*.knowre.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:a1:e1:da:28:13:42:53:ce:84:f4:f5:9e:1f:4d:9d was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.knowre.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a1:e1:da:28:13:42:53:ce:84:f4:f5:9e:1f:4d:9d
Serial Number (int): 3498996612096871935047404175969176989
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 44:6c:77:57:8b:45:b2:b8:2d:9a:59:13:bc:ac:bd:cb:8f:3c:de:d7
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 14:11:c8:de:d9:ad:99:f4:bd:ec:4c:12:d8:32:f4:24:e2:64:46:78
Fingerprint (sha256): 1a:90:42:3a:6a:41:7d:96:95:3d:a3:82:37:55:5f:0a:84:cb:ca:1b:cd:71:c8:28:3f:cd:9a:97:08:71:dd:ae

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.knowre.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.knowre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.knowre.com
knowreapi.com
knowre.com
knowreinc.com
*.knowreapi.com
*.knowreinc.com
knowreapp.com
*.knowreapp.com

Other certificates including the domain name knowre.com

(limited to 100 certificates)
jroboticksclub.com
knowre.com
*.knowre.com
*.knowre.com
villaart.com.ar
coact.space
*.knowre.com
www.passmoresdiner.ca
*.knowre.com
local.knowre.com
*.knowre.com
surix.co
*.knowre.com
*.knowre.com
www.oxeye.ai
local.knowre.com
*.knowre.com
smashopoly.com
local.knowre.com
local.knowre.com
knowre.com
local.knowre.com
anusoft.in
about.knowre.com
local.knowre.com
u.knowre.com
local.knowre.com
*.knowre.com
knowre.com
local.knowre.com
*.knowre.com
knowre.com
u.knowre.com
local.knowre.com
*.knowre.com
*.knowre.com
villaart.com.ar
walletwatcher.app
*.knowre.com
protium.codes
local.knowre.com
jp-skt-purple-p.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
surix.co
*.knowre.com
www.arcadiaxr.com
*.knowre.com
*.knowre.com
daekyo.knowre.com
local.knowre.com
www.knowre.com
www.thegoodcrew.io
local.knowre.com
local.knowre.com
*.knowre.com
local.knowre.com
view.braingrafter.com
about.knowre.com
knowre.com
u.knowre.com
local.knowre.com
local.knowre.com
about.knowre.com
mbabazi.co
local.knowre.com
local.knowre.com
*.knowre.com
local.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
www.heelum.com
htoohtoo.me
www.knowre.com
stm.daekyo.com
*.knowre.com
about.knowre.com
www.knowre.com
local.knowre.com
local.knowre.com
local.knowre.com
www.thegoodcrew.io
www.publinet.com.ar
*.knowre.com
*.knowre.com
about.knowre.com
*.knowre.com
*.knowre.com
local.knowre.com
*.knowre.com
tastingplanner.com
local.knowre.com
local.knowre.com
local.knowre.com
*.knowre.com
knowre.com
*.knowre.com

Certificate

The complete raw certificate details for *.knowre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy90fBRR2yyjcnKnQmJKR
h+QV5Dj2a326ArXJQN43ZDNNfQxjXTXHe28J1alCPw7dKdi6jupxSUIhdAT+8+ip
c0omeSOs0uWIrjScJiP58Bx98PyRPnLRpzgo7G9g+MDGRiaPHLSLapBjG3GDwQJc
PueN9m9Vdir/sV/nReufyvaZ+eou/BPp1iQaKzogHwW0kbiCWcXjvicGsbYsaaiw
NHHye/hfd7V8dlrH7sZilunAkGd8fyf1O5ly4BdsjhOXB9rXSNzND+zGp9jao4i3
C03RK0beat9N0yobH9RCb5rBMqAdZDjWKQHl13FK0cB6mjskqwDpaiKwj7RZWiCC
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3498996612096871935047404175969176989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.knowre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25735414821595988834864546646510487943522264994154707191819327278007092999735431588787406668523575351444096149494220349995548651297046366650225739904882735232389356446041627523040764125515812695387851128359811924617761113856083912604868693680922157010134211070768587518124548610485752742049453184501386535536273725769344784763014181974046896278196522464672792510092703662862689264934055371869530474740506942579074495012419571736503052891496349030286616708655184524783449849318906893727670320772442478524298331386807349783085012515257960430598425633449004241482747739230608296962521128476387624901565193434908382495383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							446c77578b45b2b82d9a5913bcacbdcb8f3cded7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowreapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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