*.linximpulse.net

Issued by Amazon

About this certificate

This digital certificate with serial number 07:f6:6d:5f:a8:f2:e5:8c:b4:88:ea:83:2b:8e:0b:06 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.linximpulse.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f6:6d:5f:a8:f2:e5:8c:b4:88:ea:83:2b:8e:0b:06
Serial Number (int): 10584119359303341309943797802901310214
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c0:36:61:fc:c5:4e:bb:9b:e0:16:03:30:b1:b1:8e:d9:45:e1:19:a0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 63:a0:e5:71:d3:67:1a:49:1d:8d:e5:ae:a2:66:24:33:31:8c:f0:cc
Fingerprint (sha256): 82:7e:90:67:9c:50:90:dd:d0:10:79:84:a4:a1:97:31:ee:e2:b5:c0:a3:db:ab:c5:09:4d:8e:ec:15:c0:16:d2

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.linximpulse.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.linximpulse.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.linximpulse.net
*.core.linximpulse.net
*.linximpulse.com
*.linximpulse.com.br
*.chaordicsystems.com
*.neemu.com
*.datalake.chaordicsystems.com
*.staging.linximpulse.net
*.homolog.linximpulse.net
*.preprod.linximpulse.net

Other certificates including the domain name linximpulse.net

(limited to 100 certificates)
*.event.linximpulse.net
*.stg.engine.linximpulse.net
*.neemu.com
*.common.linximpulse.net
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.neemu.com
*.common.linximpulse.net
*.catalog.linximpulse.net
*.catalog.linximpulse.net
*.neemu.com
*.ai.prod.catalog.linximpulse.net
*.neemu.com
*.neemu.com
dev.notifications.linximpulse.net
*.shopback.net
*.shopback.net
*.neemu.com
*.neemu.com
*.stg.notifications.linximpulse.net
*.chaordicsystems.com
*.neemu.com
*.platform.linximpulse.net
*.catalog.linximpulse.net
*.stg.search.linximpulse.net
*.linximpulse.net
*.neemu.com
*.platform.linximpulse.net
*.platform.linximpulse.net
*.linximpulse.net
*.neemu.com
*.platform.linximpulse.net
*.internal.catalog.linximpulse.net
certificado.oms.linximpulse.net
*.dev.notifications.linximpulse.net
*.neemu.com
*.shopback.net
*.shopback.net
*.shopback.net
*.linximpulse.net
*.dc.linximpulse.net
*.chaordicsystems.com
*.shopback.net
*.event.linximpulse.net
*.dc.linximpulse.net
*.neemu.com
*.dc.linximpulse.net
*.dev.search.linximpulse.net
*.stg.onsite.linximpulse.net
*.neemu.com
*.linximpulse.net
*.linximpulse.com
*.neemu.com
*.neemu.com
*.neemu.com
dev.notifications.linximpulse.net
*.neemu.com
*.chaordicsystems.com
*.apps.linximpulse.net
*.chaordicsystems.com
*.apps.linximpulse.net
*.common.linximpulse.net
*.neemu.com
*.neemu.com
*.linximpulse.net
*.common.linximpulse.net
*.dev.search.linximpulse.net
*.neemu.com
*.neemu.com
*.neemu.com
*.chaordicsystems.com
*.common.linximpulse.net
*.neemu.com
sso.linximpulse.net
*.neemu.com
*.stg.search.linximpulse.net
platform.linximpulse.net
*.neemu.com
*.neemu.com
legacy.datalake.linximpulse.net
*.neemu.com
*.dc.linximpulse.net
*.neemu.com
*.ads.linximpulse.net
*.neemu.com
*.prod.catalog.linximpulse.net
*.core.linximpulse.net
*.common.linximpulse.net
*.ads.linximpulse.net
*.chaordicsystems.com
*.catalog.linximpulse.net
*.shopback.net
*.platform.linximpulse.net
*.neemu.com
*.neemu.com
metrics.reengage.linximpulse.net
*.core.linximpulse.net
*.apps.linximpulse.net

Certificate

The complete raw certificate details for *.linximpulse.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvq9jy502Kin4emWpDma
vkjIqoxxxStdVlfLVIw66g7Xp2lGQsdiEEj/cN/ZZ6KidEruCBmUfjqo0Wr8dqgB
1/csJkgvQFuSTzjVKAhZcjRuD0aWcQdjxdJLeizhJfacCZjteT/WTthp8eY1PaY+
bpXr+QTLWnoh0rATX7RfpWzwdsabTsQP4iUr6bSmr0XkskRdV/7f0+ybzgQN5LGb
oSlow/rWu1tdvn7bz0jp2AXko5vxrqMaYuPSE8zX7ed7mWW5r+PRshQDhNCWFjb5
c0qRML8cZ4Z8h8wzgMW28EdWnhlxV5/ohapOAlQWgXPDpjiK/oCiOgpaWY4HcLkW
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10584119359303341309943797802901310214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.linximpulse.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26128735555107699408943455175454802831785960326680218304190903391745954968626847194017067188777185273789662696053864297021821823562613643637413202177371213655903021614653185388389374829069056429306898232367069927396411703049883266862914070656971234660765958514780284195496490741857748230911491540639379857041902939919639519936883106606169011007773769601805781355042630701890846943396740114250183914923090388402050051931499945605771736812568518505814871089081900530655678298471320550901758259560112808762777293888406354372089674272270997718322908725852869874757448197780676376719319553015661422531215766068212098733703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c03661fcc54ebb9be0160330b1b18ed945e119a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (236 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linximpulse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.linximpulse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linximpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linximpulse.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaordicsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datalake.chaordicsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.linximpulse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homolog.linximpulse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.linximpulse.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000167ac93be470000040300483046022100c45b667d32fd3fccc7eda21d383c6a17291457f9e9edced30fd0a7833a5a641a022100c7c10428b2e6d5dd7025387e26fb7b9b2aa51ca816b8035773ce1eeb21771ab20076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167ac93bf0a00000403004730450221008dd4f8e4b372ff4899c4ef09b603af41c607036c43111f6985d6d29dca6e3575022071847bb774d6caa62ff03d6651bcb77f69e634c119ad94b78d518cf650874a29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b016e738b25620d1c2dcfe2c97231c882efafebfee8f6f838a9f44f10ec6844a481e8e52633794514e945eb4dbeee3d11479232a728f636974fc806d154e6f1f3ee065b6f95350bc28e09f3236e0468bfbc77b6eb1f8a9c14df7298ed022181f4cfdc2fa8df627be3a9eb90440775f22530bade2333fbe2d09b3d81ca3c7043a75a61d937937b04f07aef2e70ff957ad3e0a1b2ddc327c847a155e9265b1175f3ebf799665c98ff76de0a6f831a6cef3e091658a30998a888bc18e40b2cb57ad046978ee452d46ba7825e181ee17d38a4ba8cf3f588cac574e390b2903c65aa9d744d6a182a7f506d4e7dd09e8ffe3dedd401788e89b6aabdf07dccd0df0826