nao.org.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:f5:bc:ec:4e:75:e6:0a:4f:90:f9:1c:a6:a7:92:80 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nao.org.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:f5:bc:ec:4e:75:e6:0a:4f:90:f9:1c:a6:a7:92:80
Serial Number (int): 3934400537045065816672643837394915968
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 23:fe:7f:e3:24:9b:b3:f8:ed:01:21:32:d9:b5:d4:8c:e1:f2:57:26
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): c0:9a:0b:b9:01:63:85:1c:6c:29:74:7b:db:9d:7a:2c:7b:e3:44:ef
Fingerprint (sha256): 9f:55:de:5e:64:10:9b:66:cd:ad:a8:7e:7e:97:93:ec:c0:18:20:59:5b:68:e2:e6:cc:c9:c1:55:26:64:49:cd

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate nao.org.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nao.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nao.org.uk
www.nao.org.uk
resources.nao.org.uk

Other certificates including the domain name nao.org.uk

(limited to 100 certificates)
RStudio-dev.nao.org.uk
RPacMan-dev.nao.org.uk
resources.nao.org.uk
www.nao.org.uk
nao.org.uk
lacgextranet.nao.org.uk
RPacMan-dev.nao.org.uk
lacgextranet.nao.org.uk
www.nao.org.uk
www.nao.org.uk
www.nao.org.uk
www.nao.org.uk
RStudio-prod.nao.org.uk
www.nao.org.uk
www.nao.org.uk
resources.nao.org.uk
lf.nao.org.uk
naomail.nao.org.uk
nao.org.uk
nao.org.uk
nao.org.uk
naosurvey.nao.org.uk
nao.org.uk
*.nao.org.uk
www.nao.org.uk
RStudio-dev.nao.org.uk
naoccesite1.nao.org.uk
*.nao.org.uk
RPacMan-prod.nao.org.uk
resources.nao.org.uk
www.nao.org.uk
*.nao.gov.uk
naosurvey.nao.org.uk
sip.nao.gov.uk
resources.nao.org.uk
nao.org.uk
nao.gov.uk
naomail.nao.org.uk
www.nao.org.uk
www.nao.org.uk
nao.org.uk
*.nao.org.uk
resources.nao.org.uk
www.nao.org.uk
www.nao.org.uk
*.nao.org.uk
RPacMan-dev.nao.org.uk
www.nao.org.uk
naoccesite1.nao.org.uk
nao.org.uk
naomail.nao.org.uk
www.nao.org.uk
www.nao.org.uk
www.nao.org.uk
wifi.nao.org.uk
www.nao.org.uk
RStudio-dev.nao.org.uk
*.nao.org.uk

Certificate

The complete raw certificate details for nao.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltYbyb6uNYd9IYjnZKS4
F6UGr2Q80ayX/oT3C33a/Cmz5dyluGolHKKIGU+0tyLSTp13yE8Nju5BHyvn1fGF
lSoTHRRuRSMVoldewexkfvvz5wbxI1ZHXl2nWYxzjp1yvphjNVIPXktQknAcYHQs
hkN8IzP9wCagUitKePi5SUaoAaevU/lfw4J09vZ1MXYEZE16Do88UluxM5grKCPV
hvW4kmJfBrTquGtTEaiyslTqVjF40n22GsPe3xDNVNZz184msn0jiWvhIQPItKOB
khhPCCNfUR4uaBvg3AylFtIdgvadslVvcxbDNF8h/JJiKh5tV/M6HmT57LZGMidH
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3934400537045065816672643837394915968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nao.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19041326604552132672542333642107264693505100747246728942252911469241677660770045540210538970983707706163809993846165888197717666054375108577141919806374669140456584880258635535491693816258337013638413831849794327225652916289666538058267041451114574045436150818002698319729338238634265601903476429630738674319091320917043619593912271266878690143491302845334909199358752889982727046906459008845973996562785687547976043110361670196174940790072534457159635599937287021913725720952877202706961689158592583251815953980788462252683565048669526871239858972684576538446844640841389803432708830729973112035389959951763338905409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23fe7fe3249bb3f8ed012132d9b5d48ce1f25726
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nao.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nao.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nao.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189613a59f0000004030046304402201b0500c279dbb832356bd952d5b7df2949084a822902539f84d5a15fd8a62841022054be7873d731cef7f4e6ce206acc278bf49e55cf9de6dd78546616ca7c1cfaaf00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189613a5a020000040300483046022100a44b86de94143152bb13464a06cedbc9ef1ebbdada6301f80f71c7dbb2f2222f022100b15b6661b188bd001027afd73f75fc4f023ad999b2c0818d73e125894392fb20007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189613a59cb00000403004830460221008b1d583d5401c3e16f601415d993e6ea9969b9d200b202883eb635d9861ad54e022100c9084553f3fe97b105d08d35a259e48f73b91a06713d48637ab96d7a4b5ae929
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00788771e0913c20957278333e4dbb1f84d8b1a576574580b3a0e9dec565686a2056f793e032091430a014fba9e3a76962fbbc9d359716fe16dd25bffd79eb02fcf6bd60f14993e4f7222e9c677fdf1de28634fb7a9fc34dfc651f848547211e5f01e419e31d8f169dd08eebe990ec73ed557365b63642c8b972937bef3b83db703b982ff3d94328e18ca11771e45fbe2954a9582568ed78de772af10f9b47f5197e31386846d8265d5fbaf76bb52e4a89dbdc131119f0a4216a4c0ccb58379470b82e9580ba5c72abc6d207d95ac092334e42d304dcb4d611476dabbd3a9c5a5bff3b4ab1a02e1e927a7b8ee9b03277f55354ab27fb8c653c47294c40e20a7348