*.eightfold.ai

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:9a:1e:81:33:00:70:08:92:a6:46:67:c6:5a:9b:e0 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.eightfold.ai

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:9a:1e:81:33:00:70:08:92:a6:46:67:c6:5a:9b:e0
Serial Number (int): 10104828395214113019408457323469511648
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b1:00:7a:11:8c:f0:42:9b:c1:b5:29:b3:3b:ad:58:5c:c5:7e:9c:29
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 1d:71:80:82:f5:8a:1b:64:be:1c:25:86:23:28:3c:25:53:cc:58:ee
Fingerprint (sha256): 01:98:ec:32:69:4b:fc:52:d4:70:65:87:d2:6a:00:d6:fe:9d:ca:5c:56:74:c5:24:03:23:4e:71:b0:ab:9d:a2

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.eightfold.ai

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eightfold.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eightfold.ai
jobs-disw-sandbox.siemens.com
jobs.bookingholdings-coe.com
*.eightfold-eu.ai
mycareer-sandbox.siemens.cloud
talent.bayer.com
jobs-next47-sandbox.siemens.com
jobs.faurecia.com
jobs-sandbox.siemens-healthineers.com
app.aijob.no
careers.neom.com
jobs.vodafone.com
apply.slb.com
jobs-sandbox.dsm.com
talentmarketplace.ericsson.net
jobs-sandbox.siemens.com
jobs.booking.com

Other certificates including the domain name eightfold.ai

(limited to 100 certificates)
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
pages.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
*.eightfold.ai
www.eightfold.ai
community.eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
pages.eightfold.ai
community.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
www.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
www.eightfold.ai
*.eightfold.ai
eightfold.ai
pages.eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
*.eightfold.ai
t.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai

Certificate

The complete raw certificate details for *.eightfold.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXMNHAzOXmreMaYVhLI4
IkI4eiEtm2HxcsIHFX418R3makmdM6wtp1uxAiAliBM39YzMYgor+F55DRyiYqqf
bl9RbO6aE1rr0mvhD2SVfEdNRND71aJYdERKgt1wfzs7fVGiJQN7SBS/JrkUJAwO
qG277QIJuDZk617MrJmTYxNo9nXQF90Lo6RyIP3Qz0+oz0Kvot0xtBIjlbG18DWB
Wd5ggTfB6ge5vcpYpVUc1ji5mh/aTYxQ4gc0BVSN+egzr6EiKujT6711rR66Y4Wd
VRTi33j/NfB6UwBjABQTdkLhlOtIHNWJZjqIQxQfdZRHi9h3HVF1/jJf2nxB+EHH
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10104828395214113019408457323469511648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eightfold.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25935586383827961986438979187891163382766437091920539261383073899724801209106698526489332840488531460114957353766349613491787159013020296401474008224346428495757010021558858075768495350669875597581036340355466316535064401551034235395388604371857619863712967297760278794637475440553499031445587467703685326654837950193566978874605129102351931763636882895604234706352895355284936302158281630366488188059276922720035935164868534459159726276978405082297377726208078295039802154713554966660476718228731289449863943496773496429591297346583978358844575356223183830034052615703752944065086736976180940952253359199244758665177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1007a118cf0429bc1b529b33bad585cc57e9c29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eightfold.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-disw-sandbox.siemens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.bookingholdings-coe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eightfold-eu.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycareer-sandbox.siemens.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talent.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-next47-sandbox.siemens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.faurecia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-sandbox.siemens-healthineers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aijob.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.neom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.vodafone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.slb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-sandbox.dsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentmarketplace.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-sandbox.siemens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.booking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0033c139313909311dc6d43e65d8a3e17be7aff738bbd3a4f3502b81c2a3cf5a40087aefa03dc5dc2b55a63582bbdbd8a0b6e4812f499541f80e600c6b9c0d8ec84c3d000a4f39d7d4caa3e4a4973e607c66bbfede08e9d7d2cc12654204c256f1772f89826752ea36b7fbb893640fb171dd42761038c1417f8361afffa323b67c1ffc3f5371c7f56bf484b1866c55d6a49009eadea089e8e8c3e72ccd913365e80270e7a811f5c8729986422be99a89a6d5464da5d98673c6e2baa26053d3cf4cdb7745af343e3b3ef0d0278eece719a857b361694c04ed45e588ffc0319787cb2602fe24579d0f0c96f5f629eef8d15b3ccf18e6e0034bdbe75960f8f480bad2