DV SSL/TLS Certificate for media.lucilab-staging.syspark.net

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M02)

About the media.lucilab-staging.syspark.net DV SSL/TLS Certificate

This certificate with serial number 0a:0c:f4:4a:9e:b8:87:5d:9f:83:5d:ff:94:f9:11:fe for media.lucilab-staging.syspark.net was issued on by Amazon.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for media.lucilab-staging.syspark.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0a:0c:f4:4a:9e:b8:87:5d:9f:83:5d:ff:94:f9:11:fe
Serial Number (int): 13359542340100606872822994520350724606
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 2b:14:7e:e1:da:b6:1f:77:36:d1:7a:86:f8:a6:19:97:d2:2e:32:47
Authority Key Identifier: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (SHA-1): 44:93:34:b9:d6:58:d0:12:10:14:58:c2:4f:8b:a2:d6:b1:73:58:68
Fingerprint (SHA-256): bd:22:6b:af:fd:de:be:5d:e3:88:c8:a4:cd:5d:8d:9f:4e:37:dc:e7:df:33:09:2c:c3:52:9b:b1:56:8f:27:fe

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation Information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate media.lucilab-staging.syspark.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for media.lucilab-staging.syspark.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

media.lucilab-staging.syspark.net

X.509 Certificate

The complete raw X.509 certificate details for media.lucilab-staging.syspark.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgIQCgz0Sp64h12fg13/lPkR/jANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MTAwMzAwMDAwMFoXDTI1MTEwMTIzNTk1OVowLDEq
MCgGA1UEAxMhbWVkaWEubHVjaWxhYi1zdGFnaW5nLnN5c3BhcmsubmV0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmmOIA8Tc/i89y2Firai0iJclaBw
L3AkmLuSRVz5uc0Q7TFmMK6m5cZvHXfAAaNYHWd4DQdtbx0Ss3IwCPYdu/AOsW5o
IZqqArM1kBG+iRhCpD9Ba8hg+ASJGtFyEnjrP4c8fhvgj76Hwa+HldpoSwfMuc4R
NfYKMdre0qDg4JJK3TTfplI5x9Xqd4OxDtGKpnMZSo5ntF3BqGJmUOMlACOnl8lo
jT+9noRTmevqeewemDRvwGm/AVBN93+bLBIr0u+cZjhVrIkTOUoj7Yz8JsR8IBk8
iOYbeOrDSw5xp8YP97yepCdxulmqn78xeYdlzmerg3bAcDSKU9lxyHOAtQIDAQAB
o4IC+jCCAvYwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0O
BBYEFCsUfuHath93NtF6hvimGZfSLjJHMCwGA1UdEQQlMCOCIW1lZGlhLmx1Y2ls
YWItc3RhZ2luZy5zeXNwYXJrLm5ldDATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1Ud
HwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy
bTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw
LnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5y
Mm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF+
BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2ABLxTjS9U3JMhAYZw48/ehP457Vih4ic
bTAFhOvlhiY6AAABklBxVP8AAAQDAEcwRQIgEXPBwHflLQnt6RBlf7COa4cWg1Pg
7SPE3f6hz8CDouACIQDAe3FYAcPDOYLhJhSyz2aUxK+uOb1aSk0R8cGyYhE+8QB2
AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABklBxVMAAAAQDAEcw
RQIhAMKdZLH87kDLDS82uyx244zHSNiPw1//RcztN/GtB8quAiBSEy+a43276rKr
fNByyGCEUaTvrW51hr2XhR546CGmPgB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7
uocyHf0eN45QAAABklBxVNoAAAQDAEcwRQIhANmTv3UQTdHCBb0UUUsLVh4wX32I
K34wbSn7oBhDwR+JAiAXN8zGkiVgFx6GV5K4njYNphh0AYjf1Ne+CVyzK84dEzAN
BgkqhkiG9w0BAQsFAAOCAQEALFoMFTgufxxn7S/XNu1a0LezdCqCb18ZXa69iHNq
IGMCDPbdxfY9+6EQ8yVuLWF5IDQK7ARUg60x7JoiySFBh+gcpyGDdjnHVzUxzPfR
uTPtuzJeU+9pgvyHOQtfM+FMUd+uIFyaW0V4xOoUuLLXs/WLO+6zBERGoyvcAyi6
IiFcVIagm2NxbsQ1wNFilmBgvfH+L+8bAp/4kpBaPDiTu4tHfKEI7iy+B00SZa+5
JreSo5Guo6Ghtc6TlvwBwts+5ex/+PiaDj5zlcpXOjXd5S9uECGoPv3kS6ab2pH/
I3mnqKVRHO4tptCvyyrMI60z8iLRpp/RrHudwibfadhiLw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmmOIA8Tc/i89y2Firai
0iJclaBwL3AkmLuSRVz5uc0Q7TFmMK6m5cZvHXfAAaNYHWd4DQdtbx0Ss3IwCPYd
u/AOsW5oIZqqArM1kBG+iRhCpD9Ba8hg+ASJGtFyEnjrP4c8fhvgj76Hwa+Hldpo
SwfMuc4RNfYKMdre0qDg4JJK3TTfplI5x9Xqd4OxDtGKpnMZSo5ntF3BqGJmUOMl
ACOnl8lojT+9noRTmevqeewemDRvwGm/AVBN93+bLBIr0u+cZjhVrIkTOUoj7Yz8
JsR8IBk8iOYbeOrDSw5xp8YP97yepCdxulmqn78xeYdlzmerg3bAcDSKU9lxyHOA
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13359542340100606872822994520350724606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.lucilab-staging.syspark.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22017516261689735307463095061814155443767033224133829593724991913906251834460462849534973969638873166912756454599772515115056278164640843714546682895544016063937132933820785519586607147321741254686759137136479432052778699186036181806275158586747650892698443355229867478978907349508699486186563350790319921473162538791344382755354982111019772702738128141150940188058651731128336453796863965001598220043945603314836603206332959705363617358280488150630417907034350179473003933307473462595643639467543550681260803303602104406950560823430155192923637974504889072742353816296522411582553010793643459260371110331050303389877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b147ee1dab61f7736d17a86f8a61997d22e3247
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lucilab-staging.syspark.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c5a0c15382e7f1c67ed2fd736ed5ad0b7b3742a826f5f195daebd88736a2063020cf6ddc5f63dfba110f3256e2d617920340aec045483ad31ec9a22c9214187e81ca721837639c7573531ccf7d1b933edbb325e53ef6982fc87390b5f33e14c51dfae205c9a5b4578c4ea14b8b2d7b3f58b3beeb3044446a32bdc0328ba22215c5486a09b63716ec435c0d162966060bdf1fe2fef1b029ff892905a3c3893bb8b477ca108ee2cbe074d1265afb926b792a391aea3a1a1b5ce9396fc01c2db3ee5ec7ff8f89a0e3e7395ca573a35dde52f6e1021a83efde44ba69bda91ff2379a7a8a5511cee2da6d0afcb2acc23ad33f222d1a69fd1ac7b9dc226df69d8622f