dev-portal.karla.ai

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:32:a3:83:44:ec:b7:39:f8:e1:32:97:ae:a2:de:62 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev-portal.karla.ai

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:32:a3:83:44:ec:b7:39:f8:e1:32:97:ae:a2:de:62
Serial Number (int): 4250615263267326014790239476770856546
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7a:45:73:cc:69:c1:dc:e1:de:77:95:a9:5b:0e:5f:85:e8:50:aa:28
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 51:68:e5:47:61:dc:d7:cc:2a:fb:c2:81:3a:b2:b5:58:25:35:c9:f9
Fingerprint (sha256): 27:54:6d:9c:1f:13:ba:2d:22:f7:ea:d0:6b:f6:a2:d6:61:55:7a:88:d1:37:d8:ae:96:d3:2f:9b:40:94:56:91

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate dev-portal.karla.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-portal.karla.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-portal.karla.ai
magic-portal.karla.ai

Other certificates including the domain name karla.ai

(limited to 100 certificates)
vaina.club
admin.okolo.com.ua
teclawapp.teclawgroup.com
staging.karla.ai
carlosveloper.com
playcanvas.currentstudios.io
admin.dennysautomotive.com
akshaynagare.com
www.doctor.apollofor.me
codelesstraveled.com
3rein.com
follow.beet.live
www.wesense.ai
credlocker.91social.com
sihst.com.ar
sni254208.cloudflaressl.com
sni254208.cloudflaressl.com
modzter.com
tnvet.karla.ai
laufcampus.dev.trayn.com
sni254208.cloudflaressl.com
thehunters.agency
shop.rundetaarn.dk
sni254208.cloudflaressl.com
join.karla.ai
www.dougmart.in
www.letsechoapp.com
www.ubiquityhealth.ca
gamma.stream
admin.doctor365.kr
sni254208.cloudflaressl.com
sni254208.cloudflaressl.com
trading.sportsiq.ai
nicoto.es
app.qa2.misalud.ai
links.gusfoods.com
www.rastrellohotel.com
staging.app.humancloud.network
su.dev.orijin.io
sni254208.cloudflaressl.com
www.rushhourgaming.com
test.golo-kiosk.app
sni254208.cloudflaressl.com
idcard.dwebbox.com
ontopstaging2.sentera.com
sni254208.cloudflaressl.com
www.feelmusi.com
admin.lucident.app
www.ubiquityhealth.ca
gjorgegajdov.com
norecibo.com
mc34.xtend.events
dev.karla.ai
sni254208.cloudflaressl.com
brunoogalvao.com.br
grandera.vlife.kz
adotrecords.com
sni254208.cloudflaressl.com
sni254208.cloudflaressl.com
boocam.app
api.karla.ai
sni254208.cloudflaressl.com
www.digitalereis.be
demo.dreamwave.tech
karla.ai
sni254208.cloudflaressl.com
www.lunelia.com
rev-analytics.com
www.codeguppy.com
cstsht.codecraft.no
sni254208.cloudflaressl.com
chois.co
trageberatung-lisareif.de
sni254208.cloudflaressl.com
sni254208.cloudflaressl.com
www.hikoolfilm.com.vn
dc27.lulz.ninja
blocknetprotocol.com
sni254208.cloudflaressl.com
bamalogistics.pl
unila.com.br
saarvi.estore.business
portal.broncos.darivault.com
app5.firstchoicepos.com
manage.aigens.com
sni254208.cloudflaressl.com
hitchhealth.co
games.amscripting.com
drieslaureys.be
p2dev.ufirst.com.my
flightstatus.stgairasia.com
www.balsfulland.app
www.elhalla.com
www.northernfoodmachinery.com
dev-portal.karla.ai
sni254208.cloudflaressl.com
sni254208.cloudflaressl.com
www.psycarlo.com
sni254208.cloudflaressl.com
myadblock.licensing.getadblock.com

Certificate

The complete raw certificate details for dev-portal.karla.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEfDCCA2SgAwIBAgIQAzKjg0Tstzn44TKXrqLeYjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIwODAwMDAwMFoXDTI1MDEwNTIzNTk1OVowHjEc
MBoGA1UEAxMTZGV2LXBvcnRhbC5rYXJsYS5haTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKS4a2ysRo8sZmzv5ksZW3r32Cpn8L6BxNT1E0BGWBKwNXJ
URJIy5TWDpA6+zIk1XLbAEYF6ln9jbERx+EYkjBdhT0OwpBV6GvVEZTo+Dt1yK8A
vYDz9aYHvjZhRahehw96SqzowsbCRYP+ETW4cx6jyzXTMkesqxR1VEskVDkId3KF
2pKO5VGybT6vb5AO9ILqzXfHzxNLFD3jlNMNveVpul4Dp2wWSfoUPnsKHjzaUPmX
184ivxBFqlsVQtpmp3KZ7qtQpquVzLJF2za/MhOqIUoW1BLqqIAumEu4eBJ0b/7u
yNLn89gIdpzCn2062qFmxwgsJWpiQtlPjFo8jccCAwEAAaOCAZYwggGSMB8GA1Ud
IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBR6RXPMacHc4d53
lalbDl+F6FCqKDA1BgNVHREELjAsghNkZXYtcG9ydGFsLmthcmxhLmFpghVtYWdp
Yy1wb3J0YWwua2FybGEuYWkwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy
MDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j
cmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0w
Mi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIu
YW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkrB3vvzIxaBaymlOKV8cg
ZrQimAXol5lkp3de6LkB7Z6d8sJurVaB1F10yQpIbdto4PIcGqj+tlW84D1N985b
hZYPEar/kptCtEQE87byqYY33pAMp8rADzBXcc1QXEijAT4eubDFQxfSj8UxlXCD
MlNk3tXBt08PvZ4/UaskSr1yAjIdZwfGIULV1qHWAru+V+7HjgYA7crAbDJ5UJzP
66SBRWMX77Sx6caVRzp60/je0KvlcrLPn/NHIR4yrdPFaqXRC8AaIUBP+WT/bxOE
8KL/OuFWYh+4MOlppnKM5jiNRqd1zwq7r3glqUZ4qw+/Llhk2gIlAOHI8tb4v/Z6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspLhrbKxGjyxmbO/mSxl
bevfYKmfwvoHE1PUTQEZYErA1clREkjLlNYOkDr7MiTVctsARgXqWf2NsRHH4RiS
MF2FPQ7CkFXoa9URlOj4O3XIrwC9gPP1pge+NmFFqF6HD3pKrOjCxsJFg/4RNbhz
HqPLNdMyR6yrFHVUSyRUOQh3coXako7lUbJtPq9vkA70gurNd8fPE0sUPeOU0w29
5Wm6XgOnbBZJ+hQ+ewoePNpQ+ZfXziK/EEWqWxVC2mancpnuq1Cmq5XMskXbNr8y
E6ohShbUEuqogC6YS7h4EnRv/u7I0ufz2Ah2nMKfbTraoWbHCCwlamJC2U+MWjyN
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4250615263267326014790239476770856546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-portal.karla.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22542848279055972894209755068103400369695897931778220360461637043695297241224703962103801617926821645701426952669058807736898703630427335219362476532114465193456972245213663723826736797650287923723317723995831465830541800303159926650557805438324860182172502868580441416448719848734310141248787548118265889615114478962902564998202966449981192735018051093001330498866655626610177014892259371419202652127321859960248796673867301421432081072748647935864182283220829738751558480652237518785975394623350336375765388211343492595891358871635998636416575308184909382630563630348564233039920127005634182477615993239384245439943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a4573cc69c1dce1de7795a95b0e5f85e850aa28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-portal.karla.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magic-portal.karla.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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