Certificate for ip-172-31-1-89.us-west-1.compute.internal Issued to SomeOrganization

Certificate has expired

Issued by itself (self-signed)

About the ip-172-31-1-89.us-west-1.compute.internal Certificate

This certificate with serial number 4f:61 for ip-172-31-1-89.us-west-1.compute.internal was issued on by SomeOrganization.

This Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this Certificate review for ip-172-31-1-89.us-west-1.compute.internal provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • Country codes must be comprised of uppercase A-Z letters Alpha-2 country codes shall consist of LATIN CAPITAL LETTER A through LATIN CAPITAL LETTER Z (ISO 3166-2:2020(E) section 5.1)
  • Missing common name, 'ip-172-31-1-89.us-west-1.compute.internal' The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • found only metadata -- in subjectDN attribute 2.5.4.6 Subject name fields must not contain '.','-',' ' or any other indication that the field has been omitted (BRs: 7.1.4.2.2)
  • The country name field MUST contain the two-letter ISO code for the country or XX (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

SomeOrganization

Organization: SomeOrganization
Organizational unit: SomeOrganizationalUnit
State / Province: SomeState
Locality: SomeCity
Country: --

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 4f:61
Serial Number (int): 20321
Serial Number Length: 15 bits, 2 octets

Subject Key Identifier:
Authority Key Identifier:

Fingerprint (SHA-1): b0:a7:f4:bb:ad:3e:22:2c:01:69:79:26:72:be:69:74:75:c8:99:09
Fingerprint (SHA-256): f7:c8:5f:13:04:87:33:62:5c:ad:07:7c:f1:1c:de:0c:ba:ff:3b:0d:55:ed:b4:43:ed:3b:b0:8b:6d:ec:01:84


Revocation Information


Check the revocation status for certificate ip-172-31-1-89.us-west-1.compute.internal
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for ip-172-31-1-89.us-west-1.compute.internal

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Extended Key Usages
None
Extensions
2
CA Certificate
This is not a CA certificate

Subject Alternative Names

This X.509 certificate doesn't contain any subject alternative names.

X.509 Certificate

The complete raw X.509 certificate details for ip-172-31-1-89.us-west-1.compute.internal in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4an3TFsW3xAmFagS7zNB
h9n3EJoTWJvjCAkkvuYLp8kIcV/+Go/1lDgLYcKJ4a0t7o6mYYW1TFPD3nnGFaCZ
BtD8e5tItAfAckrhO+q4xDlD1o2lliJ95vqVXAej446G2mDh42UHjpacpJlk3y2T
7BPpGbVvlYRmXmF/NdoHNTlN46DC+1PV01QNTcTJplLVMmNkukRmEMGzAYmhh23g
RaciUoaghJBfj0x1Y1sIcY8EpD+QmyWN/hwYMKELLUeScykoHtYgFcHlOT74qTSV
OapNCnzd5I4H3asTKnS79WxrRLbQxieDYV+hW7rsvWeHIKylIS3anE07pi5Y15BC
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '--'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeState'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeCity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeOrganization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeOrganizationalUnit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ip-172-31-1-89.us-west-1.compute.internal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 05:36:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 05:36:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '--'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeState'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeCity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeOrganization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SomeOrganizationalUnit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ip-172-31-1-89.us-west-1.compute.internal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28487431980092609414761293684884153850615527273383386143264395264848143870443096122317728907305206295028574385880636828404753592412749327843079196649220345762572993081610314633235979789291094842823344635676822401732259222778691358356452695329678470882184987741196481941103337949234471351565764933883178461095981696611486044625049693516946514463072393195721262098764196472794040591071662883755856744812747934158348350027516742457177528063809860096937063542048936264268600955792465999566204748923741366018706982013709337034873728371814377312386765225508027882911363722694260326962660897875404263127522076102331393393201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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