zenreach-site.service.uw2.zp.cntr.io

Issued by Amazon

About this certificate

This digital certificate with serial number 03:20:aa:1e:20:25:c1:66:ce:ae:ce:51:18:e0:4b:0f was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zenreach-site.service.uw2.zp.cntr.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:aa:1e:20:25:c1:66:ce:ae:ce:51:18:e0:4b:0f
Serial Number (int): 4157287883254522197527536606436674319
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d3:6a:67:de:e9:63:88:73:42:6b:bf:bb:bb:cf:85:22:e8:bc:28:5c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fd:c0:0d:65:24:24:8e:4b:91:a2:e9:e6:f8:5f:41:5c:9b:84:20:ec
Fingerprint (sha256): 39:75:9d:95:55:66:69:6b:0b:17:64:16:ec:f3:23:5b:0d:11:f6:9e:68:c0:ba:28:93:73:95:23:a1:b9:53:c5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate zenreach-site.service.uw2.zp.cntr.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zenreach-site.service.uw2.zp.cntr.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zenreach-site.service.uw2.zp.cntr.io
zenreach-site.service.zp.cntr.io
www.zenreach.com
zenreach.com

Other certificates including the domain name cntr.io

(limited to 100 certificates)
wifast-portal.service.zs.cntr.io
maestro.zenreach-staging.com
nexus.uw2.zh.cntr.io
my.zenreach-demo.com
lightningportal.uw2.zd.cntr.io
location.service.uw2.zp.cntr.io
authv1-public.uw2.zp.cntr.io
observe.zenreach.com
mail-hookrcvr.uw2.zs.cntr.io
pos-hookrcvr.uw2.zp.cntr.io
*.service.zd.cntr.io
network-campaigns.uw2.zs.cntr.io
developer-site.uw2.zs.cntr.io
repmanagement.service.zo.cntr.io
demographics.uw2.zd.cntr.io
vendasta.service.zd.cntr.io
*.foundation.uw2.zp.cntr.io
wifast-feedback.service.zs.cntr.io
auth.zenreach-staging.com
api.zenreach-staging.com
pingdom-relay.uw2.zp.cntr.io
ams.service.zd.cntr.io
my.zenreach-demo.com
network-campaigns.uw2.zs.cntr.io
usercontrol-shim.uw2.zp.cntr.io
observe.zenreach-develop.com
pos-hookrcvr.uw2.zd.cntr.io
wifast-portal.service.zp.cntr.io
apinstall-shipmonkeater.uw2.zd.cntr.io
developer-site.uw2.zd.cntr.io
auth.zenreach-develop.com
router-update.service.zd.cntr.io
location.service.zd.cntr.io
location.service.zd.cntr.io
split-receiver.uw2.zd.cntr.io
developer-site.uw2.zp.cntr.io
wifast-links.service.zs.cntr.io
wifast-portal.service.zp.cntr.io
pingdom-relay.uw2.zs.cntr.io
maestro.zenreach-staging.com
maestro.zenreach.com
portal.zenreach.com
lightningportal.uw2.zd.cntr.io
developer-site.uw2.zp.cntr.io
my.zenreach-staging.com
router-update.service.zp.cntr.io
developer-site.uw2.zp.cntr.io
router-api.service.zs.cntr.io
auth.zenreach-develop.com
router-api.service.zd.cntr.io
location.service.uw2.zp.cntr.io
api.zenreach.com
split-receiver.uw2.zs.cntr.io
api.zenreach-staging.com
myservice.uw2.zd.cntr.io
wifast-portal.service.zo.cntr.io
portal.zenreach-staging.com
usercontrol-shim.uw2.zd.cntr.io
maestro.zenreach.com
lightningportal.uw2.zd.cntr.io
myservice.uw2.zd.cntr.io
auth.zenreach.com
apinstalltracker.uw2.zd.cntr.io
*.stag.cntr.io
authv1-public.uw2.zd.cntr.io
cryptoenclave.service.zd.cntr.io
*.uw2.zp.cntr.io
wifast-portal.service.zs.cntr.io
wifast-demo.service.zd.cntr.io
zenreach-site.service.uw2.zs.cntr.io
tablepay.uw2.zd.cntr.io
portal.stag.cntr.io
location.zenreach.com
mail-hookrcvr.uw2.zd.cntr.io
wifast-demo.service.zp.cntr.io
mail-hookrcvr.uw2.zp.cntr.io
my.zenreach.com
split-receiver.uw2.zp.cntr.io
ams.prod.cntr.io
wifast-feedback.service.zp.cntr.io
network-campaigns.uw2.zd.cntr.io
my.zenreach.com
maestro.zenreach-staging.com
developer-site.uw2.zs.cntr.io
idr-retriever.service.zs.cntr.io
authv1-public.uw2.zd.cntr.io
idr-api.service.zp.cntr.io
reviewbot.service.zd.cntr.io
ams.service.zs.cntr.io
usercontrol-shim.uw2.zs.cntr.io
ams.service.zd.cntr.io
zenreach-site.service.uw2.zp.cntr.io
repmanagement.service.zd.cntr.io
pingdom-relay.uw2.zd.cntr.io
repmanagement.service.zo.cntr.io
split-receiver.uw2.zd.cntr.io
nexus.uw2.zh.cntr.io
wifast-mailgun.service.zs.cntr.io
usercontrol-shim.uw2.zd.cntr.io
partner.service.zp.cntr.io

Certificate

The complete raw certificate details for zenreach-site.service.uw2.zp.cntr.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS/4WNqfjt6eIrEIQ34c
cHmiXs7YCwPV3xBJWuihFZbGNFQbkGEqdG8h005ei5MuTDrDJvrOZWTRFikPZ7yR
hKClbLr/xiPA1Pio7FIr/DpVqsDccQhfcusMU40Qxpg6lNz4D5rPUiHGnM8pSnVU
xJuEY3KLVeYXyDWd4X+5mCtXTRGVUfxfpwMltU52oBaoRGocIxjLvR6t70ucecnG
MKa2bmXI1qsBM+c7R5PGrqubUGasObETGfbBZ929NNwg+ETSjRtfebnP3HXjV+JU
cfT4tmaOjK1xtdwYYOV7uRSoymcEUl1PKxbTB5o7/YBIB00B+dhXk3hfUp6AXKEg
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4157287883254522197527536606436674319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zenreach-site.service.uw2.zp.cntr.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19843068820475070708703925776355564256536010355291555518952430689003977758808748573678475446046155534849895686540852483715371866539318393944798838690204905972326751955969041598370778007975493279414667495359449044428625506730251415657376125731138355159662894755859165075196287128268150981611286400583233262666501557050039213088777554737710146577053971309531767042357542622238603833489567505011140758911391642940296038138990975386843468211589054091329233357257572787368897654149137282290700713380776796041300810092306560602026960290707673569542281336053451823280962886128508852582852500406576963729950367011630206754837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d36a67dee9638873426bbfbbbbcf8522e8bc285c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenreach-site.service.uw2.zp.cntr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenreach-site.service.zp.cntr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenreach.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165c37c6b68000004030046304402200228b31d4b30ff2689a131711203c6fff3f6882fc64a8000af64dcd4d4934f2902202a3afc81e5c19c1f9a9ecc97deb7f12b216bf831fd85ada2758c36d2a3ac2d660076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165c37c6c33000004030047304502201556e3b28a4d65eeb49f895d7956b62dc05620d67cf3257f8212b1557c06e9cc022100c74a4e26a1a24d326eeab27522aae32b987b1b555f67a6febdae03275d948287
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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