consul-aws-us-east-a.p81zero.int.corp.safersoftware.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:b1:59:cd:87:96:5d:1c:32:44:d9:38:a7:0c:bc:06 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=consul-aws-us-east-a.p81zero.int.corp.safersoftware.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:b1:59:cd:87:96:5d:1c:32:44:d9:38:a7:0c:bc:06
Serial Number (int): 20859277898924697905701720168931834886
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 01:bc:ea:b4:23:80:66:41:81:60:a4:45:c9:e1:34:66:d3:b1:e6:09
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f8:f0:a1:b9:83:4e:d5:86:0f:e1:96:8c:e5:48:2a:d1:6d:a1:7e:11
Fingerprint (sha256): 3b:7e:27:8f:be:20:a1:b9:4b:9f:79:38:65:ec:6f:df:9d:ab:30:04:fe:09:41:17:e7:6d:f8:48:3b:71:de:7a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate consul-aws-us-east-a.p81zero.int.corp.safersoftware.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for consul-aws-us-east-a.p81zero.int.corp.safersoftware.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

consul-aws-us-east-a.p81zero.int.corp.safersoftware.net

Other certificates including the domain name safersoftware.net

(limited to 100 certificates)
c1loki0-alb.safersoftware.net
consul-aws-us-east-b.p81zero.int.corp.safersoftware.net
bi-ci.safersoftware.net
rp2.safersoftware.net
parse-safervpn.safersoftware.net
hub.safersoftware.net
status.safersoftware.net
hub.safersoftware.net
*.int.safersoftware.net
consul-aws-us-east-a.p81zero.vader.corp.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
parse-safervpn.safersoftware.net
nexus.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
toolbox.safersoftware.net
rp.safersoftware.net
bi-ci.safersoftware.net
lokionprem.safersoftware.net
monitor.loki.safersoftware.net
eu-vpn.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
logs.safersoftware.net
be1.saferx.int.safersoftware.net
consul-aws-us-east-b.p81zero.staging.corp.safersoftware.net
elasticsearch-elasticsearch-prod.safersoftware.net
c1loki0-alb.safersoftware.net
consul-aws-eu-west-a.p81zero.prd.corp.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
status.safersoftware.net
toolbox.safersoftware.net
toolbox.safersoftware.net
vector.safersoftware.net
*.devops.safersoftware.net
c0be1.saferx.safersoftware.net
toolbox.safersoftware.net
monitor.loki.safersoftware.net
be1.saferx.int.safersoftware.net
nomad.p81zero.int.safersoftware.net
consul-aws-us-west-a.p81zero.prd.corp.safersoftware.net
mon.perimeter81.com
hub.safersoftware.net
consul-aws-us-east-a.p81zero.solo.corp.safersoftware.net
*.safersoftware.net
monitor.prometheus.safersoftware.net
toolbox.safersoftware.net
sxbe-redis.saferx.safersoftware.net
staging-gemini.corp.safersoftware.net
*.safersoftware.net
elasticsearch.testing.safersoftware.net
be1.saferx.int.safersoftware.net
*.safersoftware.net
*.safersoftware.net
hub.safersoftware.net
lookinglass.safersoftware.net
ci.safersoftware.net
parse-safervpn.safersoftware.net
tony.safersoftware.net
monitor.loki.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
sxbe-redis.saferx.safersoftware.net
hub.safersoftware.net
meet.safersoftware.net
atlantis.safersoftware.net
c1loki0-alb.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
consul-aws-ap-southeast-a.p81zero.prd.corp.safersoftware.net
vault.saferx.staging-gemini.corp.safersoftware.net
toolbox.safersoftware.net
*.safersoftware.net
hub.safersoftware.net
rp.safersoftware.net
grafana.safersoftware.net
sxbe-redis.saferx.safersoftware.net
c.safersoftware.net
bi-ci.safersoftware.net
vault.saferx.staging-gemini.corp.safersoftware.net
tony.safersoftware.net
consul-aws-us-east-b.p81zero.int.corp.safersoftware.net
toolbox.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
grafanaa-lb-prod-eu.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
grafana.safersoftware.net
sxbe-redis.saferx.safersoftware.net
vault.saferx.int.corp.safersoftware.net
release-app.safersoftware.net
*.safersoftware.net
loki.safersoftware.net
*.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
consul-aws-us-east-a.p81zero.int.corp.safersoftware.net
vault.saferx.staging-gemini.corp.safersoftware.net
bi-ci.safersoftware.net
mimir.safersoftware.net
toolbox.safersoftware.net
lookinglass.safersoftware.net
parse-safervpn.safersoftware.net
status.safersoftware.net
bi-ci.safersoftware.net
*.safersoftware.net

Certificate

The complete raw certificate details for consul-aws-us-east-a.p81zero.int.corp.safersoftware.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Eg/7QC3+N84OviFEkf
VxngwXWDQkA4eDkeHFgyDeFk8nEFSWYEDNf+rm2WfDZX0RZfst1kY4VTrWXO8MJW
Wp/A7ixIaBj7+rBdp4na1/TjotfDivjycHZ/q1KhHIE8t3pwjn8eE1h0XmUj4Nn4
1hxfkMb781DtokGUSHz8LnGqGljmA42QhsKxKtNyotugXdFLvqDuXXvV13nvu8FK
RxRokq/Xov65BAdmywxUCD8s27q2x9DnoId0ZBUohfr6MAmuIAsnXt7aj5gJRUF5
8FwGJGk07bssptq4jzpqM9VWIt/U6VmXBRuPLajN06ogNi0vQQVWMAN4Q3wEMhfM
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20859277898924697905701720168931834886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'consul-aws-us-east-a.p81zero.int.corp.safersoftware.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21666205771986125463155332031909752952004050680465144853681034205896025358629694781576088052521385725827490521577564224688909721109367704840177124784686569425993395728495705845190535880244985073786503680993022250201990815691037635022564663365460602472739988502589003538416846124109936462612500240799224156919594458788755749793218235707118399662527847778477434401638876784428897903690887655798456811076705002909082858517944167909382604827108285835897598169748976511731926109047712247079459647638942781524667112436303088389547234243738649556556584984233411865005981235852955238952826913297067610063457344035418757647527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01bceab4238066418160a445c9e13466d3b1e609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consul-aws-us-east-a.p81zero.int.corp.safersoftware.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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