*.k8s.doolittle-production.us-west-2.aws.wna.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:e9:32:81:77:48:37:1d:63:b8:b9:e7:af:ff:ea:80 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.k8s.doolittle-production.us-west-2.aws.wna.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e9:32:81:77:48:37:1d:63:b8:b9:e7:af:ff:ea:80
Serial Number (int): 17161565495286771335964187354908846720
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 59:5e:95:99:37:c9:c5:46:01:be:9a:ea:30:49:df:d0:83:fd:e4:b4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1b:ce:e0:64:de:ef:df:b8:28:8b:fe:4c:1a:23:b1:f5:12:ff:17:88
Fingerprint (sha256): 26:12:c8:92:81:fb:95:f5:ea:13:3d:ff:43:50:86:8d:ed:48:ba:b2:12:f2:06:13:3c:ad:39:56:aa:bf:f1:c6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.k8s.doolittle-production.us-west-2.aws.wna.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.k8s.doolittle-production.us-west-2.aws.wna.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.k8s.doolittle-production.us-west-2.aws.wna.cloud

Other certificates including the domain name wna.cloud

(limited to 100 certificates)
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.imlp-prod-app.wna.cloud
media.wne-cdn.com
*.doolittledev.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.dev.doolittle.us-west-2.aws.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.doolittleprod.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod-app.wna.cloud
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.rad-prod.edgenuityapp.com
*.ow-prod-app.wna.cloud
media-prod.wne-cdn.com
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.assessment-dev.il-apps.com
*.doolittle-dev2.wna.cloud
*.doolittle-nonprod.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.assessment-prod.il-apps.com
*.ow-prod-app.wna.cloud
*.wna.cloud
*.lmsadmin-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-prod-app.wna.cloud
*.rad-prod.edgenuityapp.com
media-nonprod.wne-cdn.com
*.armstrong-prod-app.wna.cloud
*.k8s.doolittle-nonprod.us-west-2.aws.wna.cloud
*.ow-prod.edgenuityapp.com
*.k8s.doolittle-dev3.us-west-2.aws.wna.cloud
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod-app.wna.cloud
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-dev4.wna.cloud
*.wna.cloud
*.ow-prod-app.wna.cloud
*.lmsadmin-qa-app.wna.cloud
*.wna.cloud
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.rad-prod-app.wna.cloud
*.doolittledev.wna.cloud
*.doolittle-nonprod.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-pnayak.wna.cloud
*.lmsadmin-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.k8s.ops.us-west-2.aws.wna.cloud
*.ops.wna.cloud
*.doolittle-dev6.wna.cloud
*.armstrong-prod-app.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev3.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.lectura-staging.il-apps.com
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.doolittle-dev-app.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.doolittle-prod.il-apps.com
*.k8s.ops.us-west-2.aws.wna.cloud
*.k8s.doolittle-pnayak.us-west-2.aws.wna.cloud
*.assessment-prod.il-apps.com
*.doolittle-production.wna.cloud
*.ops.wna.cloud
*.doolittle-nonprod.wna.cloud
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.intergalactic-prod.il-apps.com
*.doolittle-nonprod.wna.cloud
*.doolittledev.wna.cloud
*.ow-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-production.wna.cloud
*.doolittle-dev6.wna.cloud
*.doolittle-nonprod.wna.cloud
*.doolittle-iam.wna.cloud
*.doolittle-production.wna.cloud
*.prod.ops.us-west-2.aws.wna.cloud
*.prod.doolittle.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev6.us-west-2.aws.wna.cloud
*.doolittleprod.wna.cloud
*.doolittle-production.wna.cloud

Certificate

The complete raw certificate details for *.k8s.doolittle-production.us-west-2.aws.wna.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz0+U7SeFo5TNEaBnHnt
/ovxn4ucy11q6ft2PhTfaHhiWOcaj8GxDTFpxBvOFUBKPtwVqgQ5dJGHk5FpDZBr
NBeWefWiVsGkQXQ8NNuDjPXN4/PRmpV8uSrOGvDOjEja4m4rc3EQOTfKdQGKkYut
uMgmUpo6xF1UnJvhA4UnVT8EbsHN5Cdtv22BIHPTNy3zrb0qEmOqOVA2tBPW4wBU
j5LVTX/AvkGQVyd72CpPU0iH6G2hMp0vTaVyKPn3k/nCC9M3zM2a/ldLxrayi5c0
8BWZDmO2ezTa8mRH9OjImPoqUEEqfZP0Pw4oEMA6faq5MAp+avaIEUte/7iAhUem
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17161565495286771335964187354908846720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.k8s.doolittle-production.us-west-2.aws.wna.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20607043987513159095687350409776365797828068768897490230108401746727246273625691916830038162642647047130022381507911905785443874437208415453449167579465484659892416240836468246116077966551567586284875225592755330075308548109634827932241305125703242600805148008737940184419627512151330775628202915205622994514361389796954751296787366639037937640141686853642534479927240465262914269697589067635051280268439668938045906125067236169877923837524133485970982620972864677586390229647744926031266451693671891063407416793265034804376067466414341737692529464301840584769906627618543922755394014137095502720427781109252960527929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							595e959937c9c54601be9aea3049dfd083fde4b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.doolittle-production.us-west-2.aws.wna.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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