e2e-knesp-pipjct.sandbox.entersekt.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:11:00:f7:6d:73:07:8e:21:1d:cc:73:a6:37:82:4f was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=e2e-knesp-pipjct.sandbox.entersekt.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:11:00:f7:6d:73:07:8e:21:1d:cc:73:a6:37:82:4f
Serial Number (int): 14709796603458235913089903281059627599
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 97:85:a5:19:08:58:ba:28:6c:90:10:09:ad:86:bc:4e:19:d4:75:42
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a6:7a:ec:48:4d:e7:0d:39:a4:a1:1a:2f:fc:d8:b4:dd:34:34:26:16
Fingerprint (sha256): 36:2c:c7:21:d2:9e:23:dc:b2:c6:b6:d5:0d:cb:4b:fe:16:dc:54:43:0e:60:6e:0c:40:f2:88:5d:b0:6d:4a:01

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate e2e-knesp-pipjct.sandbox.entersekt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e2e-knesp-pipjct.sandbox.entersekt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

e2e-knesp-pipjct.sandbox.entersekt.com
e2e-knesp-ktyjfv.sandbox.entersekt.com

Other certificates including the domain name entersekt.com

(limited to 100 certificates)
ca.int.entersekt.com
e2e-knesp-glzblt.sandbox.entersekt.com
e2e-knesp-sg2xc2.sandbox.entersekt.com
e2e-knesp-yytlnc.sandbox.entersekt.com
e2e-knesp-qjevn8.sandbox.entersekt.com
redirector-private.e2e-knesp-zhldbv.sandbox.entersekt.com
sts.entersekt.com
lync.entersekt.com
e2e-knesp-v8dplr.sandbox.entersekt.com
e2e-knesp-dwunnw.sandbox.entersekt.com
*.as1.ehs.entersekt.com
e2e-knesp-ky6gmd.sandbox.entersekt.com
e2e-knesp-cbev0v.sandbox.entersekt.com
e2e-knesp-xdemff.sandbox.entersekt.com
e2e-knesp-vuob8r.sandbox.entersekt.com
backend.entersekt.com
e2e-knesp-exmobt.sandbox.entersekt.com
e2e-knesp-wkzoid.sandbox.entersekt.com
e2e-knesp-1burkq.sandbox.entersekt.com
*.services.secops.entersekt.com
lync.entersekt.com
redirector-private.e2e-knesp-qfoerx.sandbox.entersekt.com
redirector-private.e2e-knesp-tr8f6g.sandbox.entersekt.com
redirector-private.e2e-knesp-g6xdx3.sandbox.entersekt.com
lync.entersekt.com
e2e-knesp-90yphj.sandbox.entersekt.com
e2e-knesp-de8u0u.sandbox.entersekt.com
e2e-knesp-jpbbax.sandbox.entersekt.com
e2e-knesp-ltiiqk.sandbox.entersekt.com
e2e-knesp-b0q2so.sandbox.entersekt.com
e2e-knesp-8obegy.sandbox.entersekt.com
e2e-knesp-yedjfl.sandbox.entersekt.com
exchange.entersekt.com
e2e-knesp-kfp0qk.sandbox.entersekt.com
app.iclapsu.com
black.registry.docker.services.secops.entersekt.com
redirector-private.e2e-knesp-54ecok.sandbox.entersekt.com
e2e-knesp-rf5qxi.sandbox.entersekt.com
exchange.entersekt.com
e2e-knesp-gvndl5.sandbox.entersekt.com
e2e-knesp-dg0rgm.sandbox.entersekt.com
prometheus.e2e-knesp-qj8h8c.sandbox.entersekt.com
www.vincentarisa.com
redirector-private.e2e-knesp-vnjc5l.sandbox.entersekt.com
e2e-knesp-p21mli.sandbox.entersekt.com
info.entersekt.com
e2e-knesp-0775hr.sandbox.entersekt.com
e2e-knesp-4smd6y.sandbox.entersekt.com
www.entersekt.com
e2e-knesp-qhbmn4.sandbox.entersekt.com
e2e-knesp-gnqyut.sandbox.entersekt.com
ca.pt.entersekt.com
*.services.secops.entersekt.com
ew1.vpn.entersekt.com
e2e-knesp-my6a3i.sandbox.entersekt.com
e2e-knesp-dpykpc.sandbox.entersekt.com
www.entersekt.com
redirector-private.e2e-knesp-ix1tks.sandbox.entersekt.com
lync.entersekt.com
e2e-knesp-omwqpf.sandbox.entersekt.com
e2e-knesp-eddnle.sandbox.entersekt.com
prometheus.e2e-knesp-kgai7e.sandbox.entersekt.com
e2e-knesp-87lgun.sandbox.entersekt.com
e2e-knesp-vvlbcd.sandbox.entersekt.com
e2e-knesp-anpqjw.sandbox.entersekt.com
backend.entersekt.com
browser-channel.as1.ehs.entersekt.com
clickatell.emr.entersekt.com
redirector-private.e2e-knesp-bzvh8e.sandbox.entersekt.com
sandboxed.sandbox.entersekt.com
www.cdc-jp.com
backend.entersekt.com
prometheus.esp-nct-test-cluster.sandbox.entersekt.com
e2e-knesp-8osnla.sandbox.entersekt.com
e2e-knesp-wpyeqm.sandbox.entersekt.com
services.entersekt.com
e2e-knesp-ylnnjs.sandbox.entersekt.com
e2e-knesp-a6asfg.sandbox.entersekt.com
e2e-knesp-33nr4q.sandbox.entersekt.com
e2e-knesp-coc7w8.sandbox.entersekt.com
saturn.entersect.co.za
e2e-knesp-fbwl5q.sandbox.entersekt.com
e2e-knesp-0ijhkg.sandbox.entersekt.com
black.registry.docker.services.secops.entersekt.com
ca.pt.entersekt.com
entersekt.com
e2e-knesp-27t6pd.sandbox.entersekt.com
e2e-knesp-ewsyom.sandbox.entersekt.com
e2e-knesp-1akgtn.sandbox.entersekt.com
e2e-knesp-ktoogn.sandbox.entersekt.com
cms.pt.entersekt.com
prometheus.e2e-knesp-cqxnxn.sandbox.entersekt.com
e2e-knesp-7vayxc.sandbox.entersekt.com
e2e-knesp-fux2lz.sandbox.entersekt.com
e2e-knesp-k1hhjk.sandbox.entersekt.com
acs.esp.entersekt.com
prometheus.nomzamo-test2-cluster.sandbox.entersekt.com
sgpi.emr.entersekt.com
black.registry.docker.services.secops.entersekt.com
e2e-knesp-vt1ge7.sandbox.entersekt.com

Certificate

The complete raw certificate details for e2e-knesp-pipjct.sandbox.entersekt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Snlvo6GyfdSxhxfLSF
AEUQYAC6q2+dBhLjo5m4+NnBuC16GhToE/3BbvzDTz4Zmw2rukwTk4RUuyt1ybcR
XwovB/udyH6NMSfgVcvRCqWpQv9MpNQuXt6Hdk8Bg8xhgxdbvyMB3Pq226Q+Bg/7
NMtXdnEIUTgN/jLt8yJ/JeCLWO+8KWIpjCRHK7p+lBLFxYIkFvIA7puAPEQolA2N
cSqMo4jqkkDKoxqW57WfjaBwYghzUWY7UQN8VSryyRjN0ZxbNwHbgVOu9bIzI14W
mdvHEOJl5z/0zkv70BLQC0Yo+773hUtdRf3xAi4CtkEpRGOkbP9Nh7Z5dW6TfVDV
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14709796603458235913089903281059627599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e2e-knesp-pipjct.sandbox.entersekt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27222429800526994695822650557244783605647679849621239076314537968141352820031924587702581097931920516581383685653040559536205774039098290127635638450983556641345952018313221574650380336352320369721102987155553996008332916525975014187839467833491349280557226221522715424658297107041521455691058858689820148202531268987802579731563427970743489371040526064352177241231077279755578788216226703852391838190560740096274044415421507206208378919216121465216404614808894965740020090920204912129239966405959736213623348347160351750069071189491329377450834400617233886577101786010451513068515752451828360624791979559045664134639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9785a5190858ba286c901009ad86bc4e19d47542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2e-knesp-pipjct.sandbox.entersekt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2e-knesp-ktyjfv.sandbox.entersekt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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