certification-stats.ripe.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:7a:bf:5a:b6:3a:2b:e1:47:77:7a:42:e4:18:b4:14 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=certification-stats.ripe.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:7a:bf:5a:b6:3a:2b:e1:47:77:7a:42:e4:18:b4:14
Serial Number (int): 12600393305971012282104691544710231060
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 69:8f:6e:6f:b5:cc:c1:0e:a4:5b:4d:75:d9:78:48:be:6e:59:f5:4b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c1:a7:91:30:3e:df:c5:3c:cd:bd:fa:6a:7b:9d:4d:6a:36:4e:e5:ee
Fingerprint (sha256): bb:5b:d7:75:3f:e5:5f:5b:a9:a3:50:6d:79:04:42:5f:0f:c2:55:18:c4:16:24:e0:37:f9:28:08:46:49:e5:fb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate certification-stats.ripe.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for certification-stats.ripe.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certification-stats.ripe.net

Other certificates including the domain name ripe.net

(limited to 100 certificates)
de-dus-as48821.anchors.atlas.ripe.net
de-nue-as197540.anchors.atlas.ripe.net
ug-kla-as37386.anchors.atlas.ripe.net
de-dus-as58057.anchors.atlas.ripe.net
us-fnc-as7247.anchors.atlas.ripe.net
dk-skg-as48854.anchors.atlas.ripe.net
at-vie-as1764.anchors.atlas.ripe.net
ua-iev-as3326.anchors.atlas.ripe.net
us-fnc-as13925.anchors.atlas.ripe.net
br-sao-as12008.anchors.atlas.ripe.net
pbx.ripe.net
de-cgn-as61157.anchors.atlas.ripe.net
uk-blt-as25376.anchors.atlas.ripe.net
us-ind-as17054.anchors.atlas.ripe.net
ua-iev-as13032.anchors.atlas.ripe.net
de-fra-as200462.anchors.atlas.ripe.net
sa-ruh-as208520.anchors.atlas.ripe.net
webmail.ripe.net
md-kiv-as43289.anchors.atlas.ripe.net
uk-lon-as8676.anchors.atlas.ripe.net
guanaco.ripe.net
sg-sin-as43996.anchors.atlas.ripe.net
fr-rou-as16276-client.anchors.atlas.ripe.net
br-poa-as19200.anchors.atlas.ripe.net
ch-zrh-as559.anchors.atlas.ripe.net
www-pre-apps-2.ripe.net
kz-guw-as48503.anchors.atlas.ripe.net
nl-ams-as12041.anchors.atlas.ripe.net
nl-ams-as3333-4.anchors.atlas.ripe.net
mv-mle-as7642.anchors.atlas.ripe.net
sg-sin-as15133.anchors.atlas.ripe.net
trends01.atlas.ripe.net
de-ber-as50030.anchors.atlas.ripe.net
mu-beb-as30999.anchors.atlas.ripe.net
uk-oxf-as28792.anchors.atlas.ripe.net
oidc.dev.ripe.net
bf-oua-as37577.anchors.atlas.ripe.net
ro-buh-as197357.anchors.atlas.ripe.net
massimo.ripe.net
ar-pgo-as264608.anchors.atlas.ripe.net
jp-tyo-as199524.anchors.atlas.ripe.net
us-dal-as33438.anchors.atlas.ripe.net
de-has-as44973.anchors.atlas.ripe.net
mx-tte-as22894.anchors.atlas.ripe.net
ru-mow-as20764.anchors.atlas.ripe.net
fr-par-as20473.anchors.atlas.ripe.net
de-ett-as202040.anchors.atlas.ripe.net
fi-tmp-as719.anchors.atlas.ripe.net
lt-vno-as21412.anchors.atlas.ripe.net
nl-arn-as39636.anchors.atlas.ripe.net
www-analytics.ripe.net
nl-arn-as1140.anchors.atlas.ripe.net
pl-ktw-as206186.anchors.atlas.ripe.net
api.aurora.dev
de-ber-as6724.anchors.atlas.ripe.net
ch-bsl-as206484.anchors.atlas.ripe.net
us-abn-as15133.anchors.atlas.ripe.net
za-jnb-as57695.anchors.atlas.ripe.net
ch-gtg-as20612.anchors.atlas.ripe.net
us-sea-as396507.anchors.atlas.ripe.net
py-vlr-as266858.anchors.atlas.ripe.net
ro-buh-as41494.anchors.atlas.ripe.net
si-lju-as42207.anchors.atlas.ripe.net
zonemaster1.ripe.net
mx-mex-as42473.anchors.atlas.ripe.net
us-qas-as57695.anchors.atlas.ripe.net
ua-iev-as13032.anchors.atlas.ripe.net
cz-prg-as39790.anchors.atlas.ripe.net
at-klu-as42473.anchors.atlas.ripe.net
nl-ams-as199524.anchors.atlas.ripe.net
fi-hel-as203296.anchors.atlas.ripe.net
node02.kafka.ris-test.ripe.net
jp-tyo-as59105.anchors.atlas.ripe.net
cl-scl-as64112.anchors.atlas.ripe.net
de-ver-as35061.anchors.atlas.ripe.net
at-vie-as3320.anchors.atlas.ripe.net
api.aurora.dev
be-lln-as2611-client.anchors.atlas.ripe.net
cz-prg-as202297.anchors.atlas.ripe.net
au-syd-as138466.anchors.atlas.ripe.net
se-bod-as200675.anchors.atlas.ripe.net
br-poa-as19200.anchors.atlas.ripe.net
ipmap-api.ripe.net
api.aurora.dev
nz-akl-as61138.anchors.atlas.ripe.net
de-fra-as203329.anchors.atlas.ripe.net
fr-grv-as16276-client.anchors.atlas.ripe.net
de-dus-as41047.anchors.atlas.ripe.net
de-wob-as9136.anchors.atlas.ripe.net
pk-isb-as7590.anchors.atlas.ripe.net
us-dal-as33438.anchors.atlas.ripe.net
salamander.ripe.net
nl-vdm-as49784.anchors.atlas.ripe.net
fr-vbn-as39180.anchors.atlas.ripe.net
br-sao-as52863.anchors.atlas.ripe.net
sa-ruh-as208520.anchors.atlas.ripe.net
kz-tar-as48503.anchors.atlas.ripe.net
jp-tyo-as59105.anchors.atlas.ripe.net
gitlab-runner-006.ripe.net
us-qas-as19750.anchors.atlas.ripe.net

Certificate

The complete raw certificate details for certification-stats.ripe.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9L4eCEWXCggmXYMlcDa
+EvN7Ml4gDypimB+lEVs5lGH+DU1Wc/GSnjFptvKXAgZSBTQ7fw1Tba1mNVrBv+i
2uvxByhLjXmGWTk8uxfjLbqAtpGMNXNvoT55UOxDIy6ObwCVjfgPGObBVGszhrSW
inVWuuG+H5eeiEOIiZkE5xxrcO+L23kEotychW5sGFIqO6GEu4UY5UnXWHQyzMee
e4wHvBF4ibEI9/7+1dK1niJaouGNKKpfHhTJphrLGTRV79iqTBjE04ejOhWriHHp
dFaIHEwqD0JFj8XYhfG+/aJLd40LiVVW9hF+Lwo34u6u//ARDun7PPkd53ls//We
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12600393305971012282104691544710231060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certification-stats.ripe.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21185830401202923847886720198109387523523126772256319253375150367413661798432004066207279560563161268453595465762196458887005660573219605229419965917364052245547369373365242687716562193238952711133634217229070781061262544868340500821225934390187633503307873913352603428712336384339148827160355275769021418421331452628206048668756769823894223336558671044964769463437785312785054913747208077807439480728871853566066624739416715669190410716364055508585844522330226441810846730681152288414672467211057641441688634086829943208322585264994541472746171475421016184885643167869788007966658862651184248506705272644917028822639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							698f6e6fb5ccc10ea45b4d75d97848be6e59f54b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certification-stats.ripe.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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