cdn.hastens.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 03:8f:ae:3a:c4:c7:58:ed:e1:e4:38:b2:ea:2f:1c:4d was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.hastens.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:8f:ae:3a:c4:c7:58:ed:e1:e4:38:b2:ea:2f:1c:4d
Serial Number (int): 4733716233529747307069609371266653261
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 46:85:59:dd:a8:87:05:83:ab:aa:1c:29:00:ce:ba:fb:40:a2:12:42
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 6b:2f:fe:d9:83:05:f1:c2:6c:9f:f9:2d:20:48:4d:22:80:1e:06:0a
Fingerprint (sha256): c9:db:25:49:d3:c0:77:f2:a4:6f:08:65:14:33:1f:09:14:c3:c0:6b:a1:50:7a:a4:70:73:20:87:48:0d:18:b6

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate cdn.hastens.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.hastens.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.hastens.com

Other certificates including the domain name hastens.com

(limited to 100 certificates)
mdm.hastens.com
stable-stage.hastens.com
polo.hastens.com
akamai-san59.exacttarget.com
hastens.com
stable-stage.hastens.com
akamai-san59.exacttarget.com
checkin.hastens.com
click.mc.hastens.com
hastens.com
stable-stage.hastens.com
link.seven.app
checkin.hastens.com
hastens.com
hastens.com
cloud.mc.hastens.com
hastens.com
career.hastens.com
coper.hastens.com
hastens.com
hastens.com
hastens.com
akamai-san59.exacttarget.com
www.hastens.com
career.hastens.com
hastens.com
app.orderbit.co
stable-stage.hastens.com
coper.hastens.com
hastens.com
hastens.com
hastens.com
career.hastens.com
click.mc.hastens.com
career.hastens.com
akamai-san59.exacttarget.com
career.hastens.com
hastens.com
career.hastens.com
stable-v2.hastens.com
view.mc.hastens.com
career.hastens.com
*.hastens.com
hastens.com
cdn.hastens.com
hastens.com
www.hastens.com
hastens.com
akamai-san59.exacttarget.com
stable-stage.hastens.com
akamai-san59.exacttarget.com
stable.hastens.com
career.hastens.com
hastens.com
checkin.hastens.com
hastens.com
coper.hastens.com
app.orderbit.co
hastens.com
career.hastens.com
hastens.com
hastens.com
checkin.hastens.com
hastens.com
hastens.com
coper.hastens.com
akamai-san59.exacttarget.com

Certificate

The complete raw certificate details for cdn.hastens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5eDdwxkTHfKNBtGw3jk
s6JT8H0FlCv8bCM5un6Z8vmMe68KI3w9A+I7z38vSsWP1ft0S7t61F8YBLJyPKoe
RbLqO6ADsIaSmYYfe5F7za0DiQMVj1iQrhqFHQXqL7D8ivKGAUiPsoXHcK+jE+3V
w9OBc99JG5Ut+QRQdpRp7asfpIN7q9fyfwflmWQRkKmlNEA+7Mdu/am6UOl0xQg8
L6eF7FTKbPkAIv3tBCse7cOGlWqnoZH0I3PhhLI2KRIcx3S5Qv/2X7js1fT/+iKW
IG9Xw4y9AKM1Ntrjd0rUonullQ3uXVk3BnJ2eBRDvs383svpIIp2IZLxR4Fps3Cx
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4733716233529747307069609371266653261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.hastens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16611932059435442217697211212614645809038624687498931463073437682255731036983170392216980067817922504587763213696286862801368479861428583426773716835102299848567326701980894273031591716843559667467383372878740642320896196872650280556050580090771284068438824258197352424452492683901851214887098845510094708849883428163146485348965498824966911052043112095186361505054443825994619229773847433630696936847940359655912899671545118980908974131163810773353374796605452649837166384809906185797327440362468970570401179065785444109838600240344347506772807352983641511546158453147295517058671613497523565300381695934364971479493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							468559dda8870583abaa1c2900cebafb40a21242
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.hastens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001898fbf88b7000004030047304502210094bd310668414e73c4181041d7afb08825dc38871effda66438afcb36c21fbd7022026f288e087a529b52d5314665eecc25986da99264115902f90d1a90d3cbcdbae00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001898fbf885c0000040300483046022100d3eabac13d2d88cf0cf1cad175292d38c1d5f24972fd7a77876909ed2dc419e4022100cc114c87ecee8f6ee0fe3976851693b51322b9e0447c21fcfa5b23baf26b3fde007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001898fbf884100000403004830460221008723c24fa1865b840c2706274b830f8881075812e5ee536df332755b94d34d3d022100ee33849e3c8e7a828a51ff99ea6b61f839519b00e69c3aebaa1420859da5d2bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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