rohitnarvekar.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 06:e3:8c:8f:b7:86:f0:02:1c:4e:cc:6f:e4:57:eb:df was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=rohitnarvekar.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:e3:8c:8f:b7:86:f0:02:1c:4e:cc:6f:e4:57:eb:dfSerial Number (int): 9156870285367538146782570730885737439
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 84:1e:b9:5f:a4:e0:33:e2:31:65:8b:08:4f:76:26:ad:e5:d3:b3:1d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): df:70:73:a8:49:ee:66:6e:6c:4a:2b:bf:e1:b4:0a:86:84:6f:85:40
Fingerprint (sha256): 89:46:36:2c:d1:94:7e:c3:d1:db:7a:84:60:e8:3a:b8:fc:a8:a4:a7:25:72:83:f6:f4:c1:20:c1:b7:4a:e2:d9
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate rohitnarvekar.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rohitnarvekar.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rohitnarvekar.com
*.rohitnarvekar.com
*.rohitnarvekar.com
Other certificates including the domain name rohitnarvekar.com
(limited to 100 certificates)
socioly.io
godswords.io
ridgelineroofingny.com
stage.ii-bukken.com
team.mileseducation.com
www.forktune.rocks
app.boostthyroid.com
editor.qre.dev
nitrkl.in
rohitnarvekar.com
c.wemall.com
hpn.me
bentodenim.com.ar
stage.ii-bukken.com
cheff.com
rohitnarvekar.com
testing.matilda.dixtra.app
helsinkievents.app
website1231.estore.business
e4b.app
app.kakuseikyu.com
rohitnarvekar.com
uuidgenerator.helpersfy.com
nitrkl.in
apptrato.com.br
www.ronnydsrevenge.com
weather.rohitnarvekar.com
rohitnarvekar.com
godswords.io
rohitnarvekar.com
helsinkievents.app
stage.ii-bukken.com
www.montcoalert.org
rohitnarvekar.com
e4b.app
bolt.cldcvr.com
blog.rohitnarvekar.com
stage.ii-bukken.com
uuidgenerator.helpersfy.com
blog.rohitnarvekar.com
www.montcoalert.org
website1231.estore.business
rohitnarvekar.com
app.kakuseikyu.com
android.fedmich.com
rohitnarvekar.com
blog.rohitnarvekar.com
www.forktune.rocks
fire.me
weather.rohitnarvekar.com
www.tornadotriathlon.ca
www.ronnydsrevenge.com
godswords.io
ridgelineroofingny.com
stage.ii-bukken.com
team.mileseducation.com
www.forktune.rocks
app.boostthyroid.com
editor.qre.dev
nitrkl.in
rohitnarvekar.com
c.wemall.com
hpn.me
bentodenim.com.ar
stage.ii-bukken.com
cheff.com
rohitnarvekar.com
testing.matilda.dixtra.app
helsinkievents.app
website1231.estore.business
e4b.app
app.kakuseikyu.com
rohitnarvekar.com
uuidgenerator.helpersfy.com
nitrkl.in
apptrato.com.br
www.ronnydsrevenge.com
weather.rohitnarvekar.com
rohitnarvekar.com
godswords.io
rohitnarvekar.com
helsinkievents.app
stage.ii-bukken.com
www.montcoalert.org
rohitnarvekar.com
e4b.app
bolt.cldcvr.com
blog.rohitnarvekar.com
stage.ii-bukken.com
uuidgenerator.helpersfy.com
blog.rohitnarvekar.com
www.montcoalert.org
website1231.estore.business
rohitnarvekar.com
app.kakuseikyu.com
android.fedmich.com
rohitnarvekar.com
blog.rohitnarvekar.com
www.forktune.rocks
fire.me
weather.rohitnarvekar.com
www.tornadotriathlon.ca
www.ronnydsrevenge.com
Certificate
The complete raw certificate details for rohitnarvekar.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIQBuOMj7eG8AIcTsxv5Ffr3zANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDkyOTAwMDAwMFoXDTI0MTAyODIzNTk1OVowHDEa MBgGA1UEAxMRcm9oaXRuYXJ2ZWthci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNhqwYemosTGYtr8ntRwHpl8d6dtunuvNbyY9AzSVCR5fTAzoL L2Az2Fz4NCGyG+DxHWZNntN4LE3zid1QfPOnkUYGcxGWvq3UYsIJuUqHpWVda+Js F/G1VkrTzzr8jSOqpkMutJSBVhl5L0PQ1ixDFm57/ctbRnfx15ticawzDag/CSSb BwcuDTu0Ogk3OcFUeK7/MFQrD5FkbHLv5WolAhDQPPBgxirXCvv4eJGSq8PSJagw oObqvWGc1xM79Ltc8VvHRBjKukLG5W6bzqK3MMAeiL4n8e2gL2BCeH46qK5eZMpf IZ9CDxL2dBOZ0WI4+LQsfSM9kF0EQXy3ikL5AgMBAAGjggL/MIIC+zAfBgNVHSME GDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUhB65X6TgM+IxZYsI T3YmreXTsx0wMQYDVR0RBCowKIIRcm9oaXRuYXJ2ZWthci5jb22CEyoucm9oaXRu YXJ2ZWthci5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9u dHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIE AgSCAW4EggFqAWgAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAA AYrfO84QAAAEAwBGMEQCIDEwXe6lQPbo0cdIHicws9A7ca1LlTUUd903ElVC/8VT AiAopDU9XfN9hTiVBuUf5XNidvTDlNNvTVFEHjOUyLQkCwB2AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABit87zjEAAAQDAEcwRQIgLSUh2ya6Bl5M V98nh3nZOTF2ka9trunv4ybNiBhXrrUCIQCmiuypp8rMKh/XtkjeKoWQwNAF5NN6 BtXVar/WUcktfQB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB it87ze0AAAQDAEgwRgIhAPWFjT6IKul/ZQoDyqlRODIIMOLuQibrQ2LYyOuUPTtY AiEA37xh+5OyuKQvlg8QkYtr9ZsrTQcRdEFCFDfB5deptPEwDQYJKoZIhvcNAQEL BQADggEBAIVhBFC18N5JKh7wUDlcNi2sVmeUo26+WOVs2MCUWPTl4zykfK0v74Ik V4Ig4EFsiEB5rPE97S+AZbkPjBqZ//ZJLIk9UhLJYPQX5lL0jSQoB42ZvSrsvP8T RwjyoGy7uacHAEOimoapggSI6/Zb+f6lINks3a8whPjDzXG+MmIEU0+pjF3BhTWf vnEx1xWThZ4q8IOvkc5LsRQyvLR4modQ33eH3aCagC+K2hl/BY5evlwCbe9tHite PgsNZWzKIucnP1370wRqzccS/qq7aCGqNpWjMEcAN3Gk/m2cdiZjjFnKf8Qth0o+ wV5WZ8LhddtBCSO/ArstCsLfGHrxELY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYasGHpqLExmLa/J7UcB 6ZfHenbbp7rzW8mPQM0lQkeX0wM6Cy9gM9hc+DQhshvg8R1mTZ7TeCxN84ndUHzz p5FGBnMRlr6t1GLCCblKh6VlXWvibBfxtVZK0886/I0jqqZDLrSUgVYZeS9D0NYs QxZue/3LW0Z38debYnGsMw2oPwkkmwcHLg07tDoJNznBVHiu/zBUKw+RZGxy7+Vq JQIQ0DzwYMYq1wr7+HiRkqvD0iWoMKDm6r1hnNcTO/S7XPFbx0QYyrpCxuVum86i tzDAHoi+J/HtoC9gQnh+OqiuXmTKXyGfQg8S9nQTmdFiOPi0LH0jPZBdBEF8t4pC +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9156870285367538146782570730885737439 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rohitnarvekar.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25945261878891803061669929650703773096901758195973826143794500995404147154848039271119685535224012309540274918193665826946039210585839310765315673295346075976851110398538371565949775498683190531028492257022158871621622811882919256268374024522320985591420859925555120778387065916620013616904533385406076314626187679214739248407531535838145043264346159669714729177138008455782802973383917696776698453144778498382662989232961613134663852253453313914540382745577634289181790714719023940246709553885536458074036557177363674611748267128808334827526478077175532190906543673893769139663253145408866957139166261536306668126969 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 841eb95fa4e033e231658b084f7626ade5d3b31d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rohitnarvekar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rohitnarvekar.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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