extension.grooveapp.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:d3:cf:1b:41:e7:9b:bc:e1:3a:7d:6d:aa:62:fd:20 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=extension.grooveapp.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:d3:cf:1b:41:e7:9b:bc:e1:3a:7d:6d:aa:62:fd:20
Serial Number (int): 14392055213344874093313439010989997344
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c1:47:e8:6b:a1:e1:91:78:b8:87:79:85:a2:7d:5e:79:2d:0f:7b:7c
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 23:ca:29:99:59:fe:e5:91:8f:d2:f6:85:12:ad:bf:51:9e:e9:44:ae
Fingerprint (sha256): 09:ea:9d:9b:17:a1:6c:38:7e:f5:51:a6:f1:4c:f8:11:6e:18:f2:84:e4:16:8b:89:1a:9d:cf:32:97:ed:ba:90

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate extension.grooveapp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extension.grooveapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extension.grooveapp.com

Other certificates including the domain name grooveapp.com

(limited to 100 certificates)
engine-staging.groove.co
addin.grooveapp.com
app.grooveapp.com
groove.ehlinks.com
extension.grooveapp.com
scheduler.grooveapp.com
groove.simondata.com
assets-staging.grooveapp.com
staging.meetings.grooveapp.com
meetings.grooveapp.com
extension.grooveapp.com
assets.grooveapp.com
assets.grooveapp.com
meetings.grooveapp.com
developer.grooveapp.com
groove.robinpowered.com
assets.grooveapp.com
notifications.grooveapp.com
app.groove.co
embed.scheduler.grooveapp.com
groove.swivl.com
groove.lyric.com
groove.kiva.org
extension.grooveapp.com
groove.ehlinks.com
extension.grooveapp.com
groove.jebbit.com
groove.jebbit.com
re.grooveapp.com
groove.adpearance.com
stilt.grooveapp.com
groove.cloudleaf.io
extension.grooveapp.com
extension.grooveapp.com
notes.grooveapp.com
meetings.grooveapp.com
groove.grooveapp.com
groove.kiva.org
staging.notes.grooveapp.com
staging.grooveapp.com
groove.trustarc.com
assets.grooveapp.com
addin.grooveapp.com
assets.grooveapp.com
branded.grooveapp.com
groove.g2.com
groove.uber.com
grooveapp.com
app.grooveapp.com
app.grooveapp.com
notifications.grooveapp.com
staging.engine.groove.co
staging.addin.grooveapp.com
branded.grooveapp.com
meetings.grooveapp.com
assets-staging.grooveapp.com
assets.grooveapp.com
groove.crossover.com
notes.grooveapp.com
addin.grooveapp.com
groove.trustarc.com
assets-staging.grooveapp.com
app.grooveapp.com
beta.grooveapp.com
beta.grooveapp.com
app.grooveapp.com
staging.grooveapp.com
staging.grooveapp.com
groove.g2.com
branded.grooveapp.com
embed.scheduler.grooveapp.com
staging.notes.grooveapp.com
beta.grooveapp.com
groove.robinpowered.com
notifications.grooveapp.com
notifications.grooveapp.com
assets.grooveapp.com
beta.grooveapp.com
assets.grooveapp.com
groove.adpearance.com
grooveapp.com
groove.kiva.org
groove.elastic.co
groove.zenreach.com
assets.grooveapp.com
staging.meetings.grooveapp.com
groove.simondata.com
app.groove.co
app.grooveapp.com
notifications.grooveapp.com
notifications.grooveapp.com
scheduler.grooveapp.com
groove.avidratings.com
staging.meetings.grooveapp.com
engine-staging.groove.co
app.groove.co
meetings.grooveapp.com
groove.lyric.com
app.grooveapp.com
app.groove.co

Certificate

The complete raw certificate details for extension.grooveapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53d/bNCB/faNXUQG9681
X9SjYaceC6ZML9WVtV9uBU0IjrdvhI37cq5/yZ1I4xUoItXfoqd08aPHnc0NoJ3x
cD+lPtOSaOKZGls3bD2gbY20z9EFJZrMBEPgMJtZkfAtArR89dtjD6cbAuPsupkS
Txhhq7EbANzkfmlGBi1E8YEBFmGI1gJ26acs/H6TgVHJ0stBtwqjZadO5CujMTKM
AWBms5TiDR+m1+TqW0pKTgriXgYXfRpRlhO0PkYOMKWwEBdab2Kzl8NzttxW35yJ
bky9ll7YX+YtdDmiIhPynvVyTPOoylA5k3L7BJsRIIjXwkp1V+ixH67kJUHV+Bbz
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14392055213344874093313439010989997344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extension.grooveapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29219974985941865968347821108748763961358735554585103717516917006776622180139764551427735412145152396394574139574412181746025990898279372727862144059096706531577940116838708756166120574743513188814238734637401064905437344260566799063416867700064735413653894528589517876549618219814663083761050835196174316549026079448816557099433239544367239077312584817867441225543871547506321535998967381580363307787557219834273465014488554652025001899460192416455969356839220174107232584243787881382213370251827825084862162420297865466361510781331011046687677993107319295068032092844872321961673659424657015821824388887901327782801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c147e86ba1e19178b8877985a27d5e792d0f7b7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extension.grooveapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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