smartsafe.sandbox.centrio.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:be:f0:04:d1:c9:f1:d6:55:18:83:cf:06:95:64:ed was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smartsafe.sandbox.centrio.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:be:f0:04:d1:c9:f1:d6:55:18:83:cf:06:95:64:ed
Serial Number (int): 8966772537975142131263793382510912749
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 73:09:53:25:48:1a:f5:45:85:de:2f:d8:0c:76:1d:42:e4:e0:14:4f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c7:e6:c9:70:9f:74:79:9b:6f:4a:29:71:a9:41:24:de:01:ca:09:ec
Fingerprint (sha256): 36:fd:cf:5e:4b:b1:ad:58:7f:ba:7c:a1:e6:60:2f:f7:5e:d3:9b:c4:74:79:5d:f2:03:1b:d3:d1:dc:35:93:52

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate smartsafe.sandbox.centrio.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smartsafe.sandbox.centrio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smartsafe.sandbox.centrio.com
smartsafe-api.sandbox.centrio.com
smartsafe-sr.sandbox.centrio.com

Other certificates including the domain name centrio.com

(limited to 100 certificates)
paultest.sandbox.centrio.com
*.sandbox.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.istio.test.k8s.centrio.com
vpn2.centrio.com
*.sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
prometheus.test.k8s.centrio.com
radius.sandbox.centrio.com
proxy.sandbox.centrio.com
www.centrio.com
*.istio.sandbox.k8s.centrio.com
pong.centrio.com
prometheus.test.k8s.centrio.com
certmanager.sandbox.centrio.com
cert-test.sandbox.centrio.com
*.sandbox.k8s.centrio.com
*.sandbox.k8s.centrio.com
centrio.com
*.top.k8s.centrio.com
*.sandbox.centrio.com
*.sandbox.centrio.com
cartography.sandbox.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
*.k8s.sandbox.us-east-1.centrio.com
*.test.k8s.centrio.com
*.sandbox.k8s.centrio.com
www.centrio.com
*.sandbox.centrio.com
*.chinmaya.k8s.centrio.com
*.test.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
certmanager.sandbox.centrio.com
paultest.sandbox.centrio.com
www.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
prometheus.chinmaya.k8s.centrio.com
*.k8s.sandbox.centrio.com
proxy.sandbox.centrio.com
*.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
certmanager.sandbox.centrio.com
*.test-us-west-2.k8s.us-west-2.centrio.com
www.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
*.sandbox.centrio.com
culture-board.app-container.vpn.centrio.com
*.sandbox.k8s.centrio.com
vault-infrastructure.test.us-west-2.centrio.com
*.sandbox.k8s.centrio.com
*.top.k8s.centrio.com
*.test.k8s.centrio.com
vision.sandbox.centrio.com
*.mt.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
grafana.sandbox.k8s.centrio.com
*.test.k8s.centrio.com
centrio.com
www.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.sandbox.k8s.centrio.com
test.chan.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
prometheus.sandbox.k8s.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
www.centrio.com
proxy.sandbox.centrio.com
pdfkit.sandbox.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
tinode.co
prometheus.chinmaya.k8s.centrio.com
grafana.top.k8s.centrio.com
prometheus.test.k8s.centrio.com
prometheus.top.k8s.centrio.com
*.test.k8s.centrio.com
proxy.sandbox.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
pong.centrio.com
paultest1.sandbox.centrio.com
*.istio.test.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.sandbox.k8s.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
paultest.sandbox.centrio.com
gse-api.sandbox.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
blahblahblah.sandbox.centrio.com
sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com

Certificate

The complete raw certificate details for smartsafe.sandbox.centrio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mi0WbD7P9k4AW9gOYtP
IMSldGluGDEzsY6QVmfgG5SeFnhSWEfGdb0+KY2u78QXsAn8KkpKtHRLO+B6K+LJ
8tSruwiMw3uDIGWQgknatEyUYKuiaZOjWvrY/Quastp3jA0Q5Fk+6CatshSAdHBp
ESawsB9YZxDF92NPCQ+PoNnhQOvD2lzY6SqEctQdRLURNNjFMiY24yQ3Hn/+yWyi
NgXb9B1Yi9/2Gn373760hWQUSowB2l3MyT8Dd72q9AfPn2qTZtTycdwj5QAKhJgR
pnDRluUGAYhAdSe80GJQ1m0GjLiZFrLE/gYQo2s/0QpKR1TmOeE1bqYTjYD8PHcG
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8966772537975142131263793382510912749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smartsafe.sandbox.centrio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28581488632454299443509786482537503362571372199697949825318685117635440612627124684127202083660854493766745969341359433392552294266027618109397878920667908078933189783833585793557851996439855343405212465085857875750535733357845837002341235539227725867500612054197775394544656984719501547293604184747564411886349548422157136762464332506766900550172131229369907857124037897223853087950127302370383764903630263729645310033692734471430495468652921955041570184258543634713204192348117333655738334260970374441364873074887516014586010522039502708615495136077371343712310445034708739370189972136064866859862991284284295677677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73095325481af54585de2fd80c761d42e4e0144f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsafe.sandbox.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsafe-api.sandbox.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsafe-sr.sandbox.centrio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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