chef.uberinternal.com

- Uber Technologies, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:61:9f:42:eb:38:1e:59:f0:1e:77:d8:04:eb:8b:38 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Uber Technologies, Inc.

Organization: Uber Technologies, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:61:9f:42:eb:38:1e:59:f0:1e:77:d8:04:eb:8b:38
Serial Number (int): 19116074941249227541636063396411181880
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:ec:3c:b3:92:c5:0d:34:fb:01:e5:3f:4b:05:b7:a3:c4:c7:72:96
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 53:94:bc:4e:35:8b:f3:70:30:23:94:a9:54:3f:e9:34:05:ae:bd:39
Fingerprint (sha256): 02:87:c6:81:cd:e2:4d:e0:4e:93:cb:48:f4:be:f0:79:5d:33:ab:78:e9:ce:a7:2a:5a:c2:07:40:98:d0:ec:13

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate chef.uberinternal.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chef.uberinternal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chef.uberinternal.com

Other certificates including the domain name uberinternal.com

(limited to 100 certificates)
uberhub.uberinternal.com
chatbot-uchat-integration.uberinternal.com
productops.uberinternal.com
blogadmin.uberinternal.com
metal-api-dev.uberinternal.com
productops.uberinternal.com
ubergram-api.uberinternal.com
uberhubtest.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
jmighty.uberinternal.com
*.devpod-us-va.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
uberhubtraining.uberinternal.com
devpod-eu.uberinternal.com
uview-api-staging.uberinternal.com
chef.uberinternal.com
bizconductguide.uberinternal.com
jetbrains-staging.uberinternal.com
creativeproduction.uberinternal.com
*.prod.awscorp.uberinternal.com
spiffe.uberinternal.com
bizconductguide.uberinternal.com
itelogs.uberinternal.com
lzc.uberinternal.com
corpss-test.uberinternal.com
*.vscode.devpod-nld.uberinternal.com
ktb.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
spiffe.uberinternal.com
uberhubdev.uberinternal.com
devpod-pln.uberinternal.com
ess-staging.uberinternal.com
scout.uberinternal.com
bizconductguide.uberinternal.com
uberhub.uberinternal.com
devpod-ind.uberinternal.com
creativeproduction.uberinternal.com
u4b.uberinternal.com
productops.uberinternal.com
devpod-nld.uberinternal.com
*.uberinternal.com
devpod-ind.uberinternal.com
uchat-staging.uberinternal.com
devpod-pln.uberinternal.com
lzc.uberinternal.com
u4b.uberinternal.com
jiraext.uberinternal.com
metal-api-dev.uberinternal.com
*.vscode.devpod-us-or.uberinternal.com
ess.uberinternal.com
cess.uberinternal.com
u4b.uberinternal.com
teqtivity-staging.uberinternal.com
munki.awscorp.uberinternal.com
jiraext.uberinternal.com
bizconductguide.uberinternal.com
devpod-bra.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
emearex.uberinternal.com
uberhubtest.uberinternal.com
arize-api.uberinternal.com
prod1.insightvm.uberinternal.com
scout.uberinternal.com
lzc-staging.uberinternal.com
opusimageserver-client.uberinternal.com
devpod-bra.uberinternal.com
uberhubtraining.uberinternal.com
newsroomadmin.uberinternal.com
bizconductguide.uberinternal.com
backup.uberinternal.com
lzc.uberinternal.com
stash-cdn.uberinternal.com
usearch-backend-dev.uberinternal.com
lambdai-test.uberinternal.com
photo.uber.com
ess.uberinternal.com
arize-api.uberinternal.com
vpn-emea-net1.uberinternal.com
uberhub.uberinternal.com
jira-staging.uberinternal.com
arize.uberinternal.com
ess-staging.uberinternal.com
uberhubtraining.uberinternal.com
*.devpod-ind.uberinternal.com
admindevices.uberinternal.com
*.staging.awscorp.uberinternal.com
devices.uberinternal.com
newsroomadmin.uberinternal.com
coeshift-staging.uberinternal.com
*.awscorp.uberinternal.com
ktb-staging.uberinternal.com
vpn-east.uberinternal.com
vpn.awscorp.uberinternal.com
blogadmin.uberinternal.com

Certificate

The complete raw certificate details for chef.uberinternal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkhR3bsX0GQIIqeN3NF2
OFyYnrDSJhDfdSadxfgo3f4UsHoBrO+G8Zwk68fiH2hn9whkp9yzuNQPJAtGh5qH
aCDH2P7fPf/2wa7ssrxgc3kdl4UTxiUxFayx1W7/z49SQdeRASSqDdawOQl9Kegl
5kAezLfsYF0Oex+q/Z+OjXtuhmkkVQK3c4vK6VKj6hmWycoHpr/27lvyhWrQdDX7
VmzA1wM3hoE+31/pba5v9IPIJ0ahgKjEZYrtOZ1HwI99kV4YtVgRnL0Y6N/I1R5l
0S1LQzT5PcR838AUwsd2frI9e7jKuC3//MeZgL6z9OfIBQy0kiDDIvyZ3+yi14CF
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19116074941249227541636063396411181880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uber Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chef.uberinternal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24525893380813216714288741369403499707789608414602150770816540736997190772364288461396337151999308280654802312759763840884569633876676339087432991013749983096519844741221316404685054868597179668774745494034385450608570563344562757395689338879854709759936722779665981345529464998642740910139237074346785469101900439233720292876570390089231203059022393482005695483948612964896482141754722497973391962543692873026692087619741236352617583318755339318067083062333748841250893978503329477798076649396148598850065892385307855710548354547045216364570297624395345505556804518374040180230696025040613912923810282781542038144313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcec3cb392c50d34fb01e53f4b05b7a3c4c77296
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef.uberinternal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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