vt-api-ba99a5fe.test3.projectkappa.xyz

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:56:54:bb:18:93:7c:49:30:40:ed:2f:aa:e9:b3:87 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vt-api-ba99a5fe.test3.projectkappa.xyz

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:56:54:bb:18:93:7c:49:30:40:ed:2f:aa:e9:b3:87
Serial Number (int): 1777484071297947211433036362617041799
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cc:e3:cd:5c:7a:b8:a9:4e:f3:49:4b:c4:90:90:d6:50:75:24:37:60
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): fe:62:04:c4:3b:cb:33:35:23:ff:ce:d2:90:15:04:81:87:9d:39:9a
Fingerprint (sha256): 0b:c1:a3:15:b8:5f:d0:6a:7a:0b:f0:3e:80:cd:f9:fe:78:15:c2:10:af:77:86:c4:ea:c8:a1:ca:0f:a8:c9:38

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate vt-api-ba99a5fe.test3.projectkappa.xyz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vt-api-ba99a5fe.test3.projectkappa.xyz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vt-api-ba99a5fe.test3.projectkappa.xyz

Other certificates including the domain name projectkappa.xyz

(limited to 100 certificates)
vt-api-7bbcff87.test2.projectkappa.xyz
email-1bd6af5c.test3.projectkappa.xyz
email-6abfd428.test3.projectkappa.xyz
email-339137ce.test3.projectkappa.xyz
api-a4116fe1.test2.projectkappa.xyz
email-9d86da9b.test2.projectkappa.xyz
api-10eae06e.test3.projectkappa.xyz
email-f935601b.test2.projectkappa.xyz
email-9f07ab5c.test3.projectkappa.xyz
vt-api-3b89c039.test3.projectkappa.xyz
vt-api-b178f3a6.test2.projectkappa.xyz
vt-api-a8fe3641.test2.projectkappa.xyz
email-a8aff2af.test3.projectkappa.xyz
api-22e80487.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-584e0cc0.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-0fd2b4d7.test2.projectkappa.xyz
email-02544e97.test3.projectkappa.xyz
vt-api-db5e38da.test2.projectkappa.xyz
api-fc45ac63.test2.projectkappa.xyz
api-86d7f780.test2.projectkappa.xyz
email-e3bee7a0.test2.projectkappa.xyz
email-01813519.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-c68403c4.test2.projectkappa.xyz
email-5252ae92.test2.projectkappa.xyz
api-9341dd93.test3.projectkappa.xyz
email-ca1fa77f.test3.projectkappa.xyz
vt-api-74838ec7.test2.projectkappa.xyz
api-11fff43f.test3.projectkappa.xyz
api-0a2f2edd.test2.projectkappa.xyz
api-5972d8ee.test2.projectkappa.xyz
vt-api-855f7643.test3.projectkappa.xyz
email-171088af.test2.projectkappa.xyz
email-a3f312e2.test2.projectkappa.xyz
email-9341dd93.test3.projectkappa.xyz
email-2ec2d05a.test3.projectkappa.xyz
email-82073ce2.test2.projectkappa.xyz
vt-api-ba99a5fe.test3.projectkappa.xyz
api-941d4fb1.test2.projectkappa.xyz
email-2ed5fac0.test3.projectkappa.xyz
email-6db745aa.test3.projectkappa.xyz
api-08b2bd97.test2.projectkappa.xyz
email-cf7b1b74.test2.projectkappa.xyz
vt-api-a2b87c16.test2.projectkappa.xyz
api-3f7d8db1.test3.projectkappa.xyz
api-63f07cc4.test2.projectkappa.xyz
email-04b7baef.test2.projectkappa.xyz
email-f30660ce.test2.projectkappa.xyz
vt-api-479f787c.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-652a0d89.test2.projectkappa.xyz
api-2530578c.test3.projectkappa.xyz
api-d79fef50.test3.projectkappa.xyz
api-e6f49b67.test3.projectkappa.xyz
api-884ecac7.test2.projectkappa.xyz
vt-api-438742e5.test3.projectkappa.xyz
email-7be941c5.test2.projectkappa.xyz
email-04b7baef.test2.projectkappa.xyz
vt-api-1c124a00.test2.projectkappa.xyz
api-f839ff52.test3.projectkappa.xyz
vt-api-5252ae92.test2.projectkappa.xyz
email-024a3405.test2.projectkappa.xyz
vt-api-09eb41d2.test2.projectkappa.xyz
email-5972d8ee.test2.projectkappa.xyz
vt-api-a737ccd2.test2.projectkappa.xyz
api-9326fef8.test2.projectkappa.xyz
vt-api-59936492.test2.projectkappa.xyz
api-90af1aeb.test3.projectkappa.xyz
vt-api-dd44ad84.test2.projectkappa.xyz
vt-api-6a77c558.test2.projectkappa.xyz
email-3547b8c3.test2.projectkappa.xyz
email-2b6d8474.test3.projectkappa.xyz
api-c673d50d.test3.projectkappa.xyz
alpha.projectkappa.xyz
api-be8b25de.test3.projectkappa.xyz
api-89c72186.test2.projectkappa.xyz
email-83cfc8a7.test2.projectkappa.xyz
api-a8fe3641.test2.projectkappa.xyz
vt-api-f839ff52.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-f630324c.test2.projectkappa.xyz
vt-api-f630324c.test2.projectkappa.xyz
vt-api-a3f312e2.test2.projectkappa.xyz
email-5972d8ee.test2.projectkappa.xyz
vt-api-2709631a.test2.projectkappa.xyz
vt-api-df2cbbbf.test2.projectkappa.xyz
vt-api-6ce65c4a.test2.projectkappa.xyz
email-d94fcf6e.test2.projectkappa.xyz
api-ace404c6.test2.projectkappa.xyz
vt-api-0f669542.test3.projectkappa.xyz
api-0f3802d0.test2.projectkappa.xyz
email-a2b87c16.test2.projectkappa.xyz
email-d76b9440.test2.projectkappa.xyz
email-93accfb8.test3.projectkappa.xyz
vt-api-dce4c93a.test2.projectkappa.xyz
api-3d5a66a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-8742d1d5.test2.projectkappa.xyz

Certificate

The complete raw certificate details for vt-api-ba99a5fe.test3.projectkappa.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhGRxA1U59XqAyF4X3c5
4SPsfDHv+dLz784HsmcIERQF1Y5cvhyaZgUoioCn7RTLLJ2kKkkNrHRCD4lsAC5Q
GsoxZFZ4MX0GhfA7NMKE7vV9YY0XJ6Zv0MdGqbA7MwZw9mkXoU1pABOBDtRB8fAK
3dlR156u50SG3bp7+S2uV+GUSxY0exoSCK5Z+nk7nKsyiKkrHbTWS9XM3AoHH3Eg
fX1EJIyabBk+T0ZRBQCj6NcRTnDgA8rmPvftw1GjLCULXLHsUG6HMeqCx+/cCINl
70JWHiz9KNgQQe/I3AkL9mAZYrENYIXYL/le9kBWjdSOr4ATYXALl2RKx33siOer
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1777484071297947211433036362617041799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vt-api-ba99a5fe.test3.projectkappa.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23993941736494171613936202034452634014485464639135021104589944517362442567943045919330107227209792910490621790507307148402858860017585132606711786094962852533629638089163923016344153384232712070178298930003394780593169873626997496767275190191384684202817245595949219563129731577181646392038908046485237616588575072762979827100876460956205872053975356016239016557096929491792718196101492041892883607935893745272696198700552122707274975257504539583214696950692301222717530680485193631300860793678794947421233428508911943499807650271449866777431423771747397541530946136024143203378567991297103108742373968256305627376447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cce3cd5c7ab8a94ef3494bc49090d65075243760
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vt-api-ba99a5fe.test3.projectkappa.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004292854872bbb3da6d2925a05b874a1dcc1f16bff2c7d2e650d298a94375dad89a51d2d42765f5d1cbc457048e4afcf443eafc5bc9d79dfa32b2419bae0926be8225ac8c255bc6bc947ccf675f32443e92a0d48e8576d086585608d5e0caf1b828d6cd9e3e14b1a6245e9e79a6e9c0d43ff77fae4e3c11099b592323c540140bf3100748dfd53aa2ffb499eb49cfd46a3b4fdb62dd12d8f618a2b69c9fbd169ab87ac0d32fe6cca5f33a5b21f7d0586ee55b4aa71c925dfc6658a5ce11f071ae378dba96f2acd01f45efb033d7e8bd7b11da7a8ef0a015faf316dd277065a8f4a2bf44eb73c4afdacd2e0c70a9c66b7cd7d1c8b26e4a88fa8736c8630a72d326