choba.org

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:e8:53:59:b6:70:65:e9:89:45:c9:53:f7:4d:57:85 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=choba.org

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:e8:53:59:b6:70:65:e9:89:45:c9:53:f7:4d:57:85
Serial Number (int): 9181671393655294851692464460356474757
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9c:6e:e9:ba:45:78:8c:06:7e:b4:f2:02:7a:0e:bf:c0:d6:50:ed:5e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 06:07:5f:b8:8b:19:2d:d9:76:61:7e:89:73:31:fe:3e:75:b2:0b:f5
Fingerprint (sha256): 8d:fa:2e:c5:58:ff:7e:df:eb:20:6c:f9:64:42:2f:dc:a9:56:83:9b:97:aa:f0:e8:48:54:c3:90:e9:7b:0c:d2

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate choba.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for choba.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

choba.org
www.choba.org

Other certificates including the domain name choba.org

(limited to 100 certificates)
ucoconnect.com
ucoconnect.com
cumbrianetwork.global
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
campionalumni.org
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ucoconnect.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
caterhamschoolsociety.co.uk
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
choba.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
choba.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
connected.cardiff.ac.uk
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
ucoconnect.com
campionalumni.org
choba.org
choba.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
corpusalumni.com
ucoconnect.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
m.choba.org
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
ucoconnect.com
cettalumni.com
ucoconnect.com
connected.cardiff.ac.uk
campionalumni.org
colfesnet.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org

Certificate

The complete raw certificate details for choba.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DBkXTYKuJMWgXiwMS3t
ks5K/AKO87nOM5e5+3tztvQKdHa6yQbQgiKAufqRxAS8Me/CMLth2xzlk2ErtwYW
Ye8Bn802npVBjO3+4/ynZCofomPlYxuJghfY+OiY8ZkEVNPSCqDni3baxQhC5PS9
HeNia93NENE7JuZhlARiTVEXUw7EMcgcX2eigM75ZUdFv5IsIk61/XpcDhipvmFy
L5PNDLLs7x8rpvy1jiADQqF3liBDGIeY7625WXRP6OpbL0ICCsuSH8JiPoWmhPLu
IhK+3dEztQIgMBQY0EpmS4PqMDXFWtrSpo/nsTWKgnJWz6xSFw8LXKzI4SC0FvAd
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9181671393655294851692464460356474757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'choba.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27796290100437355320711738006440659840788786018218380350357410806259506186830779257711787767328527329866409499026570657132982747098584416601690028111958283213802315696959442438267238211241736557938424649824949611155413736214935870385771934115295482745141904114755369598290591245695321509666884902085407405310773201541347989595809711864256985803367691192891701678168155402161918981704923164320935462850170154677483884945897393847835598433699270386229408695017403903712574400917696141518316429205734647408106559025326981605043433738396447657162754402532463078406515284542476287671123726836032982464725941321170190081523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c6ee9ba45788c067eb4f2027a0ebfc0d650ed5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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