbriljant.internet-shared.aws.anwb.cloud
istio.playground.online.anwb.cloud
*.c1.playground.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
api.hv-verkeerseducatie-dev.aws-public.anwb.cloud
partspoint-dev.hv-wegenwacht-dev.aws-public.anwb.cloud
author-api.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
v6324f8ba.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps.main.dev.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps.c1.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
author.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.c1.playground.online.anwb.cloud
istio.playground.online.anwb.cloud
apps.main.playground.online.anwb.cloud
v4e.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
v5a9e6da1.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.c1.playground.online.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
ve7.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
apps-ws.main.dev.online.anwb.cloud
*.datascience-external-preprod.aws-public.anwb.cloud
*.int.eks.dev.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
apps-ws.main.dev.online.anwb.cloud
apps-ws.eks.dev.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
ve3.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.c1.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.int.eks.dev.online.anwb.cloud
*.c1.playground.online.anwb.cloud
event-platformpjm.datahub-test.aws.anwb.cloud
istio.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
intgrtn-tst-epl.datahub-test.aws.anwb.cloud
va6.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
atcar-affiliate-bucket-bb.datahub-pub-test.aws-public.anwb.cloud
apps.c1.playground.online.anwb.cloud
partspoint-sko.hv-wegenwacht-dev.aws-public.anwb.cloud
*.k8s.dev.online.anwb.cloud
istio.playground.online.anwb.cloud
*.int.eks.dev.online.anwb.cloud
istio.playground.online.anwb.cloud
apps.c1.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
va98eccab.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps.main.playground.online.anwb.cloud
apps-ws.eks.tooling.online.anwb.cloud
*.k8s.prd.online.anwb.cloud
apps-ws.c1.dev.online.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
vfd.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.istio.playground.online.anwb.cloud
atcar-affiliate-bucket.datahub-pub-test.aws-public.anwb.cloud
apps.main.playground.online.anwb.cloud
istio.playground.online.anwb.cloud
*.eks.dev.online.anwb.cloud
vc15a99d5.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
atcar-affiliate-bucket.datahub-pub-test.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
apps-ws.monitoring.tooling.online.anwb.cloud
partspoint-dev.hv-wegenwacht-dev.aws-public.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
event-platformwo.datahub-test.aws.anwb.cloud
sst.online-pub-prd.aws-public.anwb.cloud
v5a9e6da148.author.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
v4d.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.c1.playground.online.anwb.cloud
*.int.eks.tooling.online.anwb.cloud
*.c1.playground.online.anwb.cloud
apps-ws.eks.dev.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
debtor-apidn.o2c-dev.aws.anwb.cloud
*.int.c1.playground.online.anwb.cloud
*.c1.dev.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
apps.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps.eks.dev.online.anwb.cloud
istio.playground.online.anwb.cloud
va0.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps.c1.playground.online.anwb.cloud
author.hv-verkeerseducatie-test.aws-public.anwb.cloud
apps.monitoring.tooling.online.anwb.cloud
*.eks.tooling.online.anwb.cloud

Certificate

The complete raw certificate details for apps.c1.playground.online.anwb.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8kOQFTGqr1WSeez8dG2
LaC2Vpih5d6A1FJ+zDI9YyywyM7jkdNHOagQpmYojl8EUAmI+nyrYQ0YM4jb7slJ
7cbfeyuzmSuVQ5bL3yyLoF4unZwDOpggPQZT8NQhsFMz1P69g8Da2hTg6LD8IKQd
+GKbb5lg9QhZbOMy64celJmG+aYtoX2e/Tb0W+jVpHbRSadj95nG6OipQX80KGBU
D1by6IdPKpKJbct3Uu9crXNkUvh+3zJmpoUeRt8jARSW6et3KX4i2gVjKjMZmYlF
KDeg0q6aKUAkaZYeZDDvqLF6AnZuPz2YuCxdYNL7X8riIlFSKQVrpxLIFwYTQ1tL
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19769014333976438741980543681044903875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.c1.playground.online.anwb.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19666081515336599182429548296744580528436281964429590511597694489913681454268442039155259410925462825721070696039814964808057049541707052361387458703938429681594667491432801899101467100264383748434308732936463999306281859922548166182938070151199620085742033552539266135495822300290106683701132970198715291050255899212010244170481421472307948355788458555148499806839188093054235177939222003815801014553349121727085404137115669984844280387369013172442744325458594504519979384438285244620926190689460351647864525522613372477370445135690667364895314377150168679888110642053384474661232218773583926474690653573230481853433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8db8c06f6083303c5ba210540bf59a157e49572
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.c1.playground.online.anwb.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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