*.tenant1.uch-sandbox.karanashi.io

Issued by Amazon

About this certificate

This digital certificate with serial number 01:f5:68:00:02:0c:ea:df:8e:74:90:5b:6d:5a:b0:2d was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.tenant1.uch-sandbox.karanashi.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f5:68:00:02:0c:ea:df:8e:74:90:5b:6d:5a:b0:2d
Serial Number (int): 2603450097359314702741842969864351789
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 3e:1b:13:81:7a:ea:24:19:5a:5a:54:e0:c0:a8:8b:a5:f2:02:1a:51
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 67:3a:77:38:06:00:24:ee:81:41:b6:1d:e1:70:e3:2d:0b:9e:28:ad
Fingerprint (sha256): 66:fc:a7:f5:f9:79:c4:45:fb:4d:23:3d:d9:b2:40:02:97:7d:9e:ac:18:71:0c:76:de:48:cb:55:0f:c3:f6:4e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.tenant1.uch-sandbox.karanashi.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tenant1.uch-sandbox.karanashi.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tenant1.uch-sandbox.karanashi.io

Other certificates including the domain name karanashi.io

(limited to 100 certificates)
*.tenant2.uch-sandbox.karanashi.io
*.21.habanero-stage5.karanashi.io
stage.karanashi.io
*.tenant-a.habanero-uch-sandbox.karanashi.io
uch-sandbox.karanashi.io
*.tenant-a.habanero-uch-sandbox.karanashi.io
*.tenant15.habanero-stage5.karanashi.io
*.tenant1.habanero-stage1.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
*.dokuji-uch-sandbox.karanashi.io
uch-sandbox.karanashi.io
*.uch-dokuji.karanashi.io
*.msc-tenant3.msc.karanashi.io
*.dokuji-uch-sandbox.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
uch-sandbox.karanashi.io
v260test2.karanashi.io
habanero-stage1.karanashi.io
habanero-development.karanashi.io
broker02.karanashi.io
*.habanero-tenant1.karanashi.io
habanero-stage6.karanashi.io
msc-development.karanashi.io
habanero-development.karanashi.io
*.tenant2.habanero-stage5.karanashi.io
habanero-uch-sandbox.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
*.uch-dokuji.karanashi.io
ess-skeleton.stage.karanashi.io
msc-development.karanashi.io
*.dokuji-uch-sandbox.karanashi.io
*.tenant3.habanero-stage4.karanashi.io
karanashi.io
*.tenant1.uch-sandbox.karanashi.io
stage.karanashi.io
*.tenant1.msc-staging.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
*.msc-tenant4.msc.karanashi.io
*.uch-dokuji.karanashi.io
broker01.karanashi.io
*.tenant5.habanero-development.karanashi.io
uch-sandbox.karanashi.io
habanero-stage3.karanashi.io
*.tenant1.habanero-stage6.karanashi.io
*.uch-dokuji.karanashi.io
flashair.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
karanashi.io
feature-version.karanashi.io
stage.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
*.msc-tenant1.msc.karanashi.io
stage.karanashi.io
*.msc-tenant2.msc.karanashi.io
habanero-development.karanashi.io
*.uch-dokuji.karanashi.io
uch-sandbox.karanashi.io
msc-development.karanashi.io
uch-sandbox.karanashi.io
habanero-stage1.karanashi.io
stage.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
letsencryptforlocal.karanashi.io
habanero-stage3.karanashi.io
*.tenant1.feature-version.karanashi.io
*.tenant1.habanero-development.karanashi.io
broker03.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
uch-sandbox.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
habanero-stage1.karanashi.io
*.uch-dokuji.karanashi.io
msc-staging.karanashi.io
habanero-stage2.karanashi.io
feature-version.karanashi.io
stage.karanashi.io
*.tenant1.habanero-stage2.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
msc-development.karanashi.io
uch-sandbox.karanashi.io
*.tenant1.habanero-stage2.karanashi.io
*.uch-dokuji.karanashi.io
*.dokuji-uch-sandbox.karanashi.io
wso2.karanashi.io
*.tenant2.habanero-stage1.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
uch-sandbox.karanashi.io
*.tenant1.habanero-stage1.karanashi.io
msc-development.karanashi.io
habanero-stage5.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
habanero-stage2.karanashi.io
stage.karanashi.io
msc.karanashi.io
*.tenant1.habanero-ci.karanashi.io
*.tenant1.uch-sandbox.karanashi.io
uch-sandbox.karanashi.io

Certificate

The complete raw certificate details for *.tenant1.uch-sandbox.karanashi.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXHvMz1sTzrkh4YKRjyP
qmPU7tuXMx0NsaJ87nrb1btJzmafFxldldRwty82NpXfmjArmGoX9NRkkkZBtfWy
V7Rzg/BBZ9rHY0QSe7477mGOm6nuErvEdgyguRFIrFxI/Q4ddZ4ejy58OaV2pNhS
5GT8PWKnOsXw+5CEbPg61I7vnBgF5VKJ2/pTohAnX30j+ANfOjRqQf8xDvueTNN+
H/euF4P72W1LMbKo+cZBnek4D9G5CIxUo+ZnLlwd8Eu5CAbMSWhOLsQtO6kcJhLU
3uIDntPLdGakX90ZJyafYNWg/4efoIZQMZBHHz6juG+sM756X8fmkWUXfqh5hBy/
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2603450097359314702741842969864351789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tenant1.uch-sandbox.karanashi.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23410269553307914452132166556462341250766117935178506547531471252101847425779304992967622146625185816402466142929047755192135944695265547208568019268413559895038056109074124994302128901737347282775788992365781065612459698124363314242948650880331895311701327736597752280062114574567931760886659941685373243264300708434148947175567599317305876583136392120705967301646016620465821082934535300123053321119193729781237642173996486698946882687210149896613781174264748360935982688682434863163902952275360697560629125019600487924534084608061386642296330396851779824132742919633829209022360360502910978767094663508472788467647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e1b13817aea24195a5a54e0c0a88ba5f2021a51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenant1.uch-sandbox.karanashi.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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