my.zenreach.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:2a:71:8f:c4:3d:64:11:53:57:e5:30:10:ba:f0:08 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=my.zenreach.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2a:71:8f:c4:3d:64:11:53:57:e5:30:10:ba:f0:08
Serial Number (int): 8195747745413689132607887813711163400
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 68:d9:05:50:d2:08:69:77:f2:8c:32:4e:dd:60:5b:f1:30:d8:33:ca
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9e:53:5b:16:d6:29:c1:bc:4c:81:e5:bd:70:6e:27:fb:11:da:84:21
Fingerprint (sha256): 34:22:8b:85:78:75:5f:81:d7:20:a8:3d:57:06:b0:50:c5:22:9d:b8:ec:3b:4a:c5:7c:75:f8:ba:ca:e7:7c:e3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate my.zenreach.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.zenreach.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.zenreach.com
my.wifast.com
wifast-smbsite.service.uw2.zp.cntr.io
wifast-smbsite.service.zp.cntr.io

Other certificates including the domain name zenreach.com

(limited to 100 certificates)
tls.automattic.com
observe.zenreach.com
pos-hookrcvr.uw2.zp.cntr.io
groove.ehlinks.com
groove.simondata.com
support.zenreach.com
groove.robinpowered.com
datadogrelay.zenreach.com
developer-site.uw2.zp.cntr.io
tls.automattic.com
groove.swivl.com
groove.lyric.com
maestro.zenreach.com
portal.zenreach.com
groove.kiva.org
developer-site.uw2.zp.cntr.io
info.zenreach.com
developer-site.uw2.zp.cntr.io
api.zenreach.com
groove.ehlinks.com
groove.jebbit.com
maestro.zenreach.com
hs2portal.zenreach.com
tls.automattic.com
auth.zenreach.com
groove.jebbit.com
sales.zenreach.com
groove.adpearance.com
location.zenreach.com
my.zenreach.com
blog.zenreach.com
groove.cloudleaf.io
my.zenreach.com
tls.automattic.com
zenreach-site.service.uw2.zp.cntr.io
partner.service.zp.cntr.io
partner.service.zp.cntr.io
support.zenreach.com
groove.kiva.org
groove.trustarc.com
tls.automattic.com
branded.grooveapp.com
info.zenreach.com
groove.g2.com
groove.uber.com
support.zenreach.com
tls.automattic.com
tls.automattic.com
api.zenreach.com
zenreach-site.uw2.zp.cntr.io
zenreach.com
www.zenreach.com
zenreach.com
sales.zenreach.com
groove.crossover.com
support.zenreach.com
portal.zenreach.com
tls.automattic.com
my.zenreach.com
groove.trustarc.com
analytics-report.uw2.zp.cntr.io
info.zenreach.com
maestro.zenreach.com
zenreach.com
maestro.zenreach.com
portalcdn.zenreach.com
my.zenreach.com
tls.automattic.com
tls.automattic.com
sales.zenreach.com
groove.g2.com
tls.automattic.com
repmanagement.service.zp.cntr.io
blog.zenreach.com
blog.zenreach.com
www.zenreach.com
maestro.zenreach.com
papi.zenreach.com
groove.robinpowered.com
tls.automattic.com
my.zenreach.com
portal.zenreach.com
sales.zenreach.com
tls.automattic.com
repmanagement.service.zp.cntr.io
my.zenreach.com
auth.zenreach.com
zenreach.com
groove.adpearance.com
repmanagement.service.zp.cntr.io
www.zenreach.com
partner.service.zp.cntr.io
groove.kiva.org
support.zenreach.com
auth.zenreach.com
groove.elastic.co
tls.automattic.com
support.zenreach.com
tls.automattic.com
*.zenreach.com

Certificate

The complete raw certificate details for my.zenreach.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpikmmHgr10/qT1QuoyH
WR9rUfLmCkuZr57c5oIUMgFzxg5GCiKbfk1tgAlRT+CHV/YO1EQjK/qjolZIWg0r
MJkqRe2M4GlGRmdyXkO6nPpsl1DNl6jjB1G+nn9Tp3ZJQnvrFGfAkCWOBGxSEIgX
uPoHw64W+H4MNwknHZGpyME1BNF7GMEZ4Dk4BqyLuTy9Cvzlr1pcghxiTNVOH7Hz
gFbN9Ncl584FtMHxLqMJZaip777DZP6mOtmbm6tDHU/gQYzxInqZEu5UsJ6gjoOk
M10CoKjBT3klhI3+/6da8n3LjOS0FOZPjhHdu/W/oz5psc5GxC3WteSJf74KXNbS
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8195747745413689132607887813711163400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.zenreach.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26080361882175866273902749143809289298325356069628425906408089460046953663423244006933464684368232634166353958379040188593143699964629050206903664023613593854696565089368789558944568640986557413941273081616772064410479047031947840237798212589333925389175273020205878921911370663939291820943669024388707417701055256779374634389565976429181931998117935681006194538291747080499684013499231604772642836561028075193056793916841860897685398972106221754372966930374188095117191859732017578438056668905281480311247573433785824447889294907026069749133118551149455946031935849828467565019570030953324149550671120455148420649713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68d90550d2086977f28c324edd605bf130d833ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.zenreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wifast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifast-smbsite.service.uw2.zp.cntr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifast-smbsite.service.zp.cntr.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00abc8aa34888f1549d0d1bbb3b418bde9e8c300718b2348d4007d6fbb96dae56c2ee84ffd41ba750f3f28250617f390c1f62b5f6724fb8b4cce97e57f2275e4a9f495246c31af87e708270d99b7f70e7327b65a1d07645e4ab66eb91357884d796514cf6e1b49ebab87050cf1138f98914f410fcbe2294c569065d5ab696ec4d141257340460e3c4e20923abaefd2f83b05675cd01ce8e13154c912017b2bf2d7de8791a2309b163f94cb7891852f1402fb1a946c6342f313488591f5fafe8836cc6710c322a105958dcc1af3924cb727d3862494fe4f20de62a2e108fc9ce538f36139206ca942d9192609fdaf20d8711e3dd4ce42c3d0b8bb5f28fd7f9c400c