*.subsplash.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:ff:eb:30:74:93:5f:d9:cf:96:bf:68:81:f6:01:af was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.subsplash.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:ff:eb:30:74:93:5f:d9:cf:96:bf:68:81:f6:01:af
Serial Number (int): 17279541853632456224835862121437069743
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: de:f4:62:39:c6:dd:45:f5:cf:1d:d9:ff:21:2a:26:57:36:a0:37:1c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): af:b8:26:bd:2f:4c:20:76:e7:e1:36:62:6e:36:a8:be:03:81:b3:31
Fingerprint (sha256): d4:f5:00:44:9d:cb:64:35:f8:12:a1:cd:0e:0a:fb:f5:6b:0d:2c:9b:3d:1a:fe:21:ec:19:43:e6:7d:14:e7:70

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.subsplash.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.subsplash.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.subsplash.net

Other certificates including the domain name subsplash.net

(limited to 100 certificates)
*.giving.subsplash.net
*.stage.subsplash.net
*.giving.subsplash.net
wallet.subsplash.com
*.stage.subsplash.net
core.dev.subsplash.net
*.subsplash.net
wallet.subsplash.com
subsplash.net
wallet.subsplash.com
*.dev.giving.subsplash.net
*.docs.subsplash.net
wallet.subsplash.com
*.stage.giving.subsplash.net
*.subsplash.io
dev.subsplash.net
*.core.stage.giving.subsplash.net
*.stage.subsplash.net
core.stage.subsplash.net
*.stage.giving.subsplash.net
*.stage.subsplash.net
core.stage.subsplash.net
*.dev.subsplash.net
subsplash.net
wallet.subsplash.com
wallet.subsplash.com
*.stage.subsplash.net
wallet.subsplash.com
subsplash.net
*.stage.giving.subsplash.net
*.dev.giving.subsplash.net
*.stage.giving.subsplash.net
*.giving.subsplash.net
*.subsplash.net
core.dev.subsplash.net
*.docs.subsplash.net
dev.subsplash.net
*.dev.subsplash.net
*.dev.giving.subsplash.net
*.dev.giving.subsplash.net
*.docs.subsplash.net
natetest.subsplash.net
*.stage.subsplash.net
*.dev.subsplash.net
*.giving.subsplash.net
*.stage.subsplash.net
*.dev.subsplash.net
wallet.subsplash.com
core.stage.subsplash.net
*.subsplash.io
wallet.subsplash.com
*.stage.subsplash.net
*.stage.subsplash.net
core.sandbox.subsplash.net
*.docs.subsplash.net
subsplash.net
*.subsplash.net
subsplash.net
stage.subsplash.net
wallet.subsplash.com
*.stage.giving.subsplash.net
*.stage.subsplash.net
*.subsplash.net
*.dev.giving.subsplash.net
core.stage.subsplash.net
subsplash.net
stage.subsplash.net

Certificate

The complete raw certificate details for *.subsplash.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7tIo6KH17QuY8VFX4NE
jr5hKUJV9fkTjuIxNhEsT3JprHp6XDUsCfcGOs9d8tR7djH1mEE6xoND5NJGCZUj
KVleNNbH7FMGPqfztr9cPlU9H0kjhXnqAOsGk+ZGf1CL/biEOGpBrLTZraGhnEnD
gp/ZDOup8ASm1Bt7vkm97Bn7Dvc39IuTc+FPOSVR4TKCFd+kxE+ctBIc3zEMw424
5ex3xoP3ZEldWtId+7JvOh24pvF48LIJdZGOCA2Ze87Cn4G/kZg+WvSeUN2DnYRi
3D8rMbw0jVwwMIcC3OP62KG0qnwXeEOMLv4bl1T0NounCxtAOXUzpHUCx/AeMiZc
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17279541853632456224835862121437069743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.subsplash.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20669196767094845183760610005718450365356533321132218928090559509246291314171617249460043169822649646930774347872126143982211694064955597761632516891885037347656163146398842837083427726523309390479616494642179089643876753203352415778124926458579374838385190029724556527290067054451067143529203070889984915452835114751391885179343093051581629005895580833854551568020691683655243146822372523965714017893079863976526402604744432671122226364898549423567825013358800895827795384328473282446283641051913019082734700014632073053808682410393538385374729742881016472058652536486923413479354114643562130310139527511744052616373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							def46239c6dd45f5cf1dd9ff212a265736a0371c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subsplash.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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