*.stage.twilio.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:e9:5c:cd:e2:b4:c6:c9:c7:9e:30:e8:0f:b3:cc:b1 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.stage.twilio.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:e9:5c:cd:e2:b4:c6:c9:c7:9e:30:e8:0f:b3:cc:b1
Serial Number (int): 15833195415291698435155466953161952433
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3e:1b:0a:31:fb:98:ee:8a:02:1a:32:fa:2d:ae:c2:58:38:a6:ff:c9
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e0:18:e0:29:3e:5e:fd:24:59:a8:f4:b7:16:8b:1e:18:35:07:8a:ee
Fingerprint (sha256): a3:62:9d:d1:bc:32:39:ee:9e:98:2e:8e:73:43:3f:d1:d2:92:de:ca:3a:9f:b3:19:ce:1c:09:21:81:46:0c:11

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.stage.twilio.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stage.twilio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stage.twilio.com
*.internal.stage.twilio.com
*.internal.stage-us1.twilio.com
*.stage-us1.twilio.com
*.stage-au1.twilio.com
*.stage.twilio.org
*.internal.stage-au1.twilio.com

Other certificates including the domain name twilio.com

(limited to 100 certificates)
*.stage-in1.twilio.com
statuspage.io
*.dev-us2.twilio.com
statuspage.io
payments.callback.prod.twilio.com
statuspage.io
rainbow.stage.twilio.com
www.temporal-apig.dev.twilio.com
statuspage.io
eventgw.twilio.com
incapsula.com
gateway1-mv1.corp.twilio.com
flex-v2.stage.twilio.com
security.twilio.com
realtime-wormhole.us1.twilio.com
support.twilio.com
thiscertisfortestingonly.twilio.com
chickentreat.craveable.support
cds.twilio.com
boxconfig.outside.twilio.com
*.br1.twilio.com
*.vss.stage.twilio.com
statuspage.io
dashboard.waas.corp.twilio.com
ct-spam-labs.us1.twilio.com
*.twilio.com
understand.stage-us1.eak.twilio.com
8f876c29f4e5ddcd1ba13f3b40e889bbc3822cd2.console.dev.twilio.com
chickentreat.craveable.support
*.stage-us1.twilio.com
chickentreat.craveable.support
*.turn.dev.twilio.com
*.stage.twilio.com
incapsula.com
internal.status.twilio.com
wireless.us1.eak.twilio.com
mqtt-sync.stage-us1.twilio.com
*.ie1.twilio.com
incapsula.com
rtd-notify-log.dev-us1.eak.twilio.com
wiki.hq.twilio.com
platform-slackapp.corp.twilio.com
*.de1.twilio.com
statuspage.io
build.twilio.com
incapsula.com
headsup.twilio.com
webhooks.twilio.com
chickentreat.craveable.support
tsock.twilio.com
pf-voice.dev-us1.eak.twilio.com
*.vss.twilio.com
*.dev.twilio.com
postflight-sms.us1.eak.twilio.com
*.stage-us2.twilio.com
statuspage.io
statuspage.io
*.turn.dev.twilio.com
*.dev-us2.twilio.com
statuspage.io
statuspage.io
doers.twilio.com
akamaisecure4.qualtrics.com
video.us1.eak.twilio.com
support.twilio.com
aproposalfrom.freeman.com
assets.cdn.prod.twilio.com
statuspage.io
*.code.hq.twilio.com
*.help.dev.twilio.com
chunderm.gll.dev.twilio.com
go.twilio.com
*.br1.twilio.com
5271ba7d4eb049ae104fa6533b878d7de1b133d9.console.dev.twilio.com
*.stage.twilio.com
signal.twilio.com
console.ie1.twilio.com
statuspage.io
networktest.twilio.com
partnerportal.kornferry.com
incapsula.com
sales.twilio.com
jp.twilio.com
aproposalfrom.freeman.com
statuspage.io
*.stage-au1.twilio.com
ecs.stage-us1.twilio.com
statuspage.io
*.vss.twilio.com
chunderw-vpc-gll-stage-us2-ix.stage.twilio.com
statuspage.io
statuspage.io
mqtt-sync.us1.twilio.com
*.stage-us2.twilio.com
*.stage-us1.twilio.com
support.twilio.com
console.ireland.stage-ie1.twilio.com
rtd-kibana-6.us1.eak.twilio.com
landria.corp.twilio.com
akamaisecure4.qualtrics.com

Certificate

The complete raw certificate details for *.stage.twilio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbTxtiClvhNmD2zxggTc
e7E5sJ/gD0Cb8reCThxf85VvdITv4vrfALxGb8yLaGzsdpbGBVC4me2CVMl1xiKW
LkqCQgyq4liHWuwUMXXdz0Fj/cYXGNsuHxxzheLJ7SH5/clbaKd3nK67Zve+9KGN
DiD9B7wMhBW8ftFf8gnUTO42e76AvQldnmh4PPYn006gIgmxaZBg3BxPaO4XKPaE
W0rxBmbpvaiOaL1pqnM7IL9tnxNO4v3MvS8Jq7481aHa1Y55fVzW+J+iEiZE38V9
QZefA4+Jc4D1tYUkWWd+JKmJqrphBicoQ54OIdpZoadPZIAuM41p0YCs0GYtem0x
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15833195415291698435155466953161952433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stage.twilio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433406882293838644097466653146080404704089202686013901916585745167340643719556023831234814911401767994907491393184976993689253097475486513229816386420513682178843435963952743777545827525503194445190604983343757015067762616222428462084432296862223986063859922650676442587164943628762404092059710024051244902784857102616746596320756373287265050764463648664332128039826302019796552353222890451313345715183102741981841383778548491402420248812432201330848276143251586794099728738351739078981005739783427001682857694274170000690614336425714749875427550574794791033713892208438945592221826668844578110011257019408203985239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e1b0a31fb98ee8a021a32fa2daec25838a6ffc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.twilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.stage.twilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.stage-us1.twilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-us1.twilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-au1.twilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.twilio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.stage-au1.twilio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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