*.charter-prod.hosted.cujo.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:c9:d3:3a:7c:58:e6:58:80:dd:1c:d9:f1:db:9a:28 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.charter-prod.hosted.cujo.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:c9:d3:3a:7c:58:e6:58:80:dd:1c:d9:f1:db:9a:28
Serial Number (int): 13010987852773154006122950723452508712
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:06:42:f3:ce:6f:c1:62:25:33:a3:70:13:71:eb:c5:b6:11:3d:a0
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): da:3c:be:c9:62:9c:48:b0:49:8c:28:77:46:57:5a:75:be:20:dd:70
Fingerprint (sha256): 5c:f8:c1:81:da:b1:30:60:ed:f0:60:fd:2c:3a:68:ed:0b:e8:75:74:40:5e:c8:75:22:f6:14:55:13:a8:39:06

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.charter-prod.hosted.cujo.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.charter-prod.hosted.cujo.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.charter-prod.hosted.cujo.io

Other certificates including the domain name cujo.io

(limited to 100 certificates)
*.prd-doh.hosted.cujo.io
device-intel.stg.data-labs.internal.cujo.io
cloud.status.cujo.io
*.cc-stg.internal.cujo.io
cloud.status.cujo.io
*.acc.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo.io
*.cujo-test-v1.hosted.cujo.io
*.cujo.io
cloud.status.cujo.io
*.cujo-gd.hosted.cujo.io
*.cujo.io
cloud.status.cujo.io
*.cujo-perf.hosted.cujo.io
cloud.status.cujo.io
*.cujo.io
*.telus-prod.hosted.cujo.io
*.cujo-cloud-dev.hosted.cujo.io
*.cujo-stage.hosted.cujo.io
cloud.status.cujo.io
*.charter-dev.internal.cujo.io
*.acc.hosted.cujo.io
fingerprint.stage.data-labs.internal.cujo.io
oktest.cujo-dev.hosted.cujo.io
*.cujo-dev.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
tc.labs.cujo.io
*.cujo-test-mg.internal.cujo.io
*.cujo-prod-v1.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo.io
*.acc.internal.cujo.io
cloud.status.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.acc.hosted.cujo.io
*.lens-dev.hosted.cujo.io
*.gda.hosted.cujo.io
*.cujo-stg-v1.internal.cujo.io
*.cujo-test-v1.hosted.cujo.io
*.labs.cujo.io
*.charter-prod.hosted.cujo.io
*.cujo-test-mg.hosted.cujo.io
cloud.status.cujo.io
*.cujo-dev.hosted.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
*.bds-dev.tec.hosted.cujo.io
cloud.status.cujo.io
*.lens-dev.internal.cujo.io
*.webui.lens-dev.hosted.cujo.io
*.acc.hosted.cujo.io
cloud.status.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo-stg-v1.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo-emea.hosted.cujo.io
*.cujo-prod-v1.hosted.cujo.io
*.cujo-prod-v1.internal.cujo.io
*.telus-prod.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
*.labs.cujo.io
*.ew1-cujo-cicd-qa.hosted.cujo.io
*.stage.labs.cujo.io
*.stage.labs.cujo.io
cloud.status.cujo.io
*.cujo-perf.hosted.cujo.io
cloud.status.cujo.io
*.lens-dev.hosted.cujo.io
*.labs.cujo.io
*.charter-prod.hosted.cujo.io
content-control.stg.data-labs.internal.cujo.io
fingerprint.stage.data-labs.internal.cujo.io
*.acc.hosted.cujo.io
*.cujo-stg-v1.hosted.cujo.io
api-router.cujo-dev.hosted.cujo.io
*.labs.cujo.io
tc.labs.cujo.io
*.charter-qa.hosted.cujo.io
*.cujo-test-mg.hosted.cujo.io
*.lens-dev.hosted.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
data-science.stg.data-labs.internal.cujo.io
*.cujo-test-mg.internal.cujo.io
cloud.status.cujo.io

Certificate

The complete raw certificate details for *.charter-prod.hosted.cujo.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSb9D/S+lH0P0Mo4XEAR
WWqaqvGi74zfqNaBrHBGuu8eotfPEXKtH9rV/RwvN25AqRJRyVSbeCxc6nzKukYi
g5RIFH4Ooj3QaE5Bj0wjAm5n3jRuEoouW3X+BjoLRO0KVEz/hs9fnrXjY02ZzRBT
kmDdrylwrrTwZpmaMjPiq4vs31+sSDQzHfMTaq4Rh+4WOHw7hPYqHKFzFlAl5eXw
bw1+G1mlCX/Gh2pWLukuSn3OFs9xCljv+NtaGJYIlqsyNpspPRZxf/2cC/mWQDsg
u0xoWfl4GsoRy+u8LVRsQadrOCGjWuCwRfuidBgWaxa0UPBzNI3zfiVmz8r9m96Z
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13010987852773154006122950723452508712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.charter-prod.hosted.cujo.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17313873738450607511919417382079630487167496363920898554065003827688402771336246663015755030917463965561132268126292013629644193346564464293516685927015023961911769059068370380392913432604638819275215106912698655153587705572072532862429385314952108232935833879590049542541133215577593258163351409846967916264050489597057339241840833877694585254308946921181964734893037572933695150085684446841800831140843038208681554968587248948363239251041358154114669326562079258834061035192101695577371272530343703577404572421571200831150002842235158504102357968030424182659760153805388212564981247852490852806521464238411383478657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d0642f3ce6fc1622533a3701371ebc5b6113da0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charter-prod.hosted.cujo.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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