ess.de.barracudanetworks.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:73:df:38:a5:4c:c8:73:90:a5:78:b6:54:9e:b2:06 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ess.de.barracudanetworks.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:73:df:38:a5:4c:c8:73:90:a5:78:b6:54:9e:b2:06
Serial Number (int): 4589325591362819505207533933825012230
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 45:7f:e5:31:19:89:9f:bf:d9:bb:83:d8:9b:15:8f:2d:5e:23:c6:cb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 3c:c9:12:cc:25:82:d8:f9:47:b8:5b:ba:4c:18:d1:cf:fe:2f:97:7b
Fingerprint (sha256): 0e:84:c1:f7:d2:9c:40:dc:87:96:83:a8:e7:2f:d9:d1:75:ba:e4:fd:2e:80:6f:01:e9:81:8e:1a:37:79:33:64

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ess.de.barracudanetworks.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ess.de.barracudanetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ess.de.barracudanetworks.com
encrypt.de.barracudanetworks.com
*.ess.de.barracudanetworks.com
*.encrypt.de.barracudanetworks.com
ess.de.barracuda.com

Other certificates including the domain name barracudanetworks.com

(limited to 100 certificates)
bcs.ie.barracudanetworks.com
webfiltering.barracudanetworks.com
ess.cd1.barracudanetworks.com
cranial.prod.bac.aws.cudaops.com
encrypt.barracudanetworks.com
*.eu-central-1.bcs.barracudanetworks.com
mas.barracudanetworks.com
encrypt-inbound.au.barracudanetworks.com
*.barracuda.com
waas.barracudanetworks.com
login.beta.barracudanetworks.com
dlportal.barracudanetworks.com
ess.cd1.barracudanetworks.com
liveboot.beta.barracudanetworks.com
dlportal.barracudanetworks.com
ess.cd1.barracudanetworks.com
bcs.ie.barracudanetworks.com
share.ridezum.com
dlportal.barracudanetworks.com
bac.dev.bac.aws.cudaops.com
barracudanetworks.com
ess.de.barracudanetworks.com
billing.barracudanetworks.com
*.ess.ca.barracuda.com
*.scan.barracudanetworks.com
ess.vt2.barracudanetworks.com
*.bcs.barracudanetworks.com
*.barracudanetworks.com
terminal.dilutedband.com
dlportal.barracudanetworks.com
portal.production-blue.cse-cudasvc.com
login.barracuda.com
ess.cd1.barracudanetworks.com
mas.barracudanetworks.com
dlportal-admin.barracudanetworks.com
*.ess.barracuda.com
ess.cd1.barracudanetworks.com
api.account.barracudanetworks.com
ess.barracudanetworks.com
*.threatfeedback.barracudanetworks.com
api.backup.beta.barracudanetworks.com
outlook-addin.ess.barracudanetworks.com
bcc.barracudanetworks.com
bcs.barracudanetworks.com
api.bbs.barracudanetworks.com
cloudgenwan.barracudanetworks.com
api.account.barracudanetworks.com
ess.cd1.barracudanetworks.com
ess.cd1.barracudanetworks.com
www.barracudanetworks.com
auth.barracudanetworks.com
barracudanetworks.com
d.barracudanetworks.com
*.dlportal.staging.barracudanetworks.com
login.barracudanetworks.com
ess.va.barracudanetworks.com
staging.batic.barracudanetworks.com
*.sentinel.barracudanetworks.com
bac.prod.bac.aws.cudaops.com
campus.barracuda.com
prototypingplanner.com
ess.ca.barracudanetworks.com
www.ckt.tokyo
login.barracudanetworks.com
campus.barracuda.com
*.bcs.barracudanetworks.com
login.barracudanetworks.com
esstimeline.barracudanetworks.com
mas.ca.barracudanetworks.com
nextfinancial.io
mas.barracudanetworks.com
ess.cd1.barracudanetworks.com
bcs.ie.barracudanetworks.com
codeus.ai
bvm.barracuda.com
ess.cd1.barracudanetworks.com
csg.barracudanetworks.com
mdm.barracuda.com
mas.eu.barracudanetworks.com
bcc.barracudanetworks.com
bcs.barracudanetworks.com
sni.cloudflaressl.com
ess.cd1.barracudanetworks.com
*.barracudanetworks.com
*.ess.ca.barracuda.com
csg.barracudanetworks.com
*.barracudanetworks.com
encrypt-legacy.barracudanetworks.com
us.ess.barracudanetworks.com
*.scan.barracudanetworks.com
schub.barracudanetworks.com
scan.barracudanetworks.com
webfiltering.barracudanetworks.com
encrypt.barracudanetworks.com
*.barracudanetworks.com
*.sentinel.barracudanetworks.com
staging.mas.barracudanetworks.com
bvm.barracuda.com
scan.barracudanetworks.com
cranial.prod.bac.aws.cudaops.com

Certificate

The complete raw certificate details for ess.de.barracudanetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUujFdteXfwM+CzEdvaQ
41IC8KANV/aYonat50T0XWH0ZFAVZTk+Qy5iLHaqYHoE92gdWoS/n/DNH3N+huqe
xSON2Vh1zUcon7S6S+vDcp8I4N5NNi1UunKj21SGvYGLOFQZym+gy9AkzC1ChBp7
CCNbI+tPEfioUdTTM1jkKglDuFURK1UfCgP8i6iEJ+p0ApI1L0Z6W4TIRhd6b+dv
b/8o2kcQrjzhOcaeSBbDweb4E5U7JaFtJ02zUcVAnKetYFWbQwud340ABpV1G5q0
ccgMXNZWzLKhEjaclq//fBbB66PrEGgs7q0y9ItKRvWbr++d//hmH7YIj7hqlHTj
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4589325591362819505207533933825012230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ess.de.barracudanetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18846805460528384825512086509884368767114197778048131472115319404899537182355528074187876897718188157454251616160430893211837720243988239158832123129374292410256008530852116567417453017187335241782881208819878056742654020159594111010645638052575699144125290097966159551729054220038168519671462775798646922095432008948112986127832406795599476172718412999918873375665055379895466995353351982264703779960932442875164544301349526488872834114073395404677880073356724339077858163682068022393158455591032746212303670433128298234459481693435215401208247834435201027964557444097160610788407377799438185950647079252662167069653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							457fe53119899fbfd9bb83d89b158f2d5e23c6cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess.de.barracudanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encrypt.de.barracudanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ess.de.barracudanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encrypt.de.barracudanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess.de.barracuda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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