*.d1.ext.singapore.swig.gy

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:fc:2f:6c:79:f7:bf:90:1f:18:08:ef:fc:55:89:86 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.d1.ext.singapore.swig.gy

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:fc:2f:6c:79:f7:bf:90:1f:18:08:ef:fc:55:89:86
Serial Number (int): 10614016646485306338172212200185629062
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d8:50:c7:02:ca:36:bc:9c:7e:85:a9:24:bb:ec:56:a9:a0:0a:e2:da
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 21:22:9f:13:99:55:b9:95:25:69:1b:8d:78:d1:13:7d:5a:1b:9b:d1
Fingerprint (sha256): 9e:79:17:2f:88:59:47:00:e4:8f:10:a9:59:37:c8:2f:d6:ca:9f:00:15:a2:9d:20:71:d7:0a:0d:d7:60:a2:b6

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.d1.ext.singapore.swig.gy

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.d1.ext.singapore.swig.gy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.d1.ext.singapore.swig.gy
*.sf.ext.singapore.swig.gy
*.delivery-sim.ext.singapore.swig.gy
*.foodrng.ext.singapore.swig.gy
*.dlm.ext.singapore.swig.gy
*.uat.ext.singapore.swig.gy
*.staging.ext.singapore.swig.gy
*.u4.ext.singapore.swig.gy

Other certificates including the domain name swig.gy

(limited to 100 certificates)
*.qgps210.singapore.swig.gy
*.foodgrowth.singapore.swig.gy
*.srsa4210.singapore.swig.gy
*.eh5.singapore.swig.gy
swig.gy
*.satyam0212.singapore.swig.gy
*.ozonedlm23.singapore.swig.gy
*.mobi.singapore.swig.gy
*.dlmreg2.singapore.swig.gy
*.footest.singapore.swig.gy
*.qgps939.singapore.swig.gy
*.eh10.singapore.swig.gy
*.eh11.singapore.swig.gy
*.deap453.singapore.swig.gy
*.rtz1.singapore.swig.gy
*.dlmreg1.singapore.swig.gy
*.eh12.singapore.swig.gy
*.finqa.singapore.swig.gy
*.ozonescrip.singapore.swig.gy
*.restest04.singapore.swig.gy
*.hptest1.singapore.swig.gy
*.dashserv01.singapore.swig.gy
*.ozonedebug.singapore.swig.gy
*.dctest.singapore.swig.gy
*.foode2e01.singapore.swig.gy
*.banner07.singapore.swig.gy
*.env062.in-west.swig.gy
*.hitl1.singapore.swig.gy
*.dcpod.singapore.swig.gy
*.ordernew.singapore.swig.gy
*.loyaltyen.singapore.swig.gy
*.rain.singapore.swig.gy
*.ozonedlm25.singapore.swig.gy
*.eh8.singapore.swig.gy
*.devas8.singapore.swig.gy
*.fleetseg.singapore.swig.gy
*.srsa2195.singapore.swig.gy
*.fpfleetseg.singapore.swig.gy
*.foodrlbdd1.singapore.swig.gy
*.eh4.singapore.swig.gy
*.xpv2.singapore.swig.gy
*.dexp9385.singapore.swig.gy
*.swigcenter.singapore.swig.gy
*.ozonem1.singapore.swig.gy
*.ozonedlm22.singapore.swig.gy
*.mob.singapore.swig.gy
*.ddbtest212.singapore.swig.gy
*.mob1.singapore.swig.gy
*.shuttleu1.singapore.swig.gy
*.gpprom1.singapore.swig.gy
*.env055.singapore.swig.gy
*.test5.singapore.swig.gy
*.ddb0612.singapore.swig.gy
*.swig.gy
*.ozonedlm21.singapore.swig.gy
*.ssdauto.singapore.swig.gy
*.foodrlbdd.singapore.swig.gy
*.restest05.singapore.swig.gy
*.merchcore.singapore.swig.gy
*.ozonedlm20.singapore.swig.gy
*.fleetcap1.singapore.swig.gy
*.deen7355.singapore.swig.gy
*.deen1777.singapore.swig.gy
*.pslasee.singapore.swig.gy
*.mobilzn.singapore.swig.gy
*.perf-test.us-east-b.swig.gy
swig.gy
*.eh6.singapore.swig.gy
*.qgpsanity.singapore.swig.gy
*.hptesting.singapore.swig.gy
*.minis.singapore.swig.gy
*.ozonedlm3.singapore.swig.gy
*.qgps4398.singapore.swig.gy
*.capreg.singapore.swig.gy
*.bannerzes1.singapore.swig.gy
*.dctest1.singapore.swig.gy
*.doe.singapore.swig.gy
*.hptestdapp.singapore.swig.gy
*.licap.singapore.swig.gy
*.growth.singapore.swig.gy
*.eh13.singapore.swig.gy
swig.gy
*.dineoutqa.singapore.swig.gy
*.serv001.singapore.swig.gy
*.qgps2591.singapore.swig.gy
*.o2rserv.singapore.swig.gy
*.footest1.singapore.swig.gy
*.singapore.swig.gy
*.genienew1.singapore.swig.gy
*.test4.singapore.swig.gy
swig.gy
*.growthx2.singapore.swig.gy
*.test6.singapore.swig.gy
*.ozonedemo.singapore.swig.gy
*.testenv1.singapore.swig.gy
*.daran.singapore.swig.gy
*.restest02.in-west.swig.gy
*.d1.ext.singapore.swig.gy
*.airport1.singapore.swig.gy
*.moblzn.singapore.swig.gy

Certificate

The complete raw certificate details for *.d1.ext.singapore.swig.gy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3CF2L9gMMn011PRqDTy
EOKS88Pbi2yN1kHgBHBDg/XMbSvjQ3rqfOlMjm0G0asnYnSkEnTXPhqFL3AnK3SL
pwz6p0wAdBJlIEsURRzF3D/ZNREneVlC/O0LchIeAf5onpGuJ3RIkjZ2awJTT0qq
j+AVKEzHLgkPDndGqgJfIog1VtyfCvDllrJmnySLXA+wBLUn/Dl4Rhiv5M7c+63E
51VexNAOX7FTOifCWlnKQItfgVR+zY/72YWzuCYOa1HpdK1kPm+Q21hh4Fxla8W8
lansoNIpprehR5WEtghRLI9p5Sm6FLhDIDM5jJkJumTkgKlbHwRwwRjg3VrrGbNY
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10614016646485306338172212200185629062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.d1.ext.singapore.swig.gy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24167003328240607643138346211247776166399721856582337265239039385709498084591214240560277706556589945877673961424382360218863840674050828329704710316777455208636062254331458462232227376479777459396777870059281726871969811614787461949674462409122471218926421956844199357281142144194855939436981001814627519714302857456198114058952980203245775762879504592784573923190507873469820537595062558069782873264540358104198274484039049482968000235074353976055308430427841422236387043948869006269831394600683446232786546981922216292058614003910469369127355748353264804668950494399901786266912119986532602897633625143974319839429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d850c702ca36bc9c7e85a924bbec56a9a00ae2da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d1.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sf.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delivery-sim.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodrng.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlm.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u4.ext.singapore.swig.gy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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