dev.internal.kooapp.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:fa:cb:c4:b7:7a:82:99:3c:01:53:4d:a7:2f:1e:68 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.internal.kooapp.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:fa:cb:c4:b7:7a:82:99:3c:01:53:4d:a7:2f:1e:68
Serial Number (int): 9277575103996458711079273448235540072
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 74:cc:ee:6d:0f:46:12:f3:0a:20:e4:6b:4c:50:ab:da:71:96:36:f3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9a:6f:0a:e1:f6:37:39:c5:3b:68:e0:0b:64:69:7a:56:3c:6c:9e:f2
Fingerprint (sha256): 1e:bf:68:bb:7a:cc:dc:07:18:2f:e5:50:c0:b4:f0:c0:f5:47:7c:da:72:e1:2c:db:cf:33:7b:91:1e:28:a8:95

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate dev.internal.kooapp.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.internal.kooapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.internal.kooapp.com
kooapp.com
*.kooapp.com
*.dev.internal.kooapp.com

Other certificates including the domain name kooapp.com

(limited to 100 certificates)
newservicedesk.belstar.in
support.infinityfincorp.com
*.kooapp.com
kooapp.com
cloud-support.itsm-presales.in
contentupload-prod-gcp.kooapp.com
sni.cloudflaressl.com
*.dev.internal.kooapp.com
kooapp.com
contentupload-ex-gcp-2.kooapp.com
*.kooapp.com
servicedesk.puravankara.com
*.kooapp.com
*.preprod.internal.kooapp.com
itservicedesk.greenply.com
tls.automattic.com
www.kooapp.com
nexus-repo.kooapp.com
support.infinityfincorp.com
*.kooapp.com
support.fireprosystems.com
helpdesk.arbp.online
helpdesk.sdpcloud.in
dhanihelp.dhani.com
ithelp.kooapp.com
servicedesk.brueckner-india.com
helpdesk.arbp.online
servicedesk.cosmos.in
kooapp.com
testmeus.dharmarajs.online
*.kooapp.com
helpdesk.arbp.online
afetok.com
portal.ithelpdesk.kinnectonline.com
portal.ithelpdesk.kinnectonline.com
newesupport.comviva.com
helpdesk.stlit.stlfasteners.com
sni.cloudflaressl.com
kooapp.com
*.kooapp.com
sni.cloudflaressl.com
contentupload-ex-gcp-2.kooapp.com
video.kooapp.com
servicedesk.brueckner-india.com
afetok.com
hr.itsm-presales.in
helpdesk.quickparts.com
contentupload-gcp.kooapp.com
contentupload-ex-gcp-5.kooapp.com
subscribe.kooapp.com
images.kooapp.com
kooapp.com
sni.cloudflaressl.com
contentupload-ex-gcp-5.kooapp.com
*.kooapp.com
kooapp.com
*.kooapp.com
dev.internal.kooapp.com
helpdesk.arbp.online
www.kooapp.com
helpdesk.axn.services
*.kooapp.com
helpdesk.arbp.online
helpdesk.arbp.online
contentupload-ex-gcp-6.kooapp.com
dhanihelp.dhani.com
images.kooapp.com
helpdesk.arbp.online
sni.cloudflaressl.com
*.dev.internal.kooapp.com
contentupload-ex-gcp-6.kooapp.com
sni.cloudflaressl.com
kooapp.com
*.kooapp.com
helpdesk.quickparts.com
ithelpdesk.protium.co.in
servicedesk.sudlife.in
helpdesk.arbp.online
dev.internal.kooapp.com
cloud-support.itsm-presales.in
helpdesk.arbp.online
subscribe.kooapp.com
*.kooapp.com
contentupload-ex-gcp-3.kooapp.com
testmeus.dharmarajs.online
kooapp.com
enterprise.duggads.co.in
images.kooapp.com
*.kooapp.com
portal.ithelpdesk.kinnectonline.com
contentupload-ex-gcp-1.kooapp.com
kooapp.com
helpdesk.sdpcloud.in
cloud-support.itsm-presales.in
dev.internal.kooapp.com
support.axn.services
*.kooapp.com
newesupport.comviva.com
enterprise.duggads.co.in
helpdesk.quickparts.com

Certificate

The complete raw certificate details for dev.internal.kooapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSkwZVtDTHtRbHN8pGmE
TnwXe9lqSwVS+/dstgY31XLmZnxol4c/o8LsjdslSb/u5ba/+D74Q/ZYH3Kb9Ke3
4y478Lb/kz643sn2NPpWh+0Lg3gy40OKn8Hn+KKwamvmxXfcBvF7nUNdKvemNZCd
LWLP1fABkFuzKJDu4Qyr+JjKfqyJTPgu4vVn2QLQ7hUqJ5uwGUJFjhgykRqYVSZl
UTFbKt02XXJeYRhZPV2KWMA5X7pgCnIdKy/aY8tpOZb54wG0ph6l84pF9YH2xdFa
9krK+Mo+qHuCH4ITXjjnrPqbeMzC5oSmaWhMeMoF2rXRNu96bz2QullBXvXk6+V0
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9277575103996458711079273448235540072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.internal.kooapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16810005636357270974415688278275149907497590525492793114248031935511151569582181417207996208577033826940539729168514628346928926012147281004588416780287468197209237636782500164967628347717833325704394021303155659132719079255577977095929101633422785369718961739019413036357675894976330093312413584695622310714562937976054755581033255157801763614276893351070382214884960391688806714708934078592433270555687689351581852488238603358940241119810558056973576387044353134651523757078225526734065184376919457406940272667591429014202255102473933063504406151291587715477722655041355458739379695744868606899690820725683758920787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74ccee6d0f4612f30a20e46b4c50abda719636f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.internal.kooapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kooapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kooapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.internal.kooapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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