us-120722.logs.devatron.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:6a:f8:b7:53:ea:11:26:21:fe:7f:0b:39:96:a0:a7 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us-120722.logs.devatron.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:6a:f8:b7:53:ea:11:26:21:fe:7f:0b:39:96:a0:a7
Serial Number (int): 17835391974514269241630125380896989351
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:fe:52:27:f1:11:23:1e:2a:b6:a6:4e:f8:5e:40:78:ac:ab:e1:b2
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): d6:b2:af:7a:54:f0:a7:ce:eb:47:6b:57:fb:f4:ca:20:21:ee:77:c2
Fingerprint (sha256): 3b:6b:65:f5:97:d6:c5:db:07:1f:35:7c:74:8c:e6:ca:c5:1b:d8:25:b5:db:f7:c9:57:bd:ff:42:8d:56:1a:27

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate us-120722.logs.devatron.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us-120722.logs.devatron.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

us-120722.logs.devatron.net
us-backup-120722.logs.devatron.net
druid.us-west-2-120722.15drd120722.logs.devatron.net
druid.us-west-2-120722.15d.logs.devatron.net
us-120722.15d.logs.devatron.net

Other certificates including the domain name devatron.net

(limited to 100 certificates)
grafana.devatron.net
*.k8s-dev-1.us-west-2.devatron.net
us-151430.logs.devatron.net
ingest.devatron.net
us-1612.logs.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.devatron.net
us-150891.logs.devatron.net
us-120775.logs.devatron.net
*.jenkins.k8s-dev-1-1.us-west-2.devatron.net
druid.us-east-1.003a.logs.devatron.net
*.devatron.net
*.moshelitvin.k8s-dev-1-moshe.us-west-2.devatron.net
metrics.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
ingest.devatron.net
ingest.1.devatron.net
us-120722.logs.devatron.net
metrics.devatron.net
ingest.devatron.net
us-150906.logs.devatron.net
us-1234.logs.devatron.net
us-120740.logs.devatron.net
grafana.1.metrics-dev-aaron.devatron.net
us-1234.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
us-150846.logs.devatron.net
druid.us-east-1.003a.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.jenkins.k8s-dev-1.us-west-2.devatron.net
ingest.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.devatron.net
*.jenkins.k8s-dev-1-1.us-west-2.devatron.net
*.devatron.net
grafana.1.devatron.net
*.moshelitvin.k8s-dev-1-1.us-west-2.devatron.net
druid.us-west-2.003a.logs.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.devatron.net
grafana.devatron.net
metrics.devatron.net
status.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.devatron.net
*.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.1.devatron.net
ingest.devatron.net
metrics.devatron.net
grafana.devatron.net
us-120738.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.jenkins.k8s-dev-1-1.us-west-2.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.metrics-dev-aaron.eu-west-1.devatron.net
ingest.metrics-dev-aaron.eu-west-1.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
metrics.devatron.net
us-3008.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
us-151208.logs.devatron.net
us-1234.logs.devatron.net
ingest.1.devatron.net
us-151319.logs.devatron.net
grafana.devatron.net
druid.us-east-1.003a.logs.devatron.net
metrics.eu-west-1.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.jenkins.k8s-dev-1.us-west-2.devatron.net
grafana.devatron.net
*.jenkins.k8s-dev-1.us-west-2.devatron.net
druid.us-east-1.003a.logs.devatron.net
metrics.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.devatron.net
us-4321.logs.devatron.net
us-120704.logs.devatron.net
ingest.devatron.net
druid.us-east-1.003a.logs.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.devatron.net
us-150854.logs.devatron.net
druid.us-east-1.003b.logs.devatron.net
*.devatron.net

Certificate

The complete raw certificate details for us-120722.logs.devatron.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHTEp2kj+FjboitQX3LC
DQ+PbmOwrWCAi9R7BOxZZGRYMfBzeGMAzCYvlM4TD8euR5eSBnvE1a2FptLEHxEZ
/UbDyh0jT8ldfpgXXwENquM5OexM7jH+S6HpjGAwpAAi+V+X8tMIvQ86OqwvmOLz
lBtAZRMSKUIDYgdK9P8w7tPybD+FeQY3TM1PLnyrVVXTiPDFiBJWABBcsk2M7R7D
VmNdOV8QhBC3GKy8ZvDyBi9O+ydWK5Sz5MPNbk+ppvChIYmkw5jsruGl0KwkcGbj
S2VD60TO4xReL1q8lOE+ZvZzgvafBBHQM1xh1Taz5QPikDrly24Z3sHMiJSIFXLI
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17835391974514269241630125380896989351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us-120722.logs.devatron.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22780475429250368256844340103483635290118701596681882186917886983313753490086505825226236986730563313778829309732277395654219487513796495852737661968982122434211089035199381671943660801814203616307401492351493792831830455677078007592413647208522888375527013226959516916843606862405680414702557481662445828439418315756728386037478391989955008966146137677906096474567118731814121973210638262536706749052418332397036969625562212702748327715344888584567898243009536821978799047749415279058560359281878611944237121189436050240987930089458402919834813448996250591598927257010937810162374683838272266876851246736738150959339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49fe5227f111231e2ab6a64ef85e4078acabe1b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-120722.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-backup-120722.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druid.us-west-2-120722.15drd120722.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druid.us-west-2-120722.15d.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-120722.15d.logs.devatron.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00e47be16e2592d983c988431cbf6cb8e03b8e056098bba0d1bcb60b16b0a43bb8815d3ca80f2f2348490dd92b09cd0b7ca5484168bffd647e4d03d52e1fd2af716ca74788c0107b6facbf29bccb47858da011841556600455ec15a3df949f77abd8ec46a2b4e6095f70c886f684607ace85ff91d898b6f96c4909fc07840b71eb6aabfc46c95929a45ba3364c878b46ef7e7675fb826d6795455ffe9bdb02dc68eb7b43faa628336a5651d0831c6ce18721d61aa73582ffd079702390f2cb5fa0a693318f7a8f475be6f751cac75c01205acb7536569f635d400523d3810344fec3a43254eb42df73a02bf896b41ca886a1c39b7f598127cc89866ea42dc1c6fb