maestro.zenreach.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:fd:f0:32:1e:ec:3e:47:4a:3b:f6:4f:9c:25:0b:54 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maestro.zenreach.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:f0:32:1e:ec:3e:47:4a:3b:f6:4f:9c:25:0b:54
Serial Number (int): 6635434837632127885611382332490845012
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:18:dd:7a:94:17:06:a8:76:ab:ca:e1:ae:0f:f4:93:54:26:51:46
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 37:8e:df:69:d3:07:b0:65:ff:3a:b7:8a:f6:c8:d6:c9:e5:9e:bb:f3
Fingerprint (sha256): 7d:43:53:fb:2c:d2:7a:cf:b0:c7:48:12:71:27:81:6a:b8:f4:8e:7f:12:bb:f1:bf:c8:96:02:c4:38:d0:cd:8e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate maestro.zenreach.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maestro.zenreach.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maestro.zenreach.com
maestro.prod.cntr.io
maestro.service.zp.cntr.io
maestro.service.uw2.zp.cntr.io

Other certificates including the domain name zenreach.com

(limited to 100 certificates)
tls.automattic.com
observe.zenreach.com
pos-hookrcvr.uw2.zp.cntr.io
groove.ehlinks.com
groove.simondata.com
support.zenreach.com
groove.robinpowered.com
datadogrelay.zenreach.com
developer-site.uw2.zp.cntr.io
tls.automattic.com
groove.swivl.com
groove.lyric.com
maestro.zenreach.com
portal.zenreach.com
groove.kiva.org
developer-site.uw2.zp.cntr.io
info.zenreach.com
developer-site.uw2.zp.cntr.io
api.zenreach.com
groove.ehlinks.com
groove.jebbit.com
maestro.zenreach.com
hs2portal.zenreach.com
tls.automattic.com
auth.zenreach.com
groove.jebbit.com
sales.zenreach.com
groove.adpearance.com
location.zenreach.com
my.zenreach.com
blog.zenreach.com
groove.cloudleaf.io
my.zenreach.com
tls.automattic.com
zenreach-site.service.uw2.zp.cntr.io
partner.service.zp.cntr.io
partner.service.zp.cntr.io
support.zenreach.com
groove.kiva.org
groove.trustarc.com
tls.automattic.com
branded.grooveapp.com
info.zenreach.com
groove.g2.com
groove.uber.com
support.zenreach.com
tls.automattic.com
tls.automattic.com
api.zenreach.com
zenreach-site.uw2.zp.cntr.io
zenreach.com
www.zenreach.com
zenreach.com
sales.zenreach.com
groove.crossover.com
support.zenreach.com
portal.zenreach.com
tls.automattic.com
my.zenreach.com
groove.trustarc.com
analytics-report.uw2.zp.cntr.io
info.zenreach.com
maestro.zenreach.com
zenreach.com
maestro.zenreach.com
portalcdn.zenreach.com
my.zenreach.com
tls.automattic.com
tls.automattic.com
sales.zenreach.com
groove.g2.com
tls.automattic.com
repmanagement.service.zp.cntr.io
blog.zenreach.com
blog.zenreach.com
www.zenreach.com
maestro.zenreach.com
papi.zenreach.com
groove.robinpowered.com
tls.automattic.com
my.zenreach.com
portal.zenreach.com
sales.zenreach.com
tls.automattic.com
repmanagement.service.zp.cntr.io
my.zenreach.com
auth.zenreach.com
zenreach.com
groove.adpearance.com
repmanagement.service.zp.cntr.io
www.zenreach.com
partner.service.zp.cntr.io
groove.kiva.org
support.zenreach.com
auth.zenreach.com
groove.elastic.co
tls.automattic.com
support.zenreach.com
tls.automattic.com
*.zenreach.com

Certificate

The complete raw certificate details for maestro.zenreach.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIErjCCA5agAwIBAgIQBP3wMh7sPkdKO/ZPnCULVDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNjExMTcwMDAwMDBaFw0xNzEyMTcx
MjAwMDBaMB8xHTAbBgNVBAMTFG1hZXN0cm8uemVucmVhY2guY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jg2KfwnzT9X5nuvsRqyNbtjoExwUB44
ToJO2LBc3qL6yrUzUAAUZkRB8YVXLnHFiQFeGY/n0eWyLfr8liKh1/7h2izxt7q+
DgQZt0RO84UIdxbUh5fSgPWP11YxLdZhrqB4l2cDr3pwu3Rtv76AZe6Ko2tC07Wt
lvKiI9tinJCYuaWuPtL47QbTycZ3p0HmnQb6+LvO+l/zHcEjkQBHfOdMAfBU9g+U
uz+96KnL1SOP39LmwbqIHzTyPH06HGxkPsXMoJw3qkeOJkaXg2JuxoqM277GkfV7
ZEYA8gy6Jrs6etqMjU+0yWcfsWxn81H/jFv0/cSMYnLNt1y+JT/3gwIDAQABo4IB
vTCCAbkwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE
FHIY3XqUFwaodqvK4a4P9JNUJlFGMHEGA1UdEQRqMGiCFG1hZXN0cm8uemVucmVh
Y2guY29tghRtYWVzdHJvLnByb2QuY250ci5pb4IabWFlc3Ryby5zZXJ2aWNlLnpw
LmNudHIuaW+CHm1hZXN0cm8uc2VydmljZS51dzIuenAuY250ci5pbzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF
BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0
MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAHX8Ps2uFyI9LQlHbkN7
UyFkDNqh2L/K58gnf85U6AH1wwpcoA13659HZgW3HlXLrsEFCtF6OB08E4zC9oeY
BFbnJqhfclc3tTd5+XwmqM2TYTqIbzbjTde2p7OQa4plnAgetwcvn5hUxqNDI1VT
oLC6d/gfuHpUZiWnP8p4bkZsVAWeTVTAHj0ErgOs5LklZYT4vQAJRolq8q8jRHff
YfauYGi6hbLxUTtVeb1AgAlBDl3HEIaPIyJ9IxAJunxFsVtJZf8p4CYwgTGEM49c
6p1gvy/vXrtpZff/b5XLvEDJL/6tL9vNdivRs9y17nbAAEiBOTOOZlelJOVKZQW0
1UU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jg2KfwnzT9X5nuvsRqy
NbtjoExwUB44ToJO2LBc3qL6yrUzUAAUZkRB8YVXLnHFiQFeGY/n0eWyLfr8liKh
1/7h2izxt7q+DgQZt0RO84UIdxbUh5fSgPWP11YxLdZhrqB4l2cDr3pwu3Rtv76A
Ze6Ko2tC07WtlvKiI9tinJCYuaWuPtL47QbTycZ3p0HmnQb6+LvO+l/zHcEjkQBH
fOdMAfBU9g+Uuz+96KnL1SOP39LmwbqIHzTyPH06HGxkPsXMoJw3qkeOJkaXg2Ju
xoqM277GkfV7ZEYA8gy6Jrs6etqMjU+0yWcfsWxn81H/jFv0/cSMYnLNt1y+JT/3
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6635434837632127885611382332490845012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maestro.zenreach.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28052622664745714846199286962419558326304651402415693821390018372888538954249493757303715075859816639751466360728670720880100509303692714416166241032191839438370587767536667915322130296640131421663843137036320435172229059890608255309615981788499542231323352359325793584527798180379989065662973539655933880072970818322690498894806576805703980705467083559447844656205899592990825334378117236447888321673910050218479443289935505991816809208702757766156317516343988181742346410705148750253786774159080509783203864820356464672871440046107705284361790876873287388888993553374256794021447195138397214643410042368138770642819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7218dd7a941706a876abcae1ae0ff49354265146
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro.zenreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro.prod.cntr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro.service.zp.cntr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestro.service.uw2.zp.cntr.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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