staging-api-dmp.ovio.org
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0e:90:22:c0:07:40:2f:8b:d8:8b:3a:89:7e:d7:ac:43 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging-api-dmp.ovio.org
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:90:22:c0:07:40:2f:8b:d8:8b:3a:89:7e:d7:ac:43Serial Number (int): 19357587504595555146839425045690297411
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a7:c5:ce:bb:1d:cd:03:a5:47:71:1e:95:4b:1f:bf:fd:04:fd:50:7d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 2c:89:f2:b8:c2:f5:c0:c7:22:02:6f:51:ce:1c:60:bf:09:c6:e8:d2
Fingerprint (sha256): d7:9a:10:73:59:e8:c2:64:59:8b:7d:12:a8:ff:54:b2:80:9b:97:28:8d:18:06:68:72:3d:ce:67:4f:58:39:0b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate staging-api-dmp.ovio.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging-api-dmp.ovio.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging-api-dmp.ovio.org
Other certificates including the domain name ovio.org
(limited to 100 certificates)
nanitetracker.com
grandma.digital
vendor.staging.tilly.cc
vendor.staging.tilly.cc
www.expresstrainroute.com
console.riskut.com
sensorfusion.tech
www.puzz.site
test.aspeppc.com
lel.28east.co.za
app.inata.trade
*.dmp.ovio.org
grandma.digital
embargoeddata.rightstracker.org
www.crisanger.cf
bender.brennaswitzer.com
quote.stge.keap.page
flexiecms.ml
blog.datacompass.com.br
www.titan2u.com
carnes.lupi.delivery
jackwgray.com
www.expresstrainroute.com
ovio.org
leetprism.co.za
cms.dimbong.com
sni.cloudflaressl.com
emma-igarashi.art
mugprinting.in
quiz.ennea.co.uk
pinpointdev-lmaa.cox2m.com
www.crisanger.cf
staging-api-dmp.ovio.org
sni.cloudflaressl.com
ovio.org
ovio.org
nevada.enotice.io
www.link2dreams.com
console.riskut.com
menab.co
www.temelbilgisayar.com
ovio.org
nannyintheair.com
test-admin.amoganardinero.com
www.titan2u.com
www.toonlens.com
www.link2dreams.com
staging-api-dmp.ovio.org
www.liquidgov.com
portal.freeyourgenome.com
www.ovio.org
cms.dimbong.com
app.t.at
www.liftwy.com
drip.danielangel.co
santoso.hendranata.com
www.artesaniasjpf.com
artilux-client.lychee.pro
www.bernardobernal.com
embargoeddata.rightstracker.org
live.edge.topia.tv
drip.danielangel.co
geekpaul.com
menu.sunsetdiner.ca
test-admin.amoganardinero.com
www.pif.vc
staging-api-dmp.ovio.org
www.abhiyanthindia.com
www.roboair.com
flexiecms.ml
ovio.org
staging-api-dmp.ovio.org
ovio.org
themanuskitchen.com
staging-api-dmp.ovio.org
nevada.enotice.io
grandma.digital
artilux-client.lychee.pro
www.puzz.site
grandma.digital
www.pif.vc
staging-api-dmp.ovio.org
grandma.digital
vendor.staging.tilly.cc
vendor.staging.tilly.cc
www.expresstrainroute.com
console.riskut.com
sensorfusion.tech
www.puzz.site
test.aspeppc.com
lel.28east.co.za
app.inata.trade
*.dmp.ovio.org
grandma.digital
embargoeddata.rightstracker.org
www.crisanger.cf
bender.brennaswitzer.com
quote.stge.keap.page
flexiecms.ml
blog.datacompass.com.br
www.titan2u.com
carnes.lupi.delivery
jackwgray.com
www.expresstrainroute.com
ovio.org
leetprism.co.za
cms.dimbong.com
sni.cloudflaressl.com
emma-igarashi.art
mugprinting.in
quiz.ennea.co.uk
pinpointdev-lmaa.cox2m.com
www.crisanger.cf
staging-api-dmp.ovio.org
sni.cloudflaressl.com
ovio.org
ovio.org
nevada.enotice.io
www.link2dreams.com
console.riskut.com
menab.co
www.temelbilgisayar.com
ovio.org
nannyintheair.com
test-admin.amoganardinero.com
www.titan2u.com
www.toonlens.com
www.link2dreams.com
staging-api-dmp.ovio.org
www.liquidgov.com
portal.freeyourgenome.com
www.ovio.org
cms.dimbong.com
app.t.at
www.liftwy.com
drip.danielangel.co
santoso.hendranata.com
www.artesaniasjpf.com
artilux-client.lychee.pro
www.bernardobernal.com
embargoeddata.rightstracker.org
live.edge.topia.tv
drip.danielangel.co
geekpaul.com
menu.sunsetdiner.ca
test-admin.amoganardinero.com
www.pif.vc
staging-api-dmp.ovio.org
www.abhiyanthindia.com
www.roboair.com
flexiecms.ml
ovio.org
staging-api-dmp.ovio.org
ovio.org
themanuskitchen.com
staging-api-dmp.ovio.org
nevada.enotice.io
grandma.digital
artilux-client.lychee.pro
www.puzz.site
grandma.digital
www.pif.vc
staging-api-dmp.ovio.org
Certificate
The complete raw certificate details for staging-api-dmp.ovio.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEbzCCA1egAwIBAgIQDpAiwAdAL4vYizqJftesQzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDUyMzAwMDAwMFoXDTI0MDYyMDIzNTk1OVowIzEh MB8GA1UEAxMYc3RhZ2luZy1hcGktZG1wLm92aW8ub3JnMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA6GsSHrQcirMMySPuhjs4l+vyDWbmtL3QoBXhMf+r bByzCZXpg9uHN3ra4NF7MksfS/fFuA0/l/T3+0kO4xFbqdzUgsjLi0+PLY+2C5u8 bzlsN+AxlMnPRixbqJykLzdNxBnmHZou5kKEsRmKU1cL+knThqercRXuaLonC8Kp 50iDmDHHJJs22ZO4FmGqSd1Qn0DIxqIBRc7ir161cWVn+Zdh7Ba1HpKfQcRlYLFo swgrxtdSjh87B8BFpeJIGTyNrrmXfbJHhKvEXFBE6hzspqSXBpKXUpZdfoxhupcK zORoSALBR8FZmM8JZeHXjRQsk5xgicSn3IIQ9oFKvmZ3RQIDAQABo4IBhDCCAYAw HwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFKfFzrsd zQOlR3EelUsfv/0E/VB9MCMGA1UdEQQcMBqCGHN0YWdpbmctYXBpLWRtcC5vdmlv Lm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1 c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcB AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0 LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5j b20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAFlQEAhKQyHN9RKM40tMDVjW27cuvfG/vMz875n2 8zORiEfmvpZnRdjRvEIyxQd6bcVVJox/iWx9JNw3HmiBFJDF+6d5MdAILjtPMG0z nOpDOKkqU6gzmzXK3ucxo9FDZX3yz0jcEXqMxKpNAiPA/5NMi71LnQVLZG/SjbTZ /aeSKDfXQsmRcNaeJhrUzCZ+hQUGfNQhJKM+ekUGRlLXwazQfjptHI0ypRvWHz5N 6Vm7k2LYL2tjJkSxSabAheCjw4ZKBI3AggPpLoPAeXf6araJ47LP3rkDmE0hEgyx OXWJiOFOxtp0BBtumr6OiS7ZFr3whVCOcXKTHM8Ub4J7U6E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GsSHrQcirMMySPuhjs4 l+vyDWbmtL3QoBXhMf+rbByzCZXpg9uHN3ra4NF7MksfS/fFuA0/l/T3+0kO4xFb qdzUgsjLi0+PLY+2C5u8bzlsN+AxlMnPRixbqJykLzdNxBnmHZou5kKEsRmKU1cL +knThqercRXuaLonC8Kp50iDmDHHJJs22ZO4FmGqSd1Qn0DIxqIBRc7ir161cWVn +Zdh7Ba1HpKfQcRlYLFoswgrxtdSjh87B8BFpeJIGTyNrrmXfbJHhKvEXFBE6hzs pqSXBpKXUpZdfoxhupcKzORoSALBR8FZmM8JZeHXjRQsk5xgicSn3IIQ9oFKvmZ3 RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19357587504595555146839425045690297411 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging-api-dmp.ovio.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29340085322065933155824976563876294344020200052294943694326133456395830219401817960720241795819839876812793838964566015399263171826683382836689923323457270315056213820325453533208255403597287131294705059834218757195744721282633973976458350363154646494110089162343791713165510872540886121242953759641697124082835191243770181099869019630677585174215160021166384436996373164547747467334035640170258216490464190273828567612080842421449455537698722597554737220039778393111159146712397368028919690894879957037692762915904998518594038672260577245909725168808133610695829650850998299438966496736126176129347418451588952782661 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a7c5cebb1dcd03a547711e954b1fbffd04fd507d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api-dmp.ovio.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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