choba.org

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 01:e1:5c:b7:f7:ec:0c:66:ad:97:1c:21:91:79:ca:7b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=choba.org

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:e1:5c:b7:f7:ec:0c:66:ad:97:1c:21:91:79:ca:7b
Serial Number (int): 2499375346120690635151423334929517179
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5b:ca:2d:0b:dd:b8:05:c7:7e:8f:98:e5:0a:23:61:b1:92:26:34:7d
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e2:29:ad:bc:46:fc:ce:b8:cc:79:23:a7:ef:0d:25:af:47:1d:6f:25
Fingerprint (sha256): 8c:6f:6a:50:07:71:28:bc:15:eb:fb:08:00:96:50:df:13:7e:5d:ef:2e:c8:4e:37:d8:60:09:34:f1:94:bd:b9

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate choba.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for choba.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

choba.org
www.choba.org

Other certificates including the domain name choba.org

(limited to 100 certificates)
ucoconnect.com
ucoconnect.com
cumbrianetwork.global
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
campionalumni.org
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ucoconnect.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
caterhamschoolsociety.co.uk
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
choba.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
choba.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
connected.cardiff.ac.uk
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
ucoconnect.com
campionalumni.org
choba.org
choba.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
corpusalumni.com
ucoconnect.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
m.choba.org
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
ucoconnect.com
cettalumni.com
ucoconnect.com
connected.cardiff.ac.uk
campionalumni.org
colfesnet.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org

Certificate

The complete raw certificate details for choba.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGZycnZi7zVyum14elcv
R/lU3ltVLPWFLpq+rNEwJCDnvqvVSGkVeO1Wo08AZqhSBbMfRK0/V25aa5JcEfpg
/eUUd5ZJh7MHqGVhmgzks1egbn+O3Cdvpvfo/Pk/KdCS7lWKd//lS/vnc2OClPBC
Sp9W5ihApQNndf4o+Na009iR6RL1dpRR2+HurY6/xr1Z2OFIKb6F3DxJmwXbYIKa
3O3hyPCtZ3vui4IXdH2fQ6vC3bVeKiWBx78rLDRjt82Mf7EIZXoZxbPQox9pDlcT
ABakF4Py6R4SWVt5Bi1QKJ+M4sxxKSmW+z/w7etaayGoh7/mTOxfDXgxuZe/qqBs
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2499375346120690635151423334929517179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'choba.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24793226301020466761405137400880605197789189480410760647463158316108554229647398822930006239072442008282200299629805060815817450606637365401115472994887013635869222650492330617782415710650183944781462689696052285189762865238768533044332657428030134932305773881853167626741517615587354934009118788098821428303919044935704865367813163196900867454738998672657571144003200578834947446592395324558154221293481990699056869581998030384040759058711546053932687277458339688866705632771379226627376427440284631130271770396291856111540503183783602190073974107209690668102815652599288081252977599307563744818826942539735727369289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bca2d0bddb805c77e8f98e50a2361b19226347d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ff837ad9e14fe8f7a20cced3954f8c74f6a163324a498d28b4f88c0419765c7cef1a0b29ebadd7afa1b5b34381ff3ae69fca9ccc79b59eebcdf169180582d4e8c3dd0ef8c8440b6e251c1708084ac3064d7efec21871633d06d816b1d2ed877d596f15dda1311b5a3a38f09a627d177f407b2bc6ed97335b058db0334bc5f69f446e70c6f637cbe4b7725445dacffd58dc8fb4e78aab6297146f09fff4ad7c199f8fe1c05605887c2dd486efe4738675b34e8bdd6e977674039b985341c5685716aa76b43b1d81ae1f40c2578b47fa3e8d3ec2d734d002ce5b1f1011bc4f896a86074bbeace3d6cf765f28c5748363aa3e71082264b9d2b26129bbeec93b479