portal.eva.travel

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:8d:6a:04:23:39:7b:82:1f:ff:49:3a:f1:e5:7b:f5 was issued on by Amazon.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portal.eva.travel

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:8d:6a:04:23:39:7b:82:1f:ff:49:3a:f1:e5:7b:f5
Serial Number (int): 3392720111855346942477578754473688053
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: fc:bd:80:bc:90:fd:df:02:f2:6c:be:bd:94:e8:29:92:a2:ac:48:93
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c7:67:2c:4d:54:3b:7f:7a:ff:18:01:27:85:71:f3:0a:95:a6:d1:cb
Fingerprint (sha256): f3:e3:c6:2d:86:a6:e0:d1:e1:1c:78:19:8b:25:26:95:b0:09:aa:65:83:26:7d:62:b5:04:91:68:0f:d5:12:15

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate portal.eva.travel

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.eva.travel

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.eva.travel
triptician.in
book.berryjourneys.com
www.byjustravelportal.com
www.triptician.in
businesstravel.sso.satgurutravel.com
gilpinonline.com
corporate.ivyclub.in
royalenfield.portal.eva.travel
berry.signaturejourneys.com
book.parrytravels.com
365.fastcollab.com
eva.sotc.in
visa.udaanindia.com
travel.remitx.com
expocitytravels.in
bookings-in.atpi.com
corp.pawpl.travel
tlcorp.in
www.expocitytravels.in
eva.thomascook.in
www.gilpinonline.com
jetrix.jetwaystravels.com
travel.tvistaholidays.com
www.tlcorp.in
evarane.thomascook.in
eva.icici.thomascook.in
365.yum.fastcollab.com
byjustravelportal.com
businesstravel.satgurutravel.com

Other certificates including the domain name eva.travel

(limited to 100 certificates)
testapps.eva.travel
mobile.eva.travel
dev.portal.eva.travel
api.eva.travel
qa.api.eva.travel
api.eva.travel
portal.eva.travel
qa.portal.eva.travel
qa.portal.eva.travel
portal.eva.travel
dev.portal.eva.travel
portal.eva.travel
dev.portal.eva.travel
portal.eva.travel
portal.eva.travel
uat.api.eva.travel
dev.api.eva.travel
testapps.eva.travel
api.eva.travel
dev.api.eva.travel
portal.eva.travel
qa.portal.eva.travel
uat.mobile.eva.travel

Certificate

The complete raw certificate details for portal.eva.travel in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7sMJcLja10kz2F/t74+
asqo8Le3rPLjb6mBWKaWSIufkND9Fn0oomDFMZTQr3R/duqCGjjk5i8x6KjdW3VP
vEr8g0PFuFaAQ2tZqVeMzf1xwDvxvNHstId3zJx6ISIwzrXsXx52EVHj4tIkdGDs
T9ebf6yx5gY7gwWFnIghcjN5MpHBQhor3thbUNQiWIfXFsR1CviKE6VWvRWJCrVv
g0atYo8g40XX8Fd2z97k+y4sDWIJaQaburZdBp9oyj/zJEFcW8awJbGtjlQbJ7/D
nhIsyUtsyyTAixhKYgOV6ronfkPoYpFxv1KZDF4QohwuRtbQNEchDLY0TUyv1Ayk
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3392720111855346942477578754473688053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.eva.travel'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26223565663859407470987863197162284670044954083596588130469816190838940086982842727051339241770934976980532515560850714925238329626308565210580965030933494166322440811932985749504287288964996924101442623434365320416312988498503980409706407173970362967390734679352868186215283426905927299977384298132383026692833386747747349646731510577267592692048792521995484625290039199124070266386110393903771946332955738016901523556689732859665216129234070453198986614027832774434607614436725231621853532751361692031297601330754796403295856940780744058269638783524389263126528807622198208857604196288032452259122334208948339254349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcbd80bc90fddf02f26cbebd94e82992a2ac4893
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (678 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.eva.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triptician.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.berryjourneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byjustravelportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triptician.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesstravel.sso.satgurutravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilpinonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.ivyclub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalenfield.portal.eva.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berry.signaturejourneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.parrytravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365.fastcollab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva.sotc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visa.udaanindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.remitx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expocitytravels.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings-in.atpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.pawpl.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlcorp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expocitytravels.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva.thomascook.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilpinonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetrix.jetwaystravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.tvistaholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tlcorp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evarane.thomascook.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva.icici.thomascook.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365.yum.fastcollab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byjustravelportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesstravel.satgurutravel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048e956fedfb47dc1779a76ef3a587ec3ffdce4653e862a24be2471a0a15633073c2833169ae1478015c7a359c6530821eead9b87d8bad811c303d26a44dd354b00dd97c75985c27f9b69dbe493514ec77a0235fa49ad384d1757dde33c240bc0d694b175e2c508c99108af915d4d4059579a779fd25546d08cb75faca0aecd2fbaaf4b1637ece1dc726cd5b11d9709785e13bdf87d340828ae03ca0fe4939e6dd4a6609fabe5fb89a7344db334b6676a73c92fc765a0548848dbfb966c326087f9a274c770cc7552c30fb8492f3f5c7142be9da4b0214ade89aab82f61070f82a76762887c6cb03f26c6bb994fc9cfb88abfbef955a00d0ea04eea2f7a18e82b