unifi-controller.corp.luno.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:3b:17:a1:79:04:fe:59:49:ed:51:41:b1:1e:7c:8b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unifi-controller.corp.luno.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:3b:17:a1:79:04:fe:59:49:ed:51:41:b1:1e:7c:8b
Serial Number (int): 13599104761111485363934559792850173067
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ee:83:28:9d:14:9b:53:4e:51:c0:95:81:9a:01:66:7e:19:00:06:8a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 94:a2:98:89:e4:1b:2d:4a:3f:25:ab:b9:aa:79:aa:da:4f:9f:24:9f
Fingerprint (sha256): 05:88:de:27:47:af:37:11:7c:33:17:f5:d1:0d:cc:8e:5c:ad:1f:f4:f2:92:c5:2a:fe:13:1c:31:e3:12:87:5e

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate unifi-controller.corp.luno.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unifi-controller.corp.luno.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unifi-controller.corp.luno.com

Other certificates including the domain name luno.com

(limited to 100 certificates)
nebula.corp.luno.com
trade.luno.com
app-status.cloudsign.jp
*.corp.luno.com
app-status.cloudsign.jp
ssl425545.cloudflaressl.com
try.luno.com
*.corp.luno.com
confluence-staging.corp.luno.com
one.luno.com
lunobase.corp.luno.com
corp.luno.com
*.corp.luno.com
unifi-controller.corp.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
discover.luno.com
ajax-geo.staging.luno.com
apollo.corp.luno.com
luno.com
wordpress.prod.luno.com
app-status.cloudsign.jp
staging.luno.com
*.corp.luno.com
app-status.cloudsign.jp
app-status.cloudsign.jp
nebula.corp.luno.com
careers.luno.com
luno.com
try.luno.com
app-status.cloudsign.jp
staging.luno.com
corp.luno.com
one.luno.com
ajax-geo.staging.luno.com
one.luno.com
discover.luno.com
staging.luno.com
staging.luno.com
sandbox.luno.com
api-geo.staging.luno.com
*.staging.luno.com
try.luno.com
any-quote.blueur.com
trade.staging.luno.com
sni.cloudflaressl.com
app-status.cloudsign.jp
try.luno.com
ajax-geo.staging.luno.com
trade.luno.com
luno.com
ajax-geo.staging.luno.com
sni189482.cloudflaressl.com
staging.luno.com
app-status.cloudsign.jp
invest.luno.com
staging.luno.com
app-status.cloudsign.jp
papercut.corp.luno.com
app-status.cloudsign.jp
luno.com
ssl425544.cloudflaressl.com
ajax-geo.staging.luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
uob-jwt.luno.com
*.corp.luno.com
*.staging.luno.com
crypto.luno.com
app-status.cloudsign.jp
sni189482.cloudflaressl.com
voyager.corp.luno.com
sni.cloudflaressl.com
corp.luno.com
api-geo.staging.luno.com
luno.com
*.luno.com
one.luno.com
sandbox.luno.com
new2-www.luno.com
*.staging.luno.com
sw.luno.com
uob-jwt.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
dev.v3.playbook.vc
app-status.cloudsign.jp
luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
staging.luno.com
staging.luno.com
invest.luno.com
staging.luno.com
ap-southeast-3.prod.luno.com
app-status.cloudsign.jp
ssl425544.cloudflaressl.com
staging.luno.com

Certificate

The complete raw certificate details for unifi-controller.corp.luno.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYJKQnHPverQXGjsuGZl
PvX8U0d5ykUYT71DHvdEl6Vu34APMJHhjUIvziYfstR7OEbaUpudGBuhRHOw9rov
uNuxxV10GYg/V97TjRnr02pTVXR87zst9xtqAoWG13PNURsX+NnAqr7jONqA42Ag
+Fgk1Wf/MP1pvcqwl3B9MhpWKaRVZ72IrNx/EaniXu3fWfGZFzA/Ih57ktCkYnft
90xpKdHBXJfxvULVT53SAy5xHPaNWL9CB9lxanfsneHE0qRJk20rOYAYBF07hdR6
UEAXsSyF3SjpSUvKlbZm7uwQPOaQ+k1z8ezeR5saniYXlP+jeoRUd1bEKkUNWKsV
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13599104761111485363934559792850173067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unifi-controller.corp.luno.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23923288069811879892470171860074218321075028431469438691957008330704302224909741955738669644562454159152506661591349596265721534063661304675094312904106560065830453461543228191132817397501514424051620752892513226063389311097544582515399237164014664310149333934554561520977519375584332870796190465611094059377719099319801931321166450679070751732495971555101103337265187566670295590713085518671211311914171363216730080995973578017594040045670686418330322491143103476118273673797327427723847231100252517281978203866971908551532878383125114041597979857082257417775049714429986482688129763210355564330157801992353150080389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee83289d149b534e51c095819a01667e1900068a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifi-controller.corp.luno.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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