docmaster01.internalsecure.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:87:a2:90:01:11:ae:19:f4:0e:31:b0:27:14:b1:57 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=docmaster01.internalsecure.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:87:a2:90:01:11:ae:19:f4:0e:31:b0:27:14:b1:57
Serial Number (int): 4691941222799001892513794263591727447
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 93:94:7a:fb:f2:20:88:e7:ea:5d:fa:70:ea:90:28:66:94:8a:7c:0f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 21:9f:48:e6:4f:69:ef:1c:1e:41:90:6b:04:a0:65:a1:db:35:89:f5
Fingerprint (sha256): e2:6b:91:79:95:83:ae:03:22:41:e7:2d:47:b0:64:a3:58:84:23:00:5b:8a:35:a4:43:eb:37:02:40:ac:78:6b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate docmaster01.internalsecure.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for docmaster01.internalsecure.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

docmaster01.internalsecure.com
jenkins-doc01.internalsecure.com
docmaster01.eu-west-1.ele-df.fsapi.com
heldocmaster01.fi.f-secure.com

Other certificates including the domain name internalsecure.com

(limited to 100 certificates)
ulmaster01.internalsecure.com
jenkins-elements02.internalsecure.com
lnxmaster02.internalsecure.com
lardmaster01.internalsecure.com
ocmaster01.internalsecure.com
platmaster01.internalsecure.com
coremaster01.internalsecure.com
itrdmaster01.internalsecure.com
monitoring.sc.internalsecure.com
ertmaster01.internalsecure.com
sonar-premium.fi.f-secure.com
jenkins-staging.internalsecure.com
psbmaster01.internalsecure.com
artifactory-stg.f-secure.com
eppmaster01.internalsecure.com
eppmaster01.internalsecure.com
artifactory.f-secure.com
rdomaster01.internalsecure.com
stash-stg.fi.f-secure.com
rdomaster02.internalsecure.com
cccp01.internalsecure.com
jenkins-wongki-test.internalsecure.com
radarmaster01.internalsecure.com
itrdmaster01.internalsecure.com
rdcmaster01.internalsecure.com
phishdmaster01.internalsecure.com
labsmaster03.internalsecure.com
dsmaster01.internalsecure.com
sammaster01.internalsecure.com
elementsmaster02.internalsecure.com
cccpmaster01.internalsecure.com
elementsmaster01.internalsecure.com
artifactory.f-secure.com
drrdmaster02.internalsecure.com
monitoring.sc.internalsecure.com
stash.f-secure.com
ertmaster01.internalsecure.com
labsmaster01.internalsecure.com
labsmaster02.internalsecure.com
artifactory-stg.f-secure.com
ccptmaster01.internalsecure.com
psbmaster02.internalsecure.com
lbsmaster01.internalsecure.com
jenkins-biz01.internalsecure.com
ltsmaster01.internalsecure.com
cssmaster01.internalsecure.com
docmaster01.internalsecure.com
monitoring.sc.internalsecure.com
prodmaster01.internalsecure.com
drrdmaster01.internalsecure.com

Certificate

The complete raw certificate details for docmaster01.internalsecure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubOIfrYWHftXaUzBUt20
k3XFPscP9GBSzQQcvwF9GY/oBobJzp97zAuMnDfjU44jGDS+OqS0irPhnnZGEDcj
y5JHXhq0KYzY7zTpa9iPjPf4IaYiXeumBUDlLlSoRJRr4YFB9y/zzquAMaPAyE4d
rK8GeBwAHQsLg29Fsg14zLqF8FcFMabminV/6mlppkUcVENG0KYSJuu8gDNzd/ck
mI/8+yx3+/0elnii7TsJFN1havWrt1kIA8XiZ9nESpR3ZN+slpmPcIQlwLhQL6aa
PCKyWYavBg2xACv7SzapTuPXTG9FdR3VcLs5ji92JZEPaP2ziT3eBoAwfx0H1pCV
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4691941222799001892513794263591727447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'docmaster01.internalsecure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23442617531085019694936315711774059850219689107817766854194570549383401563425971968101462107112674002205890472432389031609357546344486661722167105342778071653705206610242924463095646245804748029447189398368040710748528988012614576742360072314674640008071854211346934407781059428109142799700451685660662201495004553504310751067871476443114041634975189275655005582981641826767148367106025153493165898675525456276932893020576203441408470571984802967777705962939791016188278887786141499891428796678212305197227860831230315682458679634509170454520356965184834803368999756035538448089013572934507834338063124213470269052183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93947afbf22088e7ea5dfa70ea902866948a7c0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docmaster01.internalsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins-doc01.internalsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docmaster01.eu-west-1.ele-df.fsapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heldocmaster01.fi.f-secure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00994d3412489a4fd0a6cf38bc14a8b889499ff482c17ec90ddec994dcf9eaa315906ab08bf31b118d82e105fc174a97df4427c9307f35ac13cf6631f466e26cedd85f06b502d1f719cdffe12ac6d07efef8ea71fd5ba11da53115b3a98c409a159e030893a0ff5e9af76668169bf0f66c130c8763c3036af67e5e4f9d24ffe6312baf99d9dd804eaf80b910cb87ab7b7a76d1cb450124d186ec712e3e82f411f6ddde49aabaeecb4235a1109eaef4388cfe24e6e364914819a73384ea6e54e6ee246b88d216dc697a5b4cd41485404846b5b5ec683b89590c45516bdca11141516fb574e10e6e517027322e18ecc1f628f62915714213847f431dd051a6449893