api.obsidian.mondoo.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:88:ca:18:16:9b:a0:1d:29:8c:ec:e2:38:04:93:4f was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.obsidian.mondoo.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:88:ca:18:16:9b:a0:1d:29:8c:ec:e2:38:04:93:4f
Serial Number (int): 19319443268962206592599910557990294351
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:01:56:b5:e2:75:cf:d0:9a:0e:07:e4:61:85:af:17:eb:56:b1:b0
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 84:ba:4a:f5:e0:11:90:85:be:c5:6a:7f:8e:5f:ee:19:dc:28:97:66
Fingerprint (sha256): 13:cc:c4:fb:ed:e1:48:fb:1d:fc:85:9e:32:b1:9e:ee:91:4b:52:b5:18:54:ac:5c:10:7f:a1:6c:0a:82:ec:31

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate api.obsidian.mondoo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.obsidian.mondoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.obsidian.mondoo.com

Other certificates including the domain name mondoo.com

(limited to 100 certificates)
clstatus.irth.com
api.edge.mondoo.com
clstatus.irth.com
clstatus.irth.com
www.mondoo.com
api.verkehrsbuero.mondoo.com
pages.mondoo.com
console.lecos.mondoo.com
api.edge.mondoo.app
www.mondoo.com
console.constable.mondoo.com
registry.mondoo.com
install.mondoo.com
me.humancloud.network
us.api.mondoo.com
registry.api.mondoo.com
console.mondoo.com
install.mondoo.com
www.mondoo.com
clstatus.irth.com
eu.api.mondoo.com
clstatus.irth.com
releases.mondoo.com
clstatus.irth.com
us.api.mondoo.com
report.api.edge.mondoo.com
mondoo.com
api.litmus.mondoo.com
registry.mondoo.com
www.mondoo.com
clstatus.irth.com
www.mondoo.com
api.constable.mondoo.com
clstatus.irth.com
report.api.edge.mondoo.com
console.mondoo.com
clstatus.irth.com
www.mondoo.com
eu.api.mondoo.com
console.magnet-schultz.mondoo.com
console.lecos.mondoo.com
api.constable.mondoo.com
s.mondoo.com
report.api.edge.mondoo.com
clstatus.irth.com
console.constable.mondoo.com
clstatus.irth.com
api.snpgroup.mondoo.com
ustidchecker.comline.app
console.sva.mondoo.com
install.mondoo.com
meet.mondoo.com
pages.mondoo.com
install.mondoo.com
console.fvbrm.mondoo.com
api.obsidian.mondoo.com
s.mondoo.io
clstatus.irth.com
api.fvbrm.mondoo.com
clstatus.irth.com
mondoo.com
console.constable.mondoo.com
clstatus.irth.com
console.lecos.mondoo.com
hub.api.mondoo.com
console.sva.mondoo.com
mondoo.com
mondoo.com
clstatus.irth.com
install.mondoo.com
console.universal.mondoo.com
registry.mondoo.com
www.38enterprisegloballimited.com
s.mondoo.io
mjengineers.in
engramlearn.com
releasr-dev.mondoo.com
console.mondoo.com
releases.mondoo.com
console.lecos.mondoo.com
registry.api.mondoo.com
clstatus.irth.com
clstatus.irth.com
devices.elenchoshealth.com
console.mondoo.com
www.mondoo.com
api.spacecat.mondoo.com
mondoo.com
clstatus.irth.com
engramlearn.com
api.edge.mondoo.com
us.api.mondoo.com
console.snpgroup.mondoo.com
releasr-dev.mondoo.com
api.sva.mondoo.com
releasr-dev.mondoo.com
clstatus.irth.com
api.snpgroup.mondoo.com
registry.mondoo.com
api.constable.mondoo.com

Certificate

The complete raw certificate details for api.obsidian.mondoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw91Y/O6HtFGy1bmEXsOV
9I7LOK3UVe3aKIqQCxBbkYYtgwBc+KhnjYLt62+tBTV7lRCi2NcZs5BcA6tkoUhq
QHFTWLrwOfCD2Suh5uxTBVoi25tjCEZaSueSaAOCtxAA8IXMPlHDgKilkgvw6sYJ
R3Y3aldr8KCkolGhOnFuo+5M7c5Ea2UTbx9YAkVOsblK6ZkiW+CsEBQgALHh/eUv
mJFVplQubeRXyhsAd+bSXUgITCqpwwwFKCKVOzXyMwkjAqMzw8NinG5lLW9iXyP0
7sDxM9nJOFIwyjycYYT6WZgEmIau2cPCZHw0Ko9LL4VSJT2Kcv7CoE18Fn+Aoe3o
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19319443268962206592599910557990294351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.obsidian.mondoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24725620042690136207262048690634709056821253156751453341298490252200887158651525778192137865352105810178365597301823370749172015976957970163089187223996968097987798915381911461003841221903073724441513965786347826217942345258618516901075536087073115040995182150007445340519043242100360175494998808495492985628983503732096873098016984288544926764929914472353245108745059291373711273263991142547793855659585112450517073718115583405355280978931603315802851684998026676427299736328765490203719244880209349467845793278939819366492791048944440468801811016201829031043361952787946439416005983892755846783108767590691745163319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b80156b5e275cfd09a0e07e46185af17eb56b1b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.obsidian.mondoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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