*.pinxt-sdk-docs.spectrumflow.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:16:55:65:8b:2d:15:6b:08:97:7d:5f:8e:97:bb:9e was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.pinxt-sdk-docs.spectrumflow.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:16:55:65:8b:2d:15:6b:08:97:7d:5f:8e:97:bb:9e
Serial Number (int): 20054382517595147805235389625978567582
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 91:c5:f6:33:f1:6f:a3:36:b0:14:b8:1a:4c:69:0a:ef:b7:6f:a6:c4
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 06:a4:94:b4:0f:3a:25:bf:b0:68:b8:9b:00:4f:0f:73:af:27:03:0a
Fingerprint (sha256): e3:e0:87:16:d9:8a:a1:52:2b:f2:23:17:b9:20:e7:a2:1b:d5:c6:10:ef:bf:d2:bf:cc:6a:4c:3a:8a:92:78:e1

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.pinxt-sdk-docs.spectrumflow.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pinxt-sdk-docs.spectrumflow.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pinxt-sdk-docs.spectrumflow.net

Other certificates including the domain name spectrumflow.net

(limited to 100 certificates)
rancher-waf-test.spectrumflow.net
spectrumflow.net
pagebuilder.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
spice.spectrumflow.net
dynamic-experience-prod-distillery.argo-cd.spectrumflow.net
*.spectrumflow.net
rancher.spectrumflow.net
testrodeo.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
dte-stage.argo-cd.spectrumflow.net
spectrumflow.net
spectrumflow.net
rancher-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
dm-nonprod-eks.argo-cd.spectrumflow.net
backend.testrodeo.spectrumflow.net
*.spectrumflow.net
distillery.spectrumflow.net
uat-business.pci.spectrumflow.net
tdcs-dev.spectrumflow.net
clusters-stable.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvrnew-eks.argo-cd.spectrumflow.net
gitlab.spectrumflow.net
spectrumflow.net
best-slate.spectrumflow.net
rancher.spectrumflow.net
vsi-specflow-entitlements-capiv4.argo-cd.spectrumflow.net
lineups.vsi.spectrumflow.net
fosd.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
ipvs-dev-eks-blue.argo-cd.spectrumflow.net
leo-metadata.argo-cd.spectrumflow.net
epgs-loadtest.argo-cd.spectrumflow.net
slate-tve-engprod.spectrumflow.net
rancher-test-upgrade-argocd.spectrumflow.net
pci.spectrumflow.net
jdtest-cluster-3-capi.spectrumflow.net
rancher.spectrumflow.net
v2.spectrumflow.net
rancher-next-argocd.spectrumflow.net
lantern-dev-capiv5-sf.argo-cd.spectrumflow.net
spectrumreach.ncs.spectrumflow.net
prod.spectrumflow.net
emu.spectrumflow.net
cdvr-mc1.argo-cd.spectrumflow.net
*.qa.mds.spectrumflow.net
rancher-next.spectrumflow.net
transition-meta-toolbox-flow.meta.spectrum.net
rancher-test-upgrade.spectrumflow.net
spectrumflow.net
*.meta.spectrum.net
settings-vhs-capi.spectrumflow.net
nns-search-eks-cluster.argo-cd.spectrumflow.net
vsi-specflow-ipvs-new.argo-cd.spectrumflow.net
ecd2.spectrumflow.net
rancher-argocd.spectrumflow.net
figaro.spectrumflow.net
spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
slate-tve-engprod.argo-cd.spectrumflow.net
ipvs-mc1.argo-cd.spectrumflow.net
focus-stage.argo-cd.spectrumflow.net
dte-stage.spectrumflow.net
pltvspecflow-1-29.argo-cd.spectrumflow.net
testrodeo.spectrumflow.net
neel-test.spectrumflow.net
backend.testrodeo.spectrumflow.net
best-cluster.argo-cd.spectrumflow.net
ipvs-dev-purple.argo-cd.spectrumflow.net
spectrumflow.net
rancher.spectrumflow.net
cewga.spectrumflow.net
cewga.ncs.spectrumflow.net
settings-vhs-poc-capi.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
cewga-ncs-lowers.argo-cd.spectrumflow.net
metadata-epgs.argo-cd.spectrumflow.net
*.tvsdk.spectrumflow.net
rancher-test-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
spectrumflow.net
clusters.spectrumflow.net
*.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
pdetube.spectrumflow.net
cewga.spectrumflow.net
*.pltv.spectrumflow.net
sspp-web-preprod.spectrumflow.net
*.pinxt-sdk-docs.spectrumflow.net
settings-mc1.argo-cd.spectrumflow.net
neel-test.argo-cd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
*.meta.spectrum.net
best-eks-capiv5-sf.argo-cd.spectrumflow.net

Certificate

The complete raw certificate details for *.pinxt-sdk-docs.spectrumflow.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjchwZnJN/xz+VGh0A5Qv
GnV19ITZriT3OrOPph8GuGKPvy7kEIMUnlEcX+/CbOubp4szPIRE5ebAe6w37wUW
rMZhCN11iUFhtmdQv7X7cEkPt7wXOXfLSWeg9aP5ES+q9flC5tfO1/14VpDCN2pc
l40pjf9bklPB0YWBBH64g/7RcnY7Yk3z9XugNigTOe3iryXwmO4kb1E1R0RfhS2s
Q3MQmL3AapOhsdHjDLQ97tk6+GSKSKTj3kt1UcyJ3iU0gUPSbcOoxm69EJBmBqzi
dCaS6qLpI+tkMY5Z2Xsagw+WtDYUpxfCEmf0rkBUhlv15T/TPqE0bxdELS0IcYn6
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20054382517595147805235389625978567582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pinxt-sdk-docs.spectrumflow.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17898441186107083264435895726449367695415933498021551025651745102539495317371605700575467917502692192037165067622099688317338643154982865552774089262891896147009640084999472933884538766671578991638205422901926627672175676997814319064302140577175978615178152011040881971713109790833799148294269104242164405909502507072030728795894081062551260199494611772187087262722875569211886017024722698969643994184882621392700182366450065320311745460238944559743601437868877983350135216893626585372270196146561743806217721591394333179372371951854963897212165509222416662802165225189870766719097404207979330608946729729617950276317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91c5f633f16fa336b014b81a4c690aefb76fa6c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinxt-sdk-docs.spectrumflow.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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