community.gainsight.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:6e:b0:6b:54:c8:24:0a:f7:92:f1:df:0e:53:f9:6c was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=community.gainsight.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:6e:b0:6b:54:c8:24:0a:f7:92:f1:df:0e:53:f9:6c
Serial Number (int): 11208554828460485939063870970320386412
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 12:9e:e7:af:01:a8:12:16:b6:a8:12:95:df:e3:61:a7:6c:c2:66:d5
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 82:03:36:50:dd:98:1b:07:c1:89:72:50:a8:0a:68:81:8c:de:51:46
Fingerprint (sha256): 0d:c0:d8:87:55:c7:5a:de:38:86:af:00:40:6f:56:80:f1:cc:3e:51:76:31:07:72:dc:6e:94:17:0a:d3:13:48

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate community.gainsight.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for community.gainsight.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

community.gainsight.com

Other certificates including the domain name gainsight.com

(limited to 100 certificates)
statuspage.io
unplugged.gainsight.com
statuspage.io
cloudstatus.protel.net
confluence.status.atlassian.com
community.gainsight.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cloudstatus.protel.net
support.gainsight.com
servicedesk.gainsight.com
statuspage.io
cloudstatus.protel.net
confluence.status.atlassian.com
cloudstatus.protel.net
community.gainsight.com
statuspage.io
cloudstatus.protel.net
statuspage.io
statuspage.io
statuspage.io
statuspage.io
support.gainsight.com
sightline.gainsight.com
confluence.status.atlassian.com
helpdesk.allinoneservices.in.net
www.gainsight.com
statuspage.io
centralnicstatus.com
customer-sdpondemand.manageengine.in
info.gainsight.com
statuspage.io
confluence.status.atlassian.com
careers.gainsight.com
mktg.gainsight.com
matchmaking03.grip.events
confluence.status.atlassian.com
statuspage.io
statuspage.io
community.gainsight.com
matchmaking03.grip.events
statuspage.io
statuspage.io
certain.gainsight.com
statuspage.io
community.gainsight.com
confluence.status.atlassian.com
docs-px.gainsight.com
www.gainsight.com
orchestratorlive.gainsight.com
essentials.gainsight.com
sightline.gainsight.com
statuspage.io
statuspage.io
info.gainsight.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
www.gainsight.com
info.gainsight.com
statuspage.io
statuspage.io
confluence.status.atlassian.com
cloudstatus.protel.net
cloudstatus.protel.net
matchmaking03.grip.events
confluence.status.atlassian.com
go.gainsight.com
education.gainsight.com
statuspage.io
sightline.gainsight.com
cloudstatus.protel.net
statuspage.io
statuspage.io
go.gainsight.com
access.gainsight.com
statuspage.io
access.gainsight.com
access.gainsight.com
statuspage.io
statuspage.io
confluence.status.atlassian.com
docs-px.gainsight.com
cloudstatus.protel.net
statuspage.io
unplugged.gainsight.com
confluence.status.atlassian.com
www.gainsight.com
statuspage.io
statuspage.io
go.gainsight.com
centralnicstatus.com
sales.gainsight.com
cloudstatus.protel.net
statuspage.io
confluence.status.atlassian.com
statuspage.io

Certificate

The complete raw certificate details for community.gainsight.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9xLcXDwhicZkFH5fvz6
Xer0T6U9qbo3H6jZP3RK4+udMMZMDQHuVXBI3c2D/AQc7vCKPT2JNG3XIxs4rktj
NHQWBKbNxlqKMzByI4+YXAB3gZmQgSQpJ6awD+6UyWfeom61Vhaal6hJ7bd68L8f
ZAf91Gh8ZFJGLC/oGesHWgtHx4NEQO6WM2OdR1sZC+YAtc2KjGPgApUSYuwHd5zt
0Wn5nx+Ri6LHAoBVN2twqszLb7sa4qQuvNKMgJwbi1G84WuZxJQ5bMPvPbwmjymU
AJCK21L/zNKN10joAiXu5QAdts0ATIsANANYKqgdtEh0Jwdic0vgUb1Ul7Bq0c1+
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11208554828460485939063870970320386412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'community.gainsight.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22705287954105260668383520737925466540774680234719535527108759136193119231604649755122541174634341020075783940699181278110762869898846344048317269672850814048452012720983479551940319580980222164019749329277357060441561136201150990678788809600943480264094947504399441809057434374176110381534452609171591984139393544579894436398549628459219440807334431372385646140266585027060592150471812584720239617290699165620333520763859374580183073455729690613091088857849564071166186098171784340762581093103520168286363891963458482799625171405104653653244860440067610807211002915738153471479374818036553612434090638453844273364607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							129ee7af01a81216b6a81295dfe361a76cc266d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.gainsight.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d928ac4b30000040300473045022100c86b9fe6dbecdf6c26cf4c1ef70998805f6bf07d2df642747ba431f6c2626978022021efeb578eba67e3c6d0b2530a045c96be941ca46928b51fd2a844f43f1ea1cc0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d928ac46c0000040300473045022100b13774e835a4729fca0f7643ebebee10d235070c732603dc5ba68cccefefe95e0220248c4e6c89869ec7912fca579ff103b368ff07024c5a850eb49f6d04d3237549007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d928ac496000004030046304402201608a7b964aec8e26cd2c60733ad62e27d5b9f527bae049df56c819ec4dcec7402203071c699180acaf7c333e7d13973ba69504f2506611ed7546517c45809ed429f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f7818b5537925bd8c4768050fdb0c91eb9cf708f76a707593881a8b5cfaaa815803f4ce348e402e0e48ea41aeefad9bd6b890a099731e7e973cd2348a2f8f13d8688f4493c78c7aec4970022d0a7fc784758d2c8c70086530684989954637c96c50efeb1f692812ba4b17fa33ddb958f9f3ab60ac223e6ee57074799dac257ae76546bb39a06a091ca26eb209adb51ed5ea1a65e2dc4cf34955f59f17482274a35908e4c554e6b1804c0674e5c305033090db5b13277678f3b7701257d854771d6565c5cb8f0208123d9410390087d09784f13211134073ceb6c799642406c6197cc3acc77c1140aceb5b9b316ce9c732e216f44f8e0e3bbc0f9a8e8b75e038