*.invupos.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:bc:e4:79:55:79:bf:64:fe:de:f3:76:5e:ae:02:fb was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.invupos.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:bc:e4:79:55:79:bf:64:fe:de:f3:76:5e:ae:02:fb
Serial Number (int): 15602293765489328696972840230208799483
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:60:0b:1f:f6:ba:0f:4d:f1:02:8d:41:cf:e5:06:aa:60:60:64:ef
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 67:3f:d8:23:f0:7b:0a:0e:1b:86:af:d1:b1:79:c8:b4:04:e8:e7:b3
Fingerprint (sha256): ae:bd:9b:ae:a6:87:14:5e:89:1a:1a:e4:72:9c:4f:b1:3c:8f:71:90:c3:21:66:76:ad:4f:7e:42:b6:c1:51:51

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.invupos.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.invupos.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.invupos.com

Other certificates including the domain name invupos.com

(limited to 100 certificates)
lw.collinwoerde.nl
koshikawakaikei.lfv.jp
ri.artiss.co
app.letsdogoodzambia.com
www.terminaltime.se
keygen.testnet.antisociallabs.io
blog.forgirls.jp
api2.invupos.com
bug.events
admin.invupos.com
www.khan.love
invupos.com
referral.extolapp.com
retail.invupos.com
invupos.com
invupos.com
www.cestodelostesoros.com
realm3.invupos.com
admin.invupos.com
invupos.com
facturacionelectronica.com.pa
go.invupos.com
admin.invupos.com
testing.shakepoverty.world
console.themonkprotocol.org
admin.invupos.com
admin.invupos.com
admin.invupos.com
admin.invupos.com
admin.invupos.com
www.effekt-raad.dk
*.invupos.com
*.invupos.com
www.radactive.com
admin.invupos.com
app.joinflux.com
admin.invupos.com
invupos.com
go.invupos.com
kds.invupos.com
realm3.invupos.com
devonypowell.com
graffiti.creasaur.net
api5.invupos.com
lukefogarty.com
www.clelectrical.co.nz
www.vitanovbiotech.com
retail.invupos.com
invupos.com
invupos.com
admin.invupos.com
kds.invupos.com

Certificate

The complete raw certificate details for *.invupos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0LQpQF41lD0U7mDlXBp
vSB6apgygtRJD8brNzVi2Wbl18x+grxeMzWrCQKdClEilO5ZXI/AZKQX3UvCB2wZ
24+Qv3EhbCgITst8GUsNnNqQat5IUpFTU3B53ZwQaI8+d3QsqHuMZLpnwA63Qu2R
SIOD4SebeB0kTk9ANpAXLPHqtLcJFeSHI4PtesRs7r1+n+TJkQab+OOtIh/5WqTd
pmhAfyOmlDeDBbMD/QY/WxEMU8m+lbigyXgiDSg483Sul1y4KeGfiBHQ1o+nK3Mj
7Xoew3cOmhHtuih8yw8bj2JO+ljLI80WOdgaUdPUjqOBrVn7uzAMn/JayBxR6znE
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15602293765489328696972840230208799483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.invupos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20104838202852640916418513979415064905747246296114871280550413628487009206776801534869474416815066275884299134008008107356239492533698090524098579036127571818418157633700990039212972917319028864213216384851294859912352915560403738990351014651213757338658238657012445167906713622150657859266446785522777319756153940720790401340111828204254950668928938334788498300927765240485765952140002325301592254244136558819406177715402933057705394183929373355057633972472623622312644001780886090736574138261323734355395678392778567243575326023349399679142819147598650569530110464445125295274843206465362579702830949351819887363239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2600b1ff6ba0f4df1028d41cfe506aa606064ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invupos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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