*.paijat.prod.bh.mehilainen.care

Issued by Amazon RSA 2048 M02

About this X.509 Certificate

This digital certificate with serial number 06:44:c9:7b:2f:69:e5:96:f2:dc:32:bd:ea:f4:04:6a was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser. It's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.paijat.prod.bh.mehilainen.care

Amazon

Organization: Amazon
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 06:44:c9:7b:2f:69:e5:96:f2:dc:32:bd:ea:f4:04:6a
Serial Number (int): 8332530685158003635530514057405924458
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 18:e9:5a:58:1a:98:9d:46:a3:b4:04:26:6b:c8:a4:e2:94:df:8b:f4
Authority Key Identifier: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (SHA-1): 96:94:f9:03:a6:90:ef:31:91:48:57:44:1d:85:8c:54:78:72:a5:07
Fingerprint (SHA-256): f4:a0:ca:5d:b8:d1:9b:8c:d2:66:34:f8:64:d9:4d:db:e0:84:7e:ba:52:d6:5f:c3:6c:39:4b:82:1e:f2:7d:5b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation Information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.paijat.prod.bh.mehilainen.care
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.paijat.prod.bh.mehilainen.care

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.paijat.prod.bh.mehilainen.care

Other certificates including the domain name mehilainen.care

(limited to 100 certificates)
beeweb.dev.mcsa.az.bh.mehilainen.care
ld-relay.stag.mcme.az.bh.mehilainen.care
auth-api.prod.aeznl.az.bh.mehilainen.care
beepro.paijat.dev.bh.mehilainen.care
auth-api.stag.aeznl.az.bh.mehilainen.care
beepro-api.stag.hl.az.bh.mehilainen.care
beepro-api.prod.giddy.az.bh.mehilainen.care
beepro-api.dev.hl.az.bh.mehilainen.care
integrations-api.stag.aeznl.az.bh.mehilainen.care
customer-api.stag.giddy.az.bh.mehilainen.care
assets.bearit.stag.bh.mehilainen.care
beepro-api.dev.mcme.az.bh.mehilainen.care
*.test.mdh.mehilainen.care
beepro-api.dev.aeznl.az.bh.mehilainen.care
beepro-api.dev.giddy.az.bh.mehilainen.care
beepro-api.stag.mcme.az.bh.mehilainen.care
integrations-api.prod.mcsa.az.bh.mehilainen.care
auth-api.prod.hl.az.bh.mehilainen.care
integrations-api.stag.mcme.az.bh.mehilainen.care
integrations-api.stag.mcme.az.bh.mehilainen.care
beeweb.stag.mcme.az.bh.mehilainen.care
assets.cluster-limits1.dev.bh.mehilainen.care
auth-api.prod.hl.az.bh.mehilainen.care
practitioner-api.prod.mcsa.az.bh.mehilainen.care
customer-api.prod.hl.az.bh.mehilainen.care
integrations-api.prod.mcme.az.bh.mehilainen.care
survey-api.prod.hl.az.bh.mehilainen.care
beepro.stag.mcsa.az.bh.mehilainen.care
survey-api.prod.giddy.az.bh.mehilainen.care
auth-api.stag.mcme.az.bh.mehilainen.care
*.k.stag.mdh.mehilainen.care
integrations-api.dev.mcsa.az.bh.mehilainen.care
auth-api.dev.hl.az.bh.mehilainen.care
*.prod.mdh.mehilainen.care
survey-api.dev.mcsa.az.bh.mehilainen.care
relay.stag.mcme.az.bh.mehilainen.care
beeweb.sibylle.prod.bh.mehilainen.care
beepro.lusote.stag.bh.mehilainen.care
beeweb.hakeem.dev.bh.mehilainen.care
digiclinic-api.stag.mcme.az.bh.mehilainen.care
beepro.stag.mcsa.az.bh.mehilainen.care
auth-api.prod.mcsa.az.bh.mehilainen.care
auth-api.prod.mcsa.az.bh.mehilainen.care
assets.bearit.stag.bh.mehilainen.care
beeweb.sibylle.prod.bh.mehilainen.care
*.ephemeral.stag.bh.mehilainen.care
integrations-api.dev.mcsa.az.bh.mehilainen.care
careplan-api.prod.mcsa.az.bh.mehilainen.care
beepro-api.prod.mcsa.az.bh.mehilainen.care
beepro-api.stag.giddy.az.bh.mehilainen.care
beepro-api.stag.mcme.az.bh.mehilainen.care
customer-api.prod.mcme.az.bh.mehilainen.care
customer-api.stag.giddy.az.bh.mehilainen.care
auth-api.stag.mcme.az.bh.mehilainen.care
survey-api.dev.mcsa.az.bh.mehilainen.care
beeweb.dev.hl.az.bh.mehilainen.care
assets.dev.mcsa.az.bh.mehilainen.care
assets.prod.mcme.az.bh.mehilainen.care
survey-api.dev.hl.az.bh.mehilainen.care
survey-api.dev.hl.az.bh.mehilainen.care
beepro-api.dev.aeznl.az.bh.mehilainen.care
customer-api.prod.hl.az.bh.mehilainen.care
auth-api.dev.hl.az.bh.mehilainen.care
beepro.cluster-limits6.dev.bh.mehilainen.care
assets.bearit.prod.bh.mehilainen.care
auth-api.dev.hl.az.bh.mehilainen.care
survey-api.stag.giddy.az.bh.mehilainen.care
ld-relay.prod.hl.az.bh.mehilainen.care
survey-api.dev.giddy.az.bh.mehilainen.care
beepro-api.stag.mcsa.az.bh.mehilainen.care
auth-api.prod.aeznl.az.bh.mehilainen.care
*.infra.stag.bh.mehilainen.care
*.mehilainen.care
beepro-api.prod.mcme.az.bh.mehilainen.care
integrations-api.dev.hl.az.bh.mehilainen.care
auth-api.prod.giddy.az.bh.mehilainen.care
auth-api.prod.mcsa.az.bh.mehilainen.care
customer-api.prod.aeznl.az.bh.mehilainen.care
survey-api.dev.giddy.az.bh.mehilainen.care
assets.paijat.stag.bh.mehilainen.care
*.k.test.mdh.mehilainen.care
*.k.dev.mdh.mehilainen.care
integrations-api.dev.mcsa.az.bh.mehilainen.care
integrations-api.dev.mcsa.az.bh.mehilainen.care
beeweb.stag.hl.az.bh.mehilainen.care
ip-proxy.prod.mcme.az.bh.mehilainen.care
signicat.mehilainen.care
beepro-api.prod.hl.az.bh.mehilainen.care
auth-api.stag.aeznl.az.bh.mehilainen.care
assets.dev.hl.az.bh.mehilainen.care
customer-api.prod.aeznl.az.bh.mehilainen.care
beeweb.dev.mcme.az.bh.mehilainen.care
ld-relay.dev.mcsa.az.bh.mehilainen.care
beepro.sibylle.prod.bh.mehilainen.care
survey-api.dev.mcme.az.bh.mehilainen.care
survey-api.prod.hl.az.bh.mehilainen.care
survey-api.stag.mcme.az.bh.mehilainen.care
appointments-api.prod.mcsa.az.bh.mehilainen.care
survey-api.stag.hl.az.bh.mehilainen.care
relay.stag.mcme.az.bh.mehilainen.care

X.509 Certificate

The complete raw X.509 certificate details for *.paijat.prod.bh.mehilainen.care in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5zEPuZ/uqtbzuGSJl7V
6KFOvJ0oS5/sWgp8l+6TfFntPiNnXXlvvYCnu4wdho/8BZz4+3UkjbjZUlLGG7tS
iReZgaJGVj/FiYGchXzMBBGqkNTDmI76f+czfUZioKC0ocuImGRXoE5uwRj5ixOa
Mq2SoJAaMaAbOjhI75cecc8+k9AjCirF7o89BY+VVcnCiLuYUfc3Bn3oncI5XNfQ
m+atvwcD0fEQZx4XIzBG9AoLivL9/0kbie2zk/05M4/RIm80liw7zH5NaIg6vvli
wAiEy/XhmTWgdoGWHPiAlTmgodQ1xlBnqhxH9ceakikSzryrgExSsqq2dCI3Hmvu
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8332530685158003635530514057405924458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.paijat.prod.bh.mehilainen.care'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23178914292923165071214316018022291462303516441348589548495294435449753160143846923829331284543682401036144802640947323990568286858751148032663333979498340899319595275497843955510339965549873395733528613175768162640522406641986409636718592090066132528403988012838779068543569357638304718252301573814919278974768745140991823112122875267282912768248425099367808605400517678095799920904577322828577828432013240017822477189793768957632217669280207393987307058650807732813436261887747004443687885963796894544318374229552048449298428005765535819369105706412212859851410223689328464005268250464538990020068098360648426843683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18e95a581a989d46a3b404266bc8a4e294df8bf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paijat.prod.bh.mehilainen.care'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047ac7e37bdf26b3e1a14246f6e8df47972410785beada65993b9f781228d564ccc9a01acb977d9010ea8197c66ba7d52dda172c246b09d0f79e9a016631373fd794b70586f7c3e9191ffab9a6b488410567a8ffda29c6170c0a438b6dc2c4ebdf2aecff1ae5a072438bee7d78c84dc6360a65e2fa96ccc773f4cc0cf4b591794e6f96c5df96ca8e10ec5ef725b0c82fd5a29b01def94684e1b90de3a33f81a20bd8d8adae4849120903d84bd910ceb3f2fda79c545aff033d6b59fdf1a536e91c4d7412ae57c87618f8dfd2f1f1107ef8f9d556f8e2cec1e6b1186648ce3780eebeb2199353ad2e1744d7a961276a8943f4a3ab98944ca49771c5e51cc5b88e8