uhs-edinburghchildrens.customer.kyruus.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:ec:af:3f:35:30:a4:5f:fa:dc:15:70:4f:c4:85:64 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uhs-edinburghchildrens.customer.kyruus.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ec:af:3f:35:30:a4:5f:fa:dc:15:70:4f:c4:85:64
Serial Number (int): 3887392479700438705611285459999425892
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: bf:61:1d:47:77:2f:5c:dc:f7:16:0a:8c:2b:b5:50:f2:43:19:2a:14
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 72:05:e3:1c:61:aa:81:ac:33:ea:3e:7a:a1:ed:38:55:a8:d7:5c:64
Fingerprint (sha256): 07:80:f7:db:3e:5f:a5:7e:93:9e:c8:a2:d7:ca:7a:11:5d:81:32:68:81:25:bb:b3:d4:b2:2c:c6:88:35:b1:9c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate uhs-edinburghchildrens.customer.kyruus.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uhs-edinburghchildrens.customer.kyruus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uhs-edinburghchildrens.customer.kyruus.com
doctors.southtexashealthsystemchildrens.com

Other certificates including the domain name kyruus.com

(limited to 100 certificates)
secure0017.hubspot.com
*.customer.kyruus.com
imperva.com
unitypoint-cedarrapids.customer.kyruus.com
statuspage.io
chickentreat.craveable.support
chickentreat.craveable.support
chickentreat.craveable.support
*.customer.kyruus.com
unitypoint-waterloo.customer.kyruus.com
secure0017.hubspot.com
chickentreat.craveable.support
*.kyruus.com
imperva.com
doctors.coxhealth.com
imperva.com
doctors.palmettohealth.org
imperva.com
secure0017.hubspot.com
www.kyruus.com
doctors.lgh.org
imperva.com
doctors.ghs.org
statuspage.io
nghs-ngpg.customer.kyruus.com
uhs-edinburghchildrens.customer.kyruus.com
doctors.thephqc.org
unitypoint-fortdodge.customer.kyruus.com
imperva.com
support.kyruus.com
uab.customer.kyruus.com
corp.portal.qdoba.com
imperva.com
*.security.kyruus.com
uab.customer.kyruus.com
chickentreat.craveable.support
unitypoint-grinnell.customer.kyruus.com
test.kyruus.com
corp.portal.qdoba.com
statuspage.io
doctors.unitypoint.org
uhs-vhs.customer.kyruus.com
doctors.coxhealth.com
unitypoint.customer.kyruus.com
*.kyruus.com
northbay.customer.kyruus.com
statuspage.io
doctors.myhfn.org
unitypoint.customer.kyruus.com
doctors.thephqc.org
corp.portal.qdoba.com
adventist.customer.kyruus.com
chickentreat.craveable.support
orthoatlanta.customer.kyruus.com
2201yybo.customer.kyruus.com
nghs.customer.kyruus.com
prisma-peds.customer.kyruus.com
chickentreat.craveable.support
unitypoint-grinnell.customer.kyruus.com
corp.portal.qdoba.com
doctors.coxhealth.com
unitypoint-peoria.customer.kyruus.com
imperva.com
statuspage.io
chickentreat.craveable.support
chickentreat.craveable.support
saintlukes.customer.kyruus.com
imperva.com
unitypoint-quadcities.customer.kyruus.com
uhs-summerlin.customer.kyruus.com
statuspage.io
bellin.customer.kyruus.com
uhs-valleyhospital.customer.kyruus.com
test.kyruus.com
uhs-mmh.customer.kyruus.com
secure0017.hubspot.com
corp.portal.qdoba.com
scheduling-sentry.kyruus.com
support.kyruus.com
statuspage.io
*.phi.kyruus.com
chickentreat.craveable.support
chickentreat.craveable.support
medicos.christianacare.org
statuspage.io
*.kyruus.com
saintlukes.customer.kyruus.com
secure0017.hubspot.com
secure0017.hubspot.com
fsus-20.freshservice.com
overlake.customer.kyruus.com
*.kyruus.com
unitypoint.customer.kyruus.com
corp.portal.qdoba.com
email.mg.kyruus.com
corp.portal.qdoba.com
secure0017.hubspot.com
corp.portal.qdoba.com
secure0017.hubspot.com
corp.portal.qdoba.com

Certificate

The complete raw certificate details for uhs-edinburghchildrens.customer.kyruus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YOkW2PqJfVzgh7IoFTy
zD4LhO4nS7bmHeKzhxEV5GihLn+i2Wfe9GTNw/aKJvqz5skIQvaee8kYcUZrFF6O
vhaDMohz3jVynJxsm5tl0yiZe6Z6YGk+gewzHEvflIm/dorYVo6Sh+zn63nlFx3Q
uoh0IV+BwSEpHpe0QL0+aZzEo13dMvg74caSV4jSGcl4Z+DOe1ssck02qau1xR77
mXdg5uJVmjl+xMtsfUvVP/S4fesiQ68fy8u6ooFDzNPCuoXxDmllUKIsqOft0dRc
G3/nKmDHK5erbku0yR0tk9YsgZnt5XOyIguTIBqC1ALmid51NUZi2SjeP/X9SNX+
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3887392479700438705611285459999425892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uhs-edinburghchildrens.customer.kyruus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29478440156328545429700647689313752545894480357540806514454546073629516477245672909521833555011052660960048445901839762918501744905135670667311186408858709635933171636245424721549129135385234040857628101585114561336152221289203443983519692078826200376441093170141282086051219278964577939749659045652796767318613488852118998508075912444564874029844896634294316870771404814727165222136301924108402828286833072668675684390265206248974353290196811178685713780271535188816464279747756798360749284185974442003377188196587861162800486323619250771205435803658630121037969502078911092822362748324425321197560162304777294053069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf611d47772f5cdcf7160a8c2bb550f243192a14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhs-edinburghchildrens.customer.kyruus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.southtexashealthsystemchildrens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017e6b371daa0000040300473045022100a4b271298a9f57ac2591f23816033792671cfcd734e7a06f6c481b6dc164772c0220566f687398f510986a561766e1d381e0008165b5739f25fe46181786de709eba00760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017e6b371da80000040300473045022100dfd5e3c137d6186c29854a2619647b48d112daa90cbc24824a3bca8998f92e410220259d3b3443e4238d59d02ecb26aa17a12e05f22bf53032f47955d6186ca12dc1007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017e6b371dc100000403004830460221008bb150894aed05a9129e9e79e1dcce48883368b519266165e46f3afa89a8b1b8022100f161cc4d7652adcd3b7c290d2aeab3070ef92fd5c68c8a6a3fcb219caf1b2b85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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