demo-app-sre5-hello-world-nlb.exactsciences.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:0f:2b:04:96:c2:6b:b4:f7:96:81:6a:bf:c6:5a:15 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=demo-app-sre5-hello-world-nlb.exactsciences.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:0f:2b:04:96:c2:6b:b4:f7:96:81:6a:bf:c6:5a:15
Serial Number (int): 6724896938986000571507760810047199765
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 71:44:32:57:38:e5:f4:33:4a:81:08:6f:0e:48:a5:b1:94:18:8f:f5
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 25:c3:96:85:05:d9:18:00:49:f1:a8:18:b0:86:a1:cd:da:46:4c:58
Fingerprint (sha256): 0f:b7:3f:a5:ca:6b:4e:58:2d:75:87:3b:9c:2a:ba:09:f8:5e:60:21:6e:d0:15:14:9a:69:37:ee:4f:c2:50:53

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate demo-app-sre5-hello-world-nlb.exactsciences.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demo-app-sre5-hello-world-nlb.exactsciences.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo-app-sre5-hello-world-nlb.exactsciences.net

Other certificates including the domain name exactsciences.net

(limited to 100 certificates)
arrowhead-test2.exactsciences.net
groundcontrol.exactsciences.net
xfactor-campaigns-test4.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
specimen-estimations-dev.exactsciences.net
xfactor-campaigns-test5.exactsciences.net
feyereisentest9.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
prx01-datadog-prod.exactsciences.net
dev2-lis.exactsciences.net
*.exactsciences.net
sni.cloudflaressl.com
demo-app-sre5-hello-alb.exactsciences.net
demo-app-sre5-hello-nlb.exactsciences.net
vault-ent.exactsciences.net
addressbook-purple-ft.exactsciences.net
dev3-discovery.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
feyereisentest8.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
lab-odxoutcome-stage.exactsciences.net
www.montraitement-cancerdusein.fr
xfactor-campaigns-test2.exactsciences.net
*.exactsciences.net
ansible-dev.exactsciences.net
shuttle-api-dev-shuttle-nlb.exactsciences.net
addressbook-stage.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
dsci-kit-return-model-dev.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
custom-subdomain-dev.exactsciences.net
status.exactsciences.net
application-corepoint-test.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
xfactor-campaigns-test3.exactsciences.net
650-covid-19-qa.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
*.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
testing-oregon-network.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
addressbook-pp.exactsciences.net
status.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
*.exactsciences.net
a-test-domain.exactsciences.net
dev-lis.exactsciences.net
exas-helix-ds.exactsciences.net
test-inbound-endpoint.exactsciences.net
pcdx-manifest-dev.exactsciences.net
status.exactsciences.net
consul-test.exactsciences.net
lis-dev.exactsciences.net
xfactor-lis-test1.aws.exactsciences.net
www.oncoguardliver.com
xfactor-text-dev.exactsciences.net
xfactor-lis.exactsciences.net
xfactor-fax-test1.exactsciences.net
arrowhead-test2.exactsciences.net
nomad.exactsciences.net
testing-oregon-network.exactsciences.net
a-test-domain.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
discovery-lis.exactsciences.net
uat-cms.exactsciences.net
status.exactsciences.net
xfactor-fax-test2.exactsciences.net
api.xfactor-integration-test.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
test-ib-endpt.exactsciences.net
audit-log-stage-audit-log-nlb.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
addressbook-stage.exactsciences.net
xfactor-campaigns-test1.exactsciences.net
xfactor-test-campaigns-1.exactsciences.net
msn-lb-qa.exactsciences.net
exas-shuttle-api-dev-shuttle-nlb.exactsciences.net
alation-test.cloud.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
xfactor-alb-test.exactsciences.net
xfactor-shipping-test.exactsciences.net
xfactor-lis-test2.exactsciences.net
*.exactsciences.net
vault.exactsciences.net
www.nyuganchiryo.jp
xfactor-campaigns-test1.exactsciences.net
www.chemoyesorno.org
xfactor-lis-dev.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
addressbook-stage.exactsciences.net
www.screeninghasmeaning.com
app-onbase-test.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
terraformtest-1-dev.exactsciences.net
alation-prod.cloud.exactsciences.net
xfactor-text-test1.exactsciences.net
pcdx-manifest-dev.exactsciences.net

Certificate

The complete raw certificate details for demo-app-sre5-hello-world-nlb.exactsciences.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLcviHhhr9VUx9DUHKbl
qNbmZ2KUVga+rWfQYZy19px/LVE6EFO5FeAVqYE7H+56S/siHbDHJBL7vgR7CGhC
HrIhAZ+YTeWLmn/pq8UcKOe8PB82R5+UgdvT7CzEpu27mSFIlt+a+6Vkt2P2D6yU
SFyOwnJJOCpvjv91fzJDe2+J5/a4HNxG1pg4R25KMi3/UTM+oWVlqsthPNTwmYzB
rgXvIjIVy03IsvC9dRgPEscQfWM8uWqA46qedL6QQ5O3zDir8qzXImpj8ePRKbex
8jutulC7/Sv0I76dxdi3Ad51nr5wavObjcsJFQklsCySSf3DRtgsXT9D+PZyg5a8
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6724896938986000571507760810047199765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo-app-sre5-hello-world-nlb.exactsciences.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24833039996970645272277059360950839383397636999117095186708899252550690686558421561076992046343263460887982365951222666671931518086110097796198392562433132256402035229247904388572544280215716071379831498175985005751401634455588424968354618945619929867411855909180039368463511527054780619460838600319353211036947265369243010904434511925199670143646121829418819274718364972184844696449483520650239469346479058684580952941078356987111750968297369957476212513030914838963858356584275941686913255952153188822440387587233680808560361915420124485296726703931631109899830586412974792870259500403045277343407392947208032009229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7144325738e5f4334a81086f0e48a5b194188ff5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-app-sre5-hello-world-nlb.exactsciences.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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