*.eightfold.ai

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:6f:69:28:d4:d6:0c:97:b5:d3:98:f0:ee:35:b0:99 was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.eightfold.ai

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:6f:69:28:d4:d6:0c:97:b5:d3:98:f0:ee:35:b0:99
Serial Number (int): 19187669780290663757869020820043837593
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:8d:15:aa:2f:50:c8:ab:d1:ed:00:ac:c0:4f:c1:a4:5a:a8:c1:05
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 58:bd:2b:11:6c:09:c5:8e:9f:61:95:a4:d5:dd:3e:02:86:22:5d:eb
Fingerprint (sha256): 41:00:b1:4e:f2:2c:ad:f1:8c:e8:8e:c0:09:57:0f:42:13:dc:34:21:c3:c1:13:02:59:75:fc:5a:4a:dd:3a:38

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.eightfold.ai

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eightfold.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eightfold.ai
jobs.conagra.com
vchopra.eightfolddemo.com
directsourcepro-crg.prounlimited.com
careers.dexcom.com
elevate-stage.dcsg.com
*.talentexchange.ai
elevate.dcsg.com
directsourcepro-bvt.prounlimited.com
join.matchgroupcareers.com
join.postmates.com
jobs.cerner.com
directsourcepro-rch.prounlimited.com
directsourcepro-wky.prounlimited.com
talentexchange.ai
odgers.obusdynamics.com
directsourcepro-umg.prounlimited.com
careers.micron.com
directsourcepro-inv.prounlimited.com
career.zillowgroup.com
jobs.dolby.com
directsourcepro-spk.prounlimited.com
directsourcepro-cgn.prounlimited.com

Other certificates including the domain name eightfold.ai

(limited to 100 certificates)
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
pages.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
*.eightfold.ai
www.eightfold.ai
community.eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
pages.eightfold.ai
community.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
www.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
aijobcms.eightfold.ai
www.eightfold.ai
*.eightfold.ai
eightfold.ai
pages.eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
*.eightfold.ai
t.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai

Certificate

The complete raw certificate details for *.eightfold.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCdjuZaj6roPYE+fKAg7
ShZA+4eEcGKjESp2WhM+keFfwtzYWA4eQZ7p0jfpM8xL++bxb+EpfMGNo2tyKav8
BnVzp/tmRzl/WJSqWxMOwibllZgC3ycC/4HE/Tt/Ay5kXXitCHcvTnkn01pfXoXo
l7BI+1AKAcwvZnfojFkoBCywY1YBkaHbvAHEfkTuwJ+JdaaNyHwoZlV+MZg8/7uY
GKqY8NRtR6yAJVHPtXHyGvEA9xIWTm8BMej3z3J9UbT/ARTMkJiVfn9LxxdHvSGP
hQvc7sdaLOxXKMu8FZ+DnVc/GvN22EkBahHA79dMHl1rLuXS81UMzip1oMa0gTeE
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19187669780290663757869020820043837593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eightfold.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23247271825089667583562438488159396047646312496481108791784286194312815987110669598211409010247000800472897771344844095463651847966698296446313313315944592069063443726589306586778377370788462935285614049335689896650118942005187261429461117346105518284613572744866677663141422301394534061665755525017260076056382428463011144961948000076238238261317385205420581311928007718487804567616161827231603477794227637935984023994371154194815729146914153145555563969537837184406631825632789883124613567941249987432144940042012431262988855650448190360557353765548435445192657013152516009391495041074498274349085092849063822853173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c8d15aa2f50c8abd1ed00acc04fc1a45aa8c105
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (621 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eightfold.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.conagra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vchopra.eightfolddemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-crg.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevate-stage.dcsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talentexchange.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevate.dcsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-bvt.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.matchgroupcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.postmates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.cerner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-rch.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-wky.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentexchange.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odgers.obusdynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-umg.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.micron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-inv.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.zillowgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.dolby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-spk.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-cgn.prounlimited.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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