history-app-k8s.hansen-pi-prod.aws.dishcloud.io

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:23:b7:2a:fb:bc:5a:fe:9c:c2:5c:0d:5e:d8:56:c0 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=history-app-k8s.hansen-pi-prod.aws.dishcloud.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:23:b7:2a:fb:bc:5a:fe:9c:c2:5c:0d:5e:d8:56:c0
Serial Number (int): 13477725434346616779823706803111745216
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:6c:78:ec:32:1b:bf:5e:cd:e6:f6:fa:7b:d5:50:49:2b:13:47:5f
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): f7:53:ad:e8:69:19:d0:06:b7:a9:9c:c3:0b:5a:57:d9:d2:9a:7b:c1
Fingerprint (sha256): 39:7b:cc:30:fb:78:8a:b1:2a:dc:e9:95:fc:42:c0:db:ac:e1:4f:cf:52:a1:ba:a0:80:97:32:81:10:1b:06:07

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate history-app-k8s.hansen-pi-prod.aws.dishcloud.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for history-app-k8s.hansen-pi-prod.aws.dishcloud.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

history-app-k8s.hansen-pi-prod.aws.dishcloud.io

Other certificates including the domain name dishcloud.io

(limited to 100 certificates)
porting-svc-pub.cpni-ss-porting-p.aws.dishcloud.io
acm-poc.hansen-catalog-int.aws.dishcloud.io
api.dishcloud.io
scm-device-api.wl-supplychain-dev.aws.dishcloud.io
cs-data-mgmt-k8s.sling-hansen-b.aws.dishcloud.io
cpqclient.hansen-cpq-int.aws.dishcloud.io
subscriberservice.mno-intg-d.aws.dishcloud.io
lightfeather-service.apiproc-int.aws.dishcloud.io
wireless-analytics-druid-p.awsapps.dishcloud.io
grafana-connect.wl-intg-cpni-prod.aws.dishcloud.io
orcid-portal-snow-apigw.wireless-mno-orcid-t.aws.dishcloud.io
ski-dataload.wl-supplychain-test.aws.dishcloud.io
dsim-vendor-bridge.mno-intg-d.aws.dishcloud.io
bulk-perf-producer.wireless-mno-intg-test.aws.dishcloud.io
dku-api.cpni-dataiku-p.aws.dishcloud.io
elasticsearch.cpni-bssaa-p.aws.dishcloud.io
ski-api-pub.wl-supplychain-prod.aws.dishcloud.io
rw.dish.com
pims-dock-appointment.wl-supplychain-int.aws.dishcloud.io
unlock-device-ui.wireless-mno-intg-test.aws.dishcloud.io
coreapi-wireless-dev.npawsapps.dishcloud.io
rmdomainapi.pub.mno-intg-d.aws.dishcloud.io
wi-adapter-ingram.wl-supplychain-int.aws.dishcloud.io
wholesale-cs-data-mgmt-k8s.hansen-catalog-int.aws.dishcloud.io
rw-qa.dop.dishcloud.io
retail-catalogapi-k8s.retail-catalog-prod.aws.dishcloud.io
coreapi-wireless.awsapps.dishcloud.io
pims-supplier-invoice.wl-supplychain-dev.aws.dishcloud.io
inventorycore-k8s.hansen-pi-dev.aws.dishcloud.io
catalog-ui-k8s.sling-hansen-p.aws.dishcloud.io
ordermanager.blueplanet-som-prod.aws.dishcloud.io
bulk-perf-producer.wireless-mno-intg-prod.aws.dishcloud.io
acm-poc.wireless-mno-intg-i.aws.dishcloud.io
wholesale-cs-datamgt-k8s-in.hansen-catalog-dev.aws.dishcloud.io
swagger.wireless-billing-int.aws.dishcloud.io
workbench-api-k8s.hansen-catalog-prod.aws.dishcloud.io
om-ui-designtime.hansen-com-int.aws.dishcloud.io
billing-account-service.apiproc-test.aws.dishcloud.io
ski-api.wl-supplychain-test.aws.dishcloud.io
samsung-api.wl-supplychain-test.aws.dishcloud.io
pims-d2c-shipment.wl-supplychain-int.aws.dishcloud.io
oss-sat-ui.wl-intg-cpni-prod.aws.dishcloud.io
wi-rma.wl-supplychain-dev.aws.dishcloud.io
dku-govern.cpni-dataiku-p.aws.dishcloud.io
rw.dish.com
sonarqube.pe-automation-np.aws.dishcloud.io
device-tenants.pub.wireless-mno-intg-test.aws.dishcloud.io
sonarqube.nonpci-sonarqube-np.aws.dishcloud.io
warehouse-sales-orders.wl-supplychain-dev.aws.dishcloud.io
dsim-vendor-bridge.wireless-mno-intg-test.aws.dishcloud.io
prometheus-connect.mno-intg-d.aws.dishcloud.io
tcopsmgr01.cpni-wl-dba-np.aws.dishcloud.io
wholesale-cs-builder-k8s.hansen-catalog-test.aws.dishcloud.io
pims-purchase-order-ack.wl-supplychain-dev.aws.dishcloud.io
app.pii-executiveescalations-p.aws.dishcloud.io
flows-wireless-dev.npawsapps.dishcloud.io
user.wl-netcrackertt-p-mi.aws.dishcloud.io
count-tool.nonpci-mediasalestest-t.aws.dishcloud.io
of-atp.wl-supplychain-int.aws.dishcloud.io
ski-api.wl-supplychain-dev.aws.dishcloud.io
argocd-dev.mno-automation-np.aws.dishcloud.io
dev.api.dishcloud.io
apple-gsx-api.wl-supplychain-dev.aws.dishcloud.io
customer-account-service.apiproc-prod.aws.dishcloud.io
bulk-perf-consumer.wireless-mno-intg-test.aws.dishcloud.io
grafana-mirror.mno-automation-np.aws.dishcloud.io
unlock-device-ui.wireless-mno-intg-i.aws.dishcloud.io
basic-consumer.wireless-mno-intg-i.aws.dishcloud.io
rw.dish.com
pims-d2c-shipment.wl-supplychain-test.aws.dishcloud.io
pims-outbound-shipment.wl-supplychain-test.aws.dishcloud.io
pims-ods-api.wl-supplychain-test.aws.dishcloud.io
coreapi-wireless-test.npawsapps.dishcloud.io
acm-poc.wl-supplychain-dev.aws.dishcloud.io
customer-account-service.apiproc-test.aws.dishcloud.io
hansen-app2.hansen-pi-dev.aws.dishcloud.io
scm-device-api-pub.wl-supplychain-dev.aws.dishcloud.io
api-gw-catalogservices-k8s.sling-hansen-q.aws.dishcloud.io
pims-d2c-shipment-receipt.wl-supplychain-test.aws.dishcloud.io
grafana-connect.wireless-mno-intg-i.aws.dishcloud.io
basic-java-client-pro.wireless-mno-intg-prod.aws.dishcloud.io
pims-deactivation.wl-supplychain-dev.aws.dishcloud.io
of-vlm.wl-supplychain-test.aws.dishcloud.io
psms-ui.wireless-mno-intg-test.aws.dishcloud.io
gitlab-datametrics.mno-automation-np.aws.dishcloud.io
*.cpni-plasma-p.aws.dishcloud.io
prometheus-connect.wl-intg-cpni-prod.aws.dishcloud.io
rw.dish.com
device-tenants.pub.mno-intg-d.aws.dishcloud.io
pims-sils-api.wl-supplychain-int.aws.dishcloud.io
catalog-api-k8s.sling-hansen-p.aws.dishcloud.io
of-fs.wl-supplychain-int.aws.dishcloud.io
pims-product-sale.wl-supplychain-int.aws.dishcloud.io
cdis-main-service.apiproc-prod.aws.dishcloud.io
history-app-k8s.hansen-pi-prod.aws.dishcloud.io
pims-d2c-shipment.wl-supplychain-dev.aws.dishcloud.io
ordermanager-k8s.hansen-com-int.aws.dishcloud.io
pims-advance-shipment-notice.wl-supplychain-dev.aws.dishcloud.io
pims-product-registration.wl-supplychain-test.aws.dishcloud.io
ski-api.wl-supplychain-prod.aws.dishcloud.io

Certificate

The complete raw certificate details for history-app-k8s.hansen-pi-prod.aws.dishcloud.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLkk/IH4Q6cy+aAV/OP2
kAdwuz4Csu+YTv77mhAaG7zlDcyUZCLvUzleChBRGoUu83MxC4cK9q8+u7gt6Bx6
NPu50E534Y0wHS5omauVgWi8QokW/6qgXfkASi3jW6KYULx/78Z/wgrLozNlUM/m
uRaauISlsvGn9QYGiuveUrBqYscngckvbQVhm7NfTxjLHOTabCBY1llHF24/VKZl
3hZnWUL7w8syCEzbZpySqy2nDvT8I0wQcfm6oKUS/1OoYz2HRumd16Pv2Bd5Zdlj
m3Pbph6M7XeqJKNKRtMSJdSxaXXscpVIwf2cPvl51IBXDXNj9Vp8W91d3+bp/VPj
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13477725434346616779823706803111745216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'history-app-k8s.hansen-pi-prod.aws.dishcloud.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23824099478430364911966168381828529219384189410577498889456384009827413745926606146695097292922188532402015093441092673102905961474879564946681137132449344609234294908310003780924362891275974969561758721146780197832694456784702300585641270953216269426689385313756492561320119936332581228442304759343501174024522770935474337306315054090483488473176206437616454793966565287468334339907951621247501603999588273858598256561063662849528038788765266933157523144144349738251946639455151539230201346958639029199359707674232673194803015994353930577431350137503923049525392024710258197970729252284857058945366815584343886652387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c96c78ec321bbf5ecde6f6fa7bd550492b13475f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history-app-k8s.hansen-pi-prod.aws.dishcloud.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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