*.coco-dev.s-cloud.fi

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:de:03:bc:4e:a2:f0:95:78:2e:45:1d:fb:48:09:40 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.coco-dev.s-cloud.fi

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:de:03:bc:4e:a2:f0:95:78:2e:45:1d:fb:48:09:40
Serial Number (int): 10457361639549319354590335148027808064
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b7:2a:35:09:cd:f3:80:83:b4:a0:b5:5c:c4:c5:13:7c:9a:a0:15:e5
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 9d:c3:48:9d:73:e3:1a:e6:e8:da:9e:82:d2:57:cb:5d:9b:de:e6:b3
Fingerprint (sha256): 00:4f:20:a3:b6:d3:65:e8:ed:0c:da:5d:44:86:5b:55:20:68:ee:53:86:95:a5:aa:1f:1c:4c:98:59:f5:f2:35

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.coco-dev.s-cloud.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coco-dev.s-cloud.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.coco-dev.s-cloud.fi

Other certificates including the domain name s-cloud.fi

(limited to 100 certificates)
products-search.contenthub.s-cloud.fi
*.coco-dev.s-cloud.fi
splunk.logmanagement.s-cloud.fi
*.devopstools.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
api.abcmobile-dev.s-cloud.fi
auth.tunnistus-test.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
reo-salesforce-adapter.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
staffapi-dev.raflaamo-test.s-cloud.fi
api.cmg-dev.s-cloud.fi
ext.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
t-ext.dam-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
management.pobmanagement-dev.s-cloud.fi
data.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
dam.s-cloud.fi
wp-multisite.sites-test.s-cloud.fi
beta.omo-test.s-cloud.fi
dia.coco-test.s-cloud.fi
ext.dam.s-cloud.fi
api.pressu.s-cloud.fi
api.skartta-qa.s-cloud.fi
lb-ext.dam.s-cloud.fi
browser-consent-front.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
entry-dev.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
adyen-webhook-listener-dev.ssc-dev.s-cloud.fi
api-dev.sokoshotelswebsite-test.s-cloud.fi
dam-input.contenthub-dev.s-cloud.fi
ao-api.ahis-edu.s-cloud.fi
*.gluucb.tunnistus-qa.s-cloud.fi
abc-auto.sites-test.s-cloud.fi
api.emobility-qa.s-cloud.fi
aok.wp-test.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
ext.dam.s-cloud.fi
wp.sites-test.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
henksu-test.s-cloud.fi
sinkhole.logmanagement.s-cloud.fi
reo.coco-dev.s-cloud.fi
*.sites-test.s-cloud.fi
ahis-api.ahis-dev.s-cloud.fi
sp.s-cloud.fi
*.wp.s-cloud.fi
splunk-demo-demo.logmanagement-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
frontend.atlassian.s-cloud.fi
int.eu-west-1.sokoshotelsmobile.s-cloud.fi
ext-qa.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
tasku-osk-ui.coco.s-cloud.fi
ext.dam.s-cloud.fi
*.service.int.abcmobile.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
boomi.s-cloud.fi
mastergui-test.logmanagement-test.s-cloud.fi
product-brands.contenthub-test.s-cloud.fi
event-stream.custi-dev.s-cloud.fi
lupa.coco.s-cloud.fi
*.purchase-event-stream-dev.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
testrail-test.s-cloud.fi
*.test.sokos.fi
spectrum.coco-test.s-cloud.fi
sinkhole-int.logcollector.s-cloud.fi
lb-ext.dam.s-cloud.fi
vikke-osk-ui.coco.s-cloud.fi
ext-preprod.eu-west-1.sokoshotelsmobile.s-cloud.fi
raflaamo-test.s-cloud.fi
argocd-qa.s-cloud.fi
reo.coco.s-cloud.fi
api.price-comparison-test.s-cloud.fi
tos-poc.coco-test.s-cloud.fi
api.skartta.s-cloud.fi
splunk.logmanagement.s-cloud.fi
s-bonus.sites.s-cloud.fi
rekku.coco-test.s-cloud.fi
*.gitlab-pages-dev.s-cloud.fi
s-bonus.sites.s-cloud.fi
reo.coco.s-cloud.fi
*.gitlab-pages-test-spankki.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
tasku-bff.coco.s-cloud.fi
shiny.paja-test.s-cloud.fi
sok-contacts-nm-bff.coco-test.s-cloud.fi
dropshipping-api.ecommerce-om-dev.s-cloud.fi
mrm-id.s-cloud.fi
admin-ui.contenthub.s-cloud.fi
t-lb-ext.dam-test.s-cloud.fi
api-ext.dam.s-cloud.fi
api-int.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
reo-salesforce-adapter.coco-dev.s-cloud.fi

Certificate

The complete raw certificate details for *.coco-dev.s-cloud.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I101Dm+gR0JWi1bGdf9
55W3PrdvDCdiSdhlj1UEWfTihvTdd1IB5O1bpKVahQ1PT+XKmdWWl/hO0B4feUst
g8ytWYzjdgwRnopYlnRN+PWj8Xg3ItKiNF0NOP6AMrUJdhO2ez5Q23GgPypVeEJD
HkLhhyd+0ixyp3A9ecHomOQXn8z/iBuaTQNWl4hsi0iOi6dEQxKoO8dR9so5k3d3
oDXC4JN0xX44fO9rXkMZSttwnCD4kIF5agMqdEXRp4dNNAGiriN/UQnJM8yOAo6P
Ih89OPeGF2TNdkrbh/wB4aFz1j8Pxqhvpx+59/1Txfyf0VSTnrPbvQsTU/kUHVDG
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10457361639549319354590335148027808064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coco-dev.s-cloud.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26832275385344658218190739659367104538826222680280388302824022971878439326413775368435938985153041351830174857310842713621149022799992098834741862228745726049451428638333522360919821610622769299201790812615239040047904620347931232051713814895297095216066843702367068410658339473754331340801110154977310703516700758929523999894953322323422404860788087598201200264381563828288386143061435721124472786054743055337776269634939188375575202337792049417728438170246945960449449166905696170054185762801768779593784576788625460484173812939554502175658436628484272635840255131538689479715382081795573621960813427036869083842249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b72a3509cdf38083b4a0b55cc4c5137c9aa015e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coco-dev.s-cloud.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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