*.staging.xrex.io

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:56:3e:4f:3e:b7:cc:7a:ee:1b:3d:af:be:7d:c9:06 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.staging.xrex.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:56:3e:4f:3e:b7:cc:7a:ee:1b:3d:af:be:7d:c9:06
Serial Number (int): 20386221254438267964395212038588975366
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a5:46:07:97:5b:55:a4:f3:27:93:15:3d:a6:5b:25:94:52:26:ac:01
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 2a:46:10:8c:c0:58:ed:ab:7d:d7:cf:54:87:57:8d:39:cd:e9:11:c7
Fingerprint (sha256): 9b:f9:bf:54:08:68:e6:cc:32:61:d6:74:b9:94:92:80:3b:ec:dd:09:9a:51:46:17:d5:be:ba:c5:c8:c0:c0:4d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.staging.xrex.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.xrex.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.xrex.io

Other certificates including the domain name xrex.io

(limited to 100 certificates)
*.staging.xrex.io
blog.xrex.io
mvp1wsapi.xrex.io
mvp1.xrex.io
contact.xrex.io
event.xrex.io
ghost2github.xrex.io
magneto.dev.xrex.io
bityield.xrex.io
app.getshuffleboard.com
*.xrex.io
aelconsultoriasistemas.com.br
blog.xrex.io
easyschedule.app
dp.dev.xrex.io
new.xrex.io
*.xrex.io
*.dev.xrex.io
*.xrex.io
studyplan.questt.com
rt.xrex.io
magneto.dev.xrex.io
xapiv1.xrex.io
mvp1.xrex.io
*.xrex.io
*.xrex.io
*.rt.xrex.io
www.xrex.io
*.xrex.io
links.xrex.io
beta.ronandviv.com
dp.dev.xrex.io
mvp1.xrex.io
admin.dev.getperkify.com
wayne.xrex.io
*.xrex.io
ghost2github.xrex.io
beta.ronandviv.com
rt.xrex.io
re.exchange.xrex.io
closize.com
*.xrex.io
re.exchange.xrex.io
www.bixi.finance
www.taxalpha.in
*.xrex.io
zenui-report-location.asus.com
links.balsavich.dev
share.xn--glckwnsche-bebd.app
jlp.collaborative.fm
jenkins.xrex.io
xrex.io
teamleader.ingestigator.com
www.rendezvousavecmoimeme.fr
*.xrex.io
ibh-portal.thecareerlabs.com
*.staging.xrex.io
xrex.io
sni.cloudflaressl.com
wallet.xrex.io
d-vote.nl
*.rt.xrex.io
team.xrex.io
blog.xrex.io
*.xrex.io
www.xrex.io
xrex.io
vpn.xrex.io
wayne.xrex.io
*.mvp1.xrex.io
jlp.collaborative.fm
research.xrex.io
*.staging.xrex.io
www.xrex.io
bityield.xrex.io
downloads.xrex.io
*.staging.xrex.io
*.mvp1.xrex.io
support.beryl.cc
*.xrex.io
team.xrex.io
research.xrex.io
referral.xrex.io
tw.xrex.io
cms.xrex.io
*.xrex.io
links.xrex.io
tw.xrex.io
*.xrex.io
janinebadro.com
cms.xrex.io
event.xrex.io
new.xrex.io
redirect.xrex.io
xapiv1.xrex.io
*.xrex.io

Certificate

The complete raw certificate details for *.staging.xrex.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgYT478CUaUaj/qwhsy6
eq2e0VNtR9NHYtjVY9a3RAMK1eCBv6rL1fEClrVBPH18LiPYPHs9XyJR0YOdkhrI
TgUdARrmBpY+NdU29JQz7Ni9CKsUPYi5AKRjagJWlZXOJcRK6X7cNhvyXwjtoK9A
qn+16364s31F6c80HUOWSU6eXsht7dEs5nU4ZwjVi8s76goB58JFKtXTbO/s5DFf
QUU3IgIvXXL1KrQUsKtVHVp8tLXT234B5qPXlyar5C15dQQ4iWdtXA2wkRyvVnPu
vZXCDPgr6oluOsoZv+iHZJsTKRL030idBKzsfuYxWkHBY0i5qLLT8BCLuE8mQLub
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20386221254438267964395212038588975366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.xrex.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22978368526375528623146398252925185245435321252854576431378377383403933202101768019403548157569082887368535997658779419622406734366016278650452203920121826899813699678227228456323886770379324811067105126852266451641679572217594728250841449000255040843640935419622241843764439911483671324415552720123761963694194247693506561875883084933999149845878773232960658610416419371926599177408778626609217540441597434181235750795227189654163610180894486550420019180409583486410092556330270609474206004794075038191090964177897101879652005033762269120007034647799995422011788630440858577809308392384491523538681087634028323642201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a54607975b55a4f32793153da65b25945226ac01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.xrex.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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