avkn.co

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:63:e6:50:b3:ec:96:3b:77:ee:c5:5b:60:6a:24:1a was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=avkn.co

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:63:e6:50:b3:ec:96:3b:77:ee:c5:5b:60:6a:24:1a
Serial Number (int): 11152532703419948647221703283980248090
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:f2:c6:41:f8:ad:e9:c6:84:ed:fe:c1:06:4e:d7:6c:f1:5e:d1:3d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 35:d8:b6:4c:42:68:c2:82:3e:49:c6:24:d9:9c:10:72:fd:26:7d:dd
Fingerprint (sha256): f1:75:c2:cc:a4:49:da:13:d6:25:5e:04:7a:0e:a5:fc:70:bb:04:af:7e:86:ea:14:ac:61:86:d9:7b:58:8f:10

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate avkn.co

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avkn.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avkn.co
*.api.avkn.co
*.avakin.com
*.avkn.co
*.avakin.life
*.lkwd.net
dev.avkn.co
*.intranet.avkn.co
*.dev.avkn.co

Other certificates including the domain name avkn.co

(limited to 100 certificates)
dev.avkn.co
dev.api.avkn.co
*.avkn.co
avkn.co
avakin.com
avkn.co
avakin.com
avakin.com
avkn.co
avkn.co
tapglue.avkn.co
avkn.co
*.int.prod.avkn.co
tapglue.avkn.co
avkn.co
avakin.com
tapglue.avkn.co
avakin.com
avkn.co
*.avkn.co
avkn.co
avkn.co
dev.avkn.co
avakin.com
*.avkn.co
*.lkwd.net
tapglue.avkn.co
tg.dev.avkn.co
*.avkn.co
avkn.co
avkn.co
avkn.co
avkn.co
avakin.com
*.avkn.co
tg.dev.avkn.co
avkn.co
dev.avkn.co
avkn.co
tapglue.avkn.co
*.avkn.co

Certificate

The complete raw certificate details for avkn.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NxBQY+6rkEIjJBIqO7d
xDwuXYU3nWxDg20ytGT43yAS1FuWJArmHxXsnEO3Z0JchT2DumW/8/WVhCjdwnQ4
NZCsmSmQWgwHtfNpZZxipaTh3tMbsY31+RmQrponqOruAYgEUC7+Y4UO8Hg3P7sf
/36MJpIeY35uiTNhTL9uNuPyppi6ubjyNmMZBTWwxPcQVd+SdHqjJEz+f63R0As3
2gKBBiSaVYmZLpjUmIwvrfNJ0HzWYV/fB5eADM8evDqjpJUAM+fItoi4abrjEhQa
TwaUotrUMSIF7elcrOSe+BDMlS1ffAP4FWX+yHZTvTK3hRdR68MyIGABHyx+FFo1
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11152532703419948647221703283980248090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avkn.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27881038835011280355662693710343741285663554867897143389795504308735641207703917963895949090089848838023262032366865991610423358227692228165864752582358875762886318578043702978192590127988241711102457797995356972347046101778873149513422146909069410016431407610060100140378198691368156118006599381563198670069604777360220877979643394045629486970907112017528668776842257314531188995749584877508733159203429020544403623991936982096780490510500678842270740670901773872852519094638725207998365454056767098742493620305326164631924595606377499310278007696769069381603927616516444897248593331801593571167687759592384859092327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2f2c641f8ade9c684edfec1064ed76cf15ed13d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avakin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avakin.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intranet.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.avkn.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018f466085d80000040300483046022100938bc18380726f2f17ec8de5d29bbf858e40d24aec4953b58c8c544c920491990221009dec3a3a99406719d11bf98e87f3187d2bd599a922a01f7b8caac23f52f86b750075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018f4660855e0000040300463044022014550e647f453a53c404c81a29832f755f6a65f5f3a439eceb6e2b292255a50602202882a5565a0670932f0a41b61b6d344b2d7e085d951d0c4aecee01a5b3ec914c007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018f4660857e0000040300473045022047f1552c40885abde8166ba057b8a1e9edab8f67ee01f3e7e8468430dc0fe7c6022100d5d4680def53e5aea022fb6c67f5453fc8991166fb80ed0c126474f20ffb9765
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0031447c327a3043e5c6513ce3614169fe54988b7b79fa11c3ee671b83b8618c2457b007e0cf14be25b8c9fb62a687a2cd326ed2e60c88f04933654cc51d9af73a757416451b6bd2aa070fa08946e3ba0572f375c639e988da21eaf5caabb6a80fc819fdebd40e2b8d2a8b15c5f28bcef5794e6ad5aaf1543f1721c3bbbe3fe06808b929179efed668db61d36d57f5c40faa5a9a3096d0b474b95de1362ec8151e383ba4ba03253f18357aecd8e6d36a8af7e570e81113fcd7065e1043550d4062af25dbc9ff6ab77c152f3027e73a9821dd6ecde899c23b98eb9d7686425f2b9a86b8a55d38fd195329ebee5e83ea1f4d8009bca4151b1c60b8e0434bc77f8e37