device.compare.kubernetes.koneksahealth.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:29:c5:60:09:eb:e6:fb:36:5b:2b:68:ab:7a:9e:01 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=device.compare.kubernetes.koneksahealth.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:29:c5:60:09:eb:e6:fb:36:5b:2b:68:ab:7a:9e:01
Serial Number (int): 17496851360069908463311306745422978561
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:0c:b5:c8:53:4d:cf:84:f3:ae:3d:db:38:47:99:aa:49:93:3b:04
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 51:3e:35:d8:62:15:8b:26:97:74:d9:9c:85:b5:98:13:67:23:a0:f6
Fingerprint (sha256): 1b:71:15:15:22:d2:ad:35:dc:db:f2:86:58:1e:a9:5e:a9:06:83:b7:fd:6c:0f:39:fd:a2:6b:3a:d1:df:30:a9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate device.compare.kubernetes.koneksahealth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for device.compare.kubernetes.koneksahealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

device.compare.kubernetes.koneksahealth.com

Other certificates including the domain name koneksahealth.com

(limited to 100 certificates)
*.staging.compare.koneksahealth.com
technology.agilitihealth.com
status.zohocorp.com
www.koneksahealth.com
status.digitalhumans.jp
24x7.ifxnetworks.com
status.slightlydifferent.co.nz
koneksahealth.com
demo.compare.koneksahealth.com
24x7.ifxnetworks.com
compare.koneksahealth.com
cloudteam.prolaborate.com
compare.koneksahealth.com
status.clear.co
koneksahealth.com
status.zohocorp.com
monitor.secload.com.br
reporting.compare.koneksahealth.com
status.manageengine.cn
monitor.secload.com.br
www.koneksahealth.com
www.koneksahealth.com
cloudteam.prolaborate.com
www.koneksahealth.com
koneksahealth.com
istechwatch.datamarket.com.tr
*.compare.koneksahealth.com
monitor.business.teksavvy.com
tools.staging.compare.koneksahealth.com
status.clear.co
www.koneksahealth.com
status.manageengine.cn
device.compare.koneksahealth.com
device.compare.kubernetes.koneksahealth.com
status.digitalhumans.jp
cloudteam.prolaborate.com
24x7.informo.com.br
cd.dev.koneksahealth.com
monitor.netlabindia.org
tools.compare.kubernetes.koneksahealth.com
www.koneksahealth.com
staging.compare.koneksahealth.com
24x7.ifxnetworks.com
reporting.compare.kubernetes.koneksahealth.com
monitor.secload.com.br
production.mobilegateway.api.koneksahealth.com
monitoring.sidusgroup.com
koneksahealth.com
uptime.koneksahealth.com
reporting.development.compare.koneksahealth.com
koneksahealth.com
status.manageengine.cn
ams.genieall.ca
koneksahealth.com
koneksahealth.com
status.ops.koneksahealth.com
status.monitor.koneksahealth.com
edge.dev.koneksahealth.com
cd.koneksahealth.com
24x7.informo.com.br
koneksahealth.com
tools.demo.compare.koneksahealth.com
24x7.sierra.sg
development.compare.koneksahealth.com
status.digitalhumans.jp
www.koneksahealth.com
www.koneksahealth.com
infra.stealthmonitoring.com
uptime.stackharbor.com
device.compare.koneksahealth.com
status.digitalhumans.jp
ams.genieall.ca
status.vodlix.com
reporting.demo.compare.koneksahealth.com
infra.stealthmonitoring.com
monitoring.xencia.com
vpn.koneksahealth.com
koneksahealth.com
monitoreo.ademanda.com
koneksahealth.com
www.koneksahealth.com
koneksahealth.com
opsmgr.staging.koneksahealth.com
uptime.koneksahealth.com
koneksahealth.com
uptime.koneksahealth.com
production.device-ingestion.koneksahealth.com
uptime.koneksahealth.com
status.digitalhumans.jp
techstatus.solano.edu
istechwatch.datamarket.com.tr
vpn.koneksahealth.com
staging.mobilegateway.api.koneksahealth.com
ops.compare.koneksahealth.com
development.mobilegateway.api.koneksahealth.com
monitoring.fuego.qa
status.slightlydifferent.co.nz
status.chevinfleet.com
uptime.stackharbor.com
tools.demo.compare.koneksahealth.com

Certificate

The complete raw certificate details for device.compare.kubernetes.koneksahealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hDO/RT1aARucDfoGypt
LL8IGb4O40AxgHWI2xbW4YcnROwEn2xQd4TIrQy646wf8x/EOY56xyiEVWWzrS8Q
5//uOkDPWVURk4V9dwUMwgLsC/tPkVRNyjgBPc6nPfVHsHOy/DyXi5unK0iyCeMJ
tAmchb+g+7qDdqlBk1Q+i9RuqLFWPk9vwpBvVcUT5/BXO90c6RslYQxNupsGaPlU
9tbgXIc5EFfOgsPiXz13SkctNlba62K3f0+fg2Di/4+xrPisJwMRol8Fb9xnjvYl
UL4xt8Afm4jpTZTTu9H8ABVBO1q2Pym1Ppg0wnCdpPZM6r3hMbaayY4IlKnlIsA5
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17496851360069908463311306745422978561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'device.compare.kubernetes.koneksahealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28538145526871564610884619544882852941213327630151697505314023235175528713286115312865925052952820246108155992072284566234856357408649756670203827804778568356046238505524144185156776526367901458105322417648994954120641424324156957956027258241672290462275695377383713345695642718311522115232159939385323191114311302528916263822642043310006739059533265084539158487626926353594618842560294103168017190058407064867132167347372697286400244887397499508814941945598007089470725561441988367069229027256702219921729484663961458104368480115772916642247342486894893076924104439120069790344371352960557004498504634691632056252897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							500cb5c8534dcf84f3ae3ddb384799aa49933b04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'device.compare.kubernetes.koneksahealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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