api-channels-service-internal-rvk.dev.tivoservice.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:5f:c0:a5:29:24:4a:00:ba:65:59:34:4d:3d:76:ab was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-channels-service-internal-rvk.dev.tivoservice.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:5f:c0:a5:29:24:4a:00:ba:65:59:34:4d:3d:76:ab
Serial Number (int): 9801771480078691910106393746859718315
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a8:d3:b5:c5:83:5b:3a:19:62:31:46:92:55:94:0e:9c:35:0f:46:9b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3a:d3:4e:ac:22:71:f9:2c:67:2f:e5:83:e9:8b:b1:6c:a9:71:f4:d1
Fingerprint (sha256): e5:76:1f:75:0f:cf:cd:af:78:4a:69:30:2d:b6:00:49:c2:bd:e0:9e:27:7f:e6:f5:33:e7:d9:23:9c:b9:17:22

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate api-channels-service-internal-rvk.dev.tivoservice.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-channels-service-internal-rvk.dev.tivoservice.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-channels-service-internal-rvk.dev.tivoservice.net

Other certificates including the domain name tivoservice.net

(limited to 100 certificates)
cc-branding-service-pr-192-4.dev.tivoservice.net
api-cloudcore-onepass-internal-snemtisor.dev.tivoservice.net
entitlement-dispatcher-pr-59-1.dev.tivoservice.net
pr-80-7-mock.anon-apigw.dev.tivoservice.net
fanhattan.tivoservice.net
api-callback-policy-master-84.dev.tivoservice.net
api-service-registry-internal-pr-176-1.dev.tivoservice.net
api-callback-policy-pr-66-2.dev.tivoservice.net
tdc-mock.anon-apigw.dev.tivoservice.net
cc-branding-service-usharma.dev.tivoservice.net
pr-85-4-mock.anon-apigw.dev.tivoservice.net
api-channels-service-internal-pr-96-60.dev.tivoservice.net
atlantis-ext.ue1.tivocloud.tivoservice.net
api-service-registry-internal-pr-43-11.dev.tivoservice.net
pr-116-1-1.anon.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-10-5.dev.tivoservice.net
api-callback-policy-pr-53-11.dev.tivoservice.net
fanhattan.tivoservice.net
jenkins-cloud.engr.tivoservice.net
api-service-registry-internal-pr-175-1.dev.tivoservice.net
api-channels-service-internal-pr-154-2.dev.tivoservice.net
atlantis-ext.ue1.tivodev.tivoservice.net
api-cloudcore-rating-lambda-pr-40-1.dev.tivoservice.net
atlantis-ext.ue1.tivodev.tivoservice.net
*.sls.tivoservice.net
sls-production.tivoservice.net
pr-77-1.anon.dev.tivoservice.net
pr-80-8-mock.anon-apigw.dev.tivoservice.net
pr-85-1-mock.anon-apigw.dev.tivoservice.net
pr-116-1-ng.anon.dev.tivoservice.net
atlantis-ext-tivodev-ue1.tivodev.tivoservice.net
jackowski-vault-test-vewd-vault.dev.tivoservice.net
pr-78-1.anon.dev.tivoservice.net
pr-80-3-mock.anon-apigw.dev.tivoservice.net
atlantis-ext-ue1.tivodev.tivoservice.net
api-messaging-interface-pr-106-3.dev.tivoservice.net
api-authservice-proxy-pr-1-2.dev.tivoservice.net
api-channels-service-internal-pr-156-2.dev.tivoservice.net
api-service-registry-internal-pr-20-20.dev.tivoservice.net
main-293-mock.anon-apigw.dev.tivoservice.net
pr-80-2-mock.anon-apigw.dev.tivoservice.net
api-service-registry-internal-main-105.dev.tivoservice.net
api-cloudcore-partnerinfo-lambda-pr-45-8.dev.tivoservice.net
pr-85-2-mock.anon-apigw.dev.tivoservice.net
api-channels-service-internal-pr-153-2.dev.tivoservice.net
api-channels-service-internal-pr-137-13.dev.tivoservice.net
api-channels-service-internal-pr-142-10.dev.tivoservice.net
atlantis-rob-test.tivoservice.net
api-channels-service-internal-master-162.dev.tivoservice.net
pr-116-1.anon-apigw.dev.tivoservice.net
api-service-registry-internal-pr-174-1.dev.tivoservice.net
api-channels-service-internal-pr-152-2.dev.tivoservice.net
api-cloudcore-onepass-internal-main-14.dev.tivoservice.net
entitlement-dispatcher-pr-134-8.dev.tivoservice.net
atlantis-ext-tivocloud-ue1.tivocloud.tivoservice.net
api-onepass-odau-service-pr-56-1-1-int.dev.tivoservice.net
api-softclient-cert-pr-217-1-private.dev.tivoservice.net
atlantis-rob-test.tivoservice.net
api-channels-service-internal-pr-156-1.dev.tivoservice.net
api-cloudcore-partnerinfo-lambda-main-45.dev.tivoservice.net
atlantis-ext.ue1.fanhattan.tivoservice.net
api-service-registry-internal-pr-177-1.dev.tivoservice.net
deptrack.engr.tivoservice.net
inception-serverless-atlantis-d.tivoservice.net
atlantis-ext-ue1.tivocloud.tivoservice.net
dacs-pr-24-1.dev.tivoservice.net
main-294-mock.anon-apigw.dev.tivoservice.net
api-excluded-partners-lambda-int-stable.dev.tivoservice.net
jenkins-qe.engr.tivoservice.net
api-channels-service-internal-pr-108-32.dev.tivoservice.net
tivodev.tivoservice.net
api-service-registry-internal-pr-170-2.dev.tivoservice.net
pr-80-4-mock.anon-apigw.dev.tivoservice.net
api-cloudcore-bookmarks-internal-snemtisor.dev.tivoservice.net
jackowski-vault-test-vewd-vault.dev.tivoservice.net
tivodev.tivoservice.net
api-kafka-indexer-apigw-stable-1.dev.tivoservice.net
jenkins-tcd.engr.tivoservice.net
user-catalogue.dev.tivoservice.net
atlantis-ext-ue1.fanhattan.tivoservice.net
tivodev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-10-3.dev.tivoservice.net
inception-serverless-atlantis-d.tivoservice.net
api-service-registry-internal-main-103.dev.tivoservice.net
api-authservice-proxy-pr-1-1.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-10-4.dev.tivoservice.net
entitlement-dispatcher-pr-59-2.dev.tivoservice.net
fanhattan.tivoservice.net
messaging-targeting-info-pr-38-7.dev.tivoservice.net
cc-branding-service-usharma.dev.tivoservice.net
api-cloudcore-onepass-internal-pr-10-8.dev.tivoservice.net
cc-branding-service-pr-192-3.dev.tivoservice.net
api-service-registry-internal-pr-42-10.dev.tivoservice.net
api-onepass-odau-service-main-53-1-int.dev.tivoservice.net
entitlement-dispatcher-pr-60-1.dev.tivoservice.net
api-cloudcore-onepass-internal-pr-10-9.dev.tivoservice.net
api-cloudcore-onepass-internal-snemtisor.dev.tivoservice.net
api-service-registry-internal-main-104.dev.tivoservice.net
tdevittcarol-mock.anon-apigw.dev.tivoservice.net
tivodev.tivoservice.net

Certificate

The complete raw certificate details for api-channels-service-internal-rvk.dev.tivoservice.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYedn65f354oOeH6380N
/6fN1bS60mWzH1cxLq2eDybbmSotNyet5zurVkomr/jkGIO9Vl1nGDvzlS5GTCLz
ObkjKvB7Ms0buTWZeqpaLtB1X0qs2YZvyBMRdSj8JepEnW5ACdF4f6tUW3I4X1bc
qyhR471nrkJ4RQ9Ra+s5wvxCl/+3S1uhuYnSIvS33Um29HUEJc3Wj3d8D49/rlZk
nNljOzOWlzh2tONRmtOoMJYGq7RDjhdWZFcYWJg6zT+dP0MU3LnwPz6WYR5yXgn8
RP2JyR5EOUnv+JMVnH9Fp/6mjq9w1WS2gvRv7iECjtaC2zK797Ds0e0r/Jd8NeC+
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9801771480078691910106393746859718315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-channels-service-internal-rvk.dev.tivoservice.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21401148142157227931609668687990611539672590419086975304285674294888024677270011847912062643844580830006634352225725443075989336080717605430173138245019251211207731829797619306568061319936695052579950018395759177014356862162153818120467059299277405983000294497649819841759659342272413372239785870775037428304247330785603454901796055896061974828673984763084350742941998454720819118101014189398048126770539405017603063469984349010525088536171275317866989971446210813714594850937117013638745875137970290263595699293752553659354502876700152413691700105335962248719454762788530751592688149856304273261875868350161031839303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8d3b5c5835b3a196231469255940e9c350f469b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-channels-service-internal-rvk.dev.tivoservice.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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