ecdc.europa.eu

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:83:dd:b8:75:cc:f2:ce:df:90:16:02:d8:c4:e0:21 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ecdc.europa.eu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:83:dd:b8:75:cc:f2:ce:df:90:16:02:d8:c4:e0:21
Serial Number (int): 9989283885924296818592245095046897697
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 20:e8:95:67:46:1e:0c:cf:8e:ed:fc:d2:2e:bc:1c:92:c4:d0:08:44
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 1f:46:6c:d4:49:ba:9b:18:8a:fe:ee:b9:92:b3:6f:da:51:fc:56:8b
Fingerprint (sha256): ed:06:0c:9d:0e:dc:d8:8c:4b:f3:ed:f0:81:e4:a7:d9:60:be:00:26:2b:9a:e9:48:c1:6d:e3:40:b9:82:e4:2e

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate ecdc.europa.eu

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecdc.europa.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecdc.europa.eu
*.ecdc.europa.eu
escaide.eu
vaccination-info.eu
*.escaide.eu
*.vaccination-info.eu

Other certificates including the domain name europa.eu

(limited to 100 certificates)
cpvoextranet.cpvo.europa.eu
www.cmfb.europa.eu
esubweb-xcomp.ema.europa.eu
*.frontex.europa.eu
nuclear.jrc.ec.europa.eu
acc.nsl.consilium.europa.eu
prd.frontex.europa.eu
www.easa.europa.eu
vaccination-info.eu
www-s.eige.europa.eu
cyclone.enisa.europa.eu
www-s.eige.europa.eu
ews.eeas.europa.eu
connect19.ca
portal.europol.europa.eu
staging.cedefop.europa.eu
5691420614590464-fe3.pantheonsite.io
clearinghouse-oef.jrc.ec.europa.eu
a-sdw-wsrest.ecb.europa.eu
dns-vetting1j.map.fastly.net
rvd.ema.europa.eu
a-procurement.ecb.europa.eu
fmapps.ema.europa.eu
monthlyanalysis.frontex.europa.eu
euctis-preprod.ema.europa.eu
bauth1.europarl.europa.eu
euctis-uat2.ema.europa.eu
mail.frontex.europa.eu
cbs.easo.europa.eu
nirvana.f4e.europa.eu
erc.europa.eu
sealingservice.grants.ec.europa.eu
a-talent.ecb.europa.eu
*.in.ep.europa.eu
r2.shared.global.fastly.net
odin.jrc.ec.europa.eu
idm.f4e.europa.eu
circulareconomy.europa.eu
opmd.publications.europa.eu
stage.digital-journey.europarl.europa.eu
dev.edpsweb.edps.europa.eu
eulisa.europa.eu
eudravigilance-human-training.ema.europa.eu
sip.cepol.europa.eu
cyclone.enisa.europa.eu
test-eguides.osha.europa.eu
*.eeas.europa.eu
www.bankingsupervision.europa.eu
knowledge-base.inspire.ec.europa.eu
team-europe-partners.network.europa.eu
fch.cust.concepto.ch
*.euipo.europa.eu
cti-chat.enisa.europa.eu
webmail.eca.europa.eu
mobiledw.tech.ec.europa.eu
setis.ec.europa.eu
alumni.europa.eu
stsext.ema.europa.eu
*.stress.ec.europa.eu
biodiversity.europa.eu
us-server2.cedefop.europa.eu
mobile.tech.ec.europa.eu
r2.shared.global.fastly.net
edps.europa.eu
e3p.jrc.ec.europa.eu
eudragmdp.ema.europa.eu
bi.ema.europa.eu
nexus.cis.consilium.europa.eu
cbrne.jrc.ec.europa.eu
owa.ema.europa.eu
aula.frontex.europa.eu
*.fra.europa.eu
*.discomap.eea.europa.eu
a-cms2-ro.ecb.europa.eu
organised-crime-corruption-track-record.ec.europa.eu
sip.era.europa.eu
r2.shared.global.fastly.net
webanalytics.acc.fpfis.tech.ec.europa.eu
ssl861147.cloudflaressl.com
dns-vetting1j.map.fastly.net
webstats.eit.europa.eu
cermit.acceptance.enisa.europa.eu
cewe1.eurojust.europa.eu
e3p.jrc.ec.europa.eu
a-www.ecb.europa.eu
5691420614590464-fe3.pantheonsite.io
enet.cepol.europa.eu
*.cedefop.europa.eu
SafeOnWeb.eurofound.europa.eu
www.eit.europa.eu
jt.ec.europa.eu
www.a-pki.ecb.europa.eu
list.aasc.europa.eu
pgateway.ema.europa.eu
eit.europa.eu
restricted.eurojust.europa.eu
*.cooperation.enisa.europa.eu
esvac-test.ema.europa.eu
esm.europa.eu
epwa.europarl.europa.eu

Certificate

The complete raw certificate details for ecdc.europa.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jsbQ2ExrSRV6MBffDzL
LfYKIoxOTLDNlJpIQ6LaRLczpNe0/8ETHmCq1hIntCOx4xevPyof4NAICj3X/kDd
Hz/vH+oMDUyNsFGsmyjiVH32aQ7N1B1DiHM6xVXvFMS8w8SE4RyRpYA4cnvNEojJ
ZoZR6bfPOgZNlFjmhtEIbhepedALZctf9P2phZPA8U1b8NP3GpYi/j3lsVkPjbJP
kKd138Uk+C1/hDFh4yzVaMgZjylrhKI09zkIP7yk9zN4PqokOabQAZNlDBPGAPeq
WHObqxrez6J8pNYHkuyrBegSeFcYZHGH2UlEhJ/eaTEBQycZ6xoHHR61X6g2vKgo
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9989283885924296818592245095046897697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecdc.europa.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30073863081839436088017120156850042615664691471195327770305002394545567915473870070411676028882320680161346453293519522203936013835748950906235615792016350940839805458202521446464324434874099494632692417937816883238269952712100481412722881773388229435455542152565773107680899854755558516064923304097293119504387386144986983001196315632360452248218211592614367102105010976843163773548047573907142507639620585820043977400828518630097294353814774783839791394419915212368521976674157414773320419719185891837562968756243629434920068772772741449704414408667723212318897675418062322495727445785831194130549044117957146847407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20e89567461e0ccf8eedfcd22ebc1c92c4d00844
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdc.europa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecdc.europa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escaide.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccination-info.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escaide.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaccination-info.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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