nestor.com.tw
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 09:5a:68:6c:dc:ba:46:5c:31:53:7c:0b:61:dc:90:57 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nestor.com.tw
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:5a:68:6c:dc:ba:46:5c:31:53:7c:0b:61:dc:90:57Serial Number (int): 12432476674884603286427371550677962839
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 32:f4:df:32:47:ff:ca:cf:b3:b2:79:26:cc:6a:75:81:c1:05:b7:8c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): a4:5d:f2:11:34:55:7c:e8:86:ed:f5:93:5d:f0:73:e2:93:5c:98:3e
Fingerprint (sha256): b1:7a:6c:b5:2b:c6:e8:50:6c:17:18:40:a3:8b:e5:e2:bb:0e:7b:ea:1a:50:18:89:d6:59:f0:eb:32:3e:51:5f
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate nestor.com.tw
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nestor.com.tw
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nestor.com.tw
Other certificates including the domain name nestor.com.tw
(limited to 100 certificates)
backstage.nestor.com.tw
www.nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
backstage.nestor.com.tw
nestor.com.tw
nestor.com.tw
backstage.nestor.com.tw
www.nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
www.nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
backstage.nestor.com.tw
nestor.com.tw
nestor.com.tw
backstage.nestor.com.tw
www.nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
www.nestor.com.tw
nestor.com.tw
nestor.com.tw
nestor.com.tw
Certificate
The complete raw certificate details for nestor.com.tw in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEWTCCA0GgAwIBAgIQCVpobNy6RlwxU3wLYdyQVzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIyMTIwMTAwMDAwMFoXDTIzMTIzMDIzNTk1OVowGDEW MBQGA1UEAxMNbmVzdG9yLmNvbS50dzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAKD/LF2envY0leJgn5X0YTEOtlyMc9jzEWVub88zyyftAYQiuWn/Nbkb EWMQSkhtYAIHj6DOiEWSZYpfNJZqx6yw+fca0+FUCM70kVbA+AzWePSOsMZu4qPS bK/6fPPSmUzUgS/zQm5I49OojO+N5mIpnUAd8rIR/0A7kfX65sWLdzPdTRd1kX5Q ZVb7d34rw00rhK38Wf1+SDkNTdNANS1g1R/VZrpxMjPnoIGCMl+m8Rk1+I/8Tng8 P72VYgV/qgXf/7E0VuGiAS5/pqPV2gs9YmOnUUBRZyaNH9t5D4C5/vUHK52jGIhs XVvo5g3o4U0rH3H9aKj8Sw/tFLurpiMCAwEAAaOCAXkwggF1MB8GA1UdIwQYMBaA FMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBQy9N8yR//Kz7OyeSbManWB wQW3jDAYBgNVHREEETAPgg1uZXN0b3IuY29tLnR3MA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq aHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/ BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq65 kdThXJyv0loRZ01c4zdxXgW4RrS6AleYxW7ni9dI0SQjJr7Ie0KUcKzvxh9AlWst 3iwmNhS2+nvmdA1ELQtQJMrF5f4rDlOz/lkkXckXlkq6lZJkuEn0blt4opAUg31c bYwpk0ekv1mrUzO4fuJPlqsZMjwSrUXwE7ug/3sy2GBktLssiCsh6gxFHA3na38B SaiZRGl5XKvERg1zXBwcvMlp2iX3Q3mioUkSbznqpNujZ57IytzC/SY32nO2eVEd hkD4juxE3a/7oLEVCPVN0RwNq1qae1kUsgDZh2UEHm4uBOY7CJnb6yi97pP2OTrB GRo1MOwV5t7EU19vEQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP8sXZ6e9jSV4mCflfRh MQ62XIxz2PMRZW5vzzPLJ+0BhCK5af81uRsRYxBKSG1gAgePoM6IRZJlil80lmrH rLD59xrT4VQIzvSRVsD4DNZ49I6wxm7io9Jsr/p889KZTNSBL/NCbkjj06iM743m YimdQB3yshH/QDuR9frmxYt3M91NF3WRflBlVvt3fivDTSuErfxZ/X5IOQ1N00A1 LWDVH9VmunEyM+eggYIyX6bxGTX4j/xOeDw/vZViBX+qBd//sTRW4aIBLn+mo9Xa Cz1iY6dRQFFnJo0f23kPgLn+9QcrnaMYiGxdW+jmDejhTSsfcf1oqPxLD+0Uu6um IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12432476674884603286427371550677962839 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nestor.com.tw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20323959440308433347280059392025112389946549666558168979588749953632236792301346919473789285780832293371890144947590430156348270411415150471816170321636132997930659454236105427963632168751440576664245430872797251706244263376478501338343756984891615559621182403747933092465812414457658090483571419857589441322408202297166747131695880346636603388128950418274795771364683301739312826543912638553463760051956343981770638334170631289902316101417878379589437172032334482325806405579479825330172824349026018887621056292923297976779926834171518666397585729821545703820700998908857317059482847284482721536454748145831526508067 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 32f4df3247ffcacfb3b27926cc6a7581c105b78c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestor.com.tw' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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