rancher.spectrumflow.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:0a:26:14:a6:a5:6b:d6:9c:98:bc:0f:81:94:fb:4e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rancher.spectrumflow.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:0a:26:14:a6:a5:6b:d6:9c:98:bc:0f:81:94:fb:4e
Serial Number (int): 1381923332072946840632543579183840078
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c1:87:fd:1f:5a:9d:5c:9a:f5:a8:90:d2:ba:30:d9:c6:48:62:83:97
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 49:bf:18:b7:e5:52:08:ed:fc:b0:31:e7:57:4f:51:7d:24:93:0c:05
Fingerprint (sha256): 67:46:46:85:8d:c7:10:69:f2:c8:97:69:4b:0f:af:96:72:a9:8a:c9:84:48:bb:ef:53:4a:72:a7:ca:ab:5b:09

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate rancher.spectrumflow.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rancher.spectrumflow.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rancher.spectrumflow.net

Other certificates including the domain name spectrumflow.net

(limited to 100 certificates)
rancher-waf-test.spectrumflow.net
spectrumflow.net
pagebuilder.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
spice.spectrumflow.net
dynamic-experience-prod-distillery.argo-cd.spectrumflow.net
*.spectrumflow.net
rancher.spectrumflow.net
testrodeo.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
dte-stage.argo-cd.spectrumflow.net
spectrumflow.net
spectrumflow.net
rancher-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
dm-nonprod-eks.argo-cd.spectrumflow.net
backend.testrodeo.spectrumflow.net
*.spectrumflow.net
distillery.spectrumflow.net
uat-business.pci.spectrumflow.net
tdcs-dev.spectrumflow.net
clusters-stable.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvrnew-eks.argo-cd.spectrumflow.net
gitlab.spectrumflow.net
spectrumflow.net
best-slate.spectrumflow.net
rancher.spectrumflow.net
vsi-specflow-entitlements-capiv4.argo-cd.spectrumflow.net
lineups.vsi.spectrumflow.net
fosd.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
ipvs-dev-eks-blue.argo-cd.spectrumflow.net
leo-metadata.argo-cd.spectrumflow.net
epgs-loadtest.argo-cd.spectrumflow.net
slate-tve-engprod.spectrumflow.net
rancher-test-upgrade-argocd.spectrumflow.net
pci.spectrumflow.net
jdtest-cluster-3-capi.spectrumflow.net
rancher.spectrumflow.net
v2.spectrumflow.net
rancher-next-argocd.spectrumflow.net
lantern-dev-capiv5-sf.argo-cd.spectrumflow.net
spectrumreach.ncs.spectrumflow.net
prod.spectrumflow.net
emu.spectrumflow.net
cdvr-mc1.argo-cd.spectrumflow.net
*.qa.mds.spectrumflow.net
rancher-next.spectrumflow.net
transition-meta-toolbox-flow.meta.spectrum.net
rancher-test-upgrade.spectrumflow.net
spectrumflow.net
*.meta.spectrum.net
settings-vhs-capi.spectrumflow.net
nns-search-eks-cluster.argo-cd.spectrumflow.net
vsi-specflow-ipvs-new.argo-cd.spectrumflow.net
ecd2.spectrumflow.net
rancher-argocd.spectrumflow.net
figaro.spectrumflow.net
spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
slate-tve-engprod.argo-cd.spectrumflow.net
ipvs-mc1.argo-cd.spectrumflow.net
focus-stage.argo-cd.spectrumflow.net
dte-stage.spectrumflow.net
pltvspecflow-1-29.argo-cd.spectrumflow.net
testrodeo.spectrumflow.net
neel-test.spectrumflow.net
backend.testrodeo.spectrumflow.net
best-cluster.argo-cd.spectrumflow.net
ipvs-dev-purple.argo-cd.spectrumflow.net
spectrumflow.net
rancher.spectrumflow.net
cewga.spectrumflow.net
cewga.ncs.spectrumflow.net
settings-vhs-poc-capi.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
cewga-ncs-lowers.argo-cd.spectrumflow.net
metadata-epgs.argo-cd.spectrumflow.net
*.tvsdk.spectrumflow.net
rancher-test-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
spectrumflow.net
clusters.spectrumflow.net
*.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
pdetube.spectrumflow.net
cewga.spectrumflow.net
*.pltv.spectrumflow.net
sspp-web-preprod.spectrumflow.net
*.pinxt-sdk-docs.spectrumflow.net
settings-mc1.argo-cd.spectrumflow.net
neel-test.argo-cd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
*.meta.spectrum.net
best-eks-capiv5-sf.argo-cd.spectrumflow.net

Certificate

The complete raw certificate details for rancher.spectrumflow.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdrwCc7hWuoHUcdxKgg2
S40DIAZdL/rBl/g9dCPsYu16pq3wWEZ1mGZv5Pepq82iPzxkyqgVY3uB4CAaXQHb
463wPZCkM+ducDb2qRppyhhBSgRfZE+Wh9FEeCQPcBCN0Fg+hKgAP59sROcEFmwm
lj2M2CsmXkpRIBfNtlr377P99rV/q2lg76A7+fL/LEiM+DQt8HcWEOo03mR4K3BK
EurUf6MJwdixAXPVPsXXEy48BcgA9rFF6pNVW65DE7c0N2Q1szAjzxT9qVPlK8gM
LsCE7uyysOriO7z6p3Y8oCpJvnZk9VQFY3DXglY9uY98abureTx5d6O10atOgk+L
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1381923332072946840632543579183840078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rancher.spectrumflow.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24976908257166467864893685840459942720547830897588929685360773311474546310897726128688833537203925867121316120850569472908922344012409561603067324047601991273090029154766264209880479889421815055539635650313978545341216791520819827516415825073175977031493941841875479480504253737682695201993046197033834364306983739341983143864420492517566344882425768902491548409125293327488940517109170387998811608776221240582151104535627848608249445580660945589798071664532888005274546732852757678298497601926094787953603894989860772912780714113136443483644271705128466296388977322576476200230290508499262620940721858934482892983173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c187fd1f5a9d5c9af5a890d2ba30d9c648628397
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rancher.spectrumflow.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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