www.inkitt.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:1a:2d:db:25:73:fd:f2:3b:3e:04:f8:07:b1:c1:41 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.inkitt.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:1a:2d:db:25:73:fd:f2:3b:3e:04:f8:07:b1:c1:41
Serial Number (int): 17415893734516737874896832016617161025
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 87:8f:6a:df:b1:e0:47:c9:75:57:83:2b:ea:dc:fe:10:03:6c:2c:d2
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 95:30:56:d9:0b:0e:16:02:56:fe:5c:83:01:63:7f:42:be:01:83:1c
Fingerprint (sha256): 29:48:5c:1b:3d:d8:0e:07:5c:38:55:cf:a6:1a:56:73:8c:bc:cb:39:30:ce:66:c8:b7:db:03:a7:dc:11:99:47

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate www.inkitt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.inkitt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.inkitt.com
inkitt.com

Other certificates including the domain name inkitt.com

(limited to 100 certificates)
*.inkitt.com
galatea-api.inkitt.com
nagrady.by
nagrady.by
persisch.de
www.riddlesaga.com
vantage-ira.solerabank.com
totoconnect.co.uk
sni.cloudflaressl.com
genrephile.com
vistaprintsandbox.thelevel.ai
*.inkitt.com
kibana.inkitt.com
literaryodyssey.com
*.inkitt.com
numero2.indefini.do
sni.cloudflaressl.com
mytechsite.co.uk
www.inkitt.com
www.inkitt.com
zabbix.mon.inkitt.com
apnetruck.com
gitlab.dev.inkitt.com
kibana.inkitt.com
redash.dev.inkitt.com
aclemens.de
swagger.inkitt.com
galatea-editor.inkitt.com
www.subsocial.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.inkitt.com
galatea-web.dev.inkitt.com
literaryodyssey.com
www.inkitt.com
sni.cloudflaressl.com
*.inkitt.com
www.colenet.eu
paej46.fr
kibana.inkitt.com
*.inkitt.com
flibra.gaiax-blockchain.com
aclemens.de
stable-diffusion-webui-gradio.inkitt.com
www.inkitt.com
redash.dev.inkitt.com
redash.dev.inkitt.com
sni.cloudflaressl.com
redash-dev.inkitt.com
areyoufree.xyz
www.fonduly.com
sni.cloudflaressl.com
gitlab.dev.inkitt.com
mahmudahsan.com
redash.dev.inkitt.com
gitlab.dev.inkitt.com
gitlab.dev.inkitt.com
admin.test.phnx.review
galatea-web.dev.inkitt.com
www.biculounge.com
edenparadisee.com
oceanlog.app
redash.dev.inkitt.com
paej46.fr
redash.dev.inkitt.com
view.smoky.no
redash.dev.inkitt.com
www.vdamarketing.co.za
gitlab.dev.inkitt.com
www.inkitt.com
www.ashleyandjack.com
kazcoin.net
persisch.de
www.a-zeroproduce.net
gitlab.dev.inkitt.com
redash.dev.inkitt.com
shelterbelt.sksis.ca
*.inkitt.com
bkudarnik.ru
hypnosis.atspsyapps.ru
www.morebettercheddar.com
cdn.inkitt.com
kindleebooks-wnyo.ebookbes.com
gitlab.dev.inkitt.com
galatea-api.inkitt.com
bytesfantastic.be
colt.inkitt.com
*.inkitt.com
www.neuronific.app
www.alkadome.co
ebptracker.newgen.co
www.inkitt.com
colt.inkitt.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
totoconnect.co.uk
galatea-api.inkitt.com
www.biculounge.com
redash.dev.inkitt.com

Certificate

The complete raw certificate details for www.inkitt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V5h2bO2T8IeJb8omol3
9KkViyRRil37p/pxOAMPxXwVHIzemVZR5DMLqnT3Tuf9yic5EPjTEAK4TL6Wpach
sbQlAb+1Il7fyWKcv4UJEMsTJ5lNy/TS+3SleaY9mUckUGmAd75j8zTZT76w3Z21
XG4O7zo3U97UbVrLtQ16IyCFgjTpleX9n606wDFm+fLuy22t8oKNYLUjNTwk8qkl
Rsz398c/qPn8d8mxlpcRWqFhC1tcelLDojJ4wpKeKzkVoqchIJMC2ApVFRiA1z3Q
NMFvgql7g8mT97yLEx+DYoHLZCX1yi3Pi4KUO7rv7HmnQqwdLiKDI45Z+ORYEVXS
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17415893734516737874896832016617161025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.inkitt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26935300569085527677667679754149158556429768223386140726173227343092794045353798168470551500980998083799806219652648838220385253500498420593321838126271508322651106884682436345689692076810635583116208577858282937655547802340165823500243151776842225570577131308837671612801401183392396219068442108081322596770853809848697198043518150798021741887028400371535395025288293793505730553976272181241868983366037780318271489253510104069559793805205970856464892755714267780555828713417126258254664252896908693178123894953942253810959360801930908687185824611439248773832232278695517527786175034213911611710499244185388798300903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							878f6adfb1e047c97557832beadcfe10036c2cd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkitt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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